Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Vi13kWhKPfuP04_8DXYyrOqx5sw.roa
File: Vi13kWhKPfuP04_8DXYyrOqx5sw.roa (raw, json)
Hash identifier: YB9s/wJWVisoP3BX4f1hLD6ryeas2QCMF2sw/qIzc1g=
Subject key identifier: 56:2D:77:91:68:4A:3D:FB:8F:D3:8F:FC:0D:76:32:AC:EA:B1:E6:CC
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0194ACDA4EE358CB1800D2AA479E1AF10097
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Vi13kWhKPfuP04_8DXYyrOqx5sw.roa
Signing time: Tue 28 Jan 2025 12:19:35 +0000
ROA not before: Tue 28 Jan 2025 12:19:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204769
IP address blocks: 195.133.78.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ac:da:4e:e3:58:cb:18:00:d2:aa:47:9e:1a:f1:00:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 28 12:19:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=562d7791684a3dfb8fd38ffc0d7632aceab1e6cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:39:4e:0c:43:49:20:91:31:d7:db:ed:e3:b5:
1f:05:79:e4:c8:d2:0d:f9:c7:77:f4:7c:16:18:95:
55:26:26:30:34:a7:31:bd:c0:e6:24:08:97:a3:64:
63:30:61:f9:2b:65:e2:94:f5:55:a7:23:53:84:ba:
62:0f:76:d2:9d:ba:a2:ca:47:4f:b0:9e:38:20:e0:
59:d6:49:45:a4:ad:b3:f0:a6:f6:49:5b:e7:d9:f3:
d4:dc:de:8e:e3:29:e0:b7:b5:9e:7b:13:92:26:96:
c3:bd:97:ad:76:79:80:eb:1d:8c:ca:76:5f:31:d1:
43:2e:52:c0:0c:56:38:dd:3c:b6:0b:09:9f:22:51:
00:8c:8a:df:39:62:ab:29:7a:73:33:8b:19:ab:e1:
6b:ce:42:b1:ea:76:67:61:ce:d3:c9:01:00:71:09:
b0:1d:3f:c6:58:b6:a6:4a:c5:62:fa:2c:0a:38:67:
e0:e0:ce:15:01:41:be:39:4f:1e:5e:fa:22:17:3f:
33:03:37:fb:ad:8c:8f:87:62:8f:be:02:44:24:9a:
15:7b:e5:9d:e5:84:f7:d1:e4:da:11:73:46:ee:30:
24:6e:ec:b3:fb:0e:97:e0:9a:57:79:c0:57:ca:f3:
a0:9d:31:af:b3:9c:a5:5a:e8:12:0a:0f:d5:2d:f8:
ac:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:2D:77:91:68:4A:3D:FB:8F:D3:8F:FC:0D:76:32:AC:EA:B1:E6:CC
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Vi13kWhKPfuP04_8DXYyrOqx5sw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.133.78.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:76:a9:db:cd:91:17:df:a7:50:97:0f:71:61:e4:84:98:23:
43:6a:12:5c:b8:be:90:85:51:5a:bb:2e:16:87:52:cf:fc:f6:
3d:b9:4c:ab:06:a7:f9:46:69:e1:2a:d8:a8:e5:eb:a3:b5:f0:
35:35:a8:5f:ff:f5:7f:dd:bb:c3:8e:4c:5a:f5:a2:06:c0:35:
b0:63:d2:86:12:1a:15:71:53:a8:74:ac:cf:4d:e0:55:e9:0e:
46:c0:92:67:90:79:db:d6:97:19:dc:e1:d9:3b:39:dc:db:b6:
ed:3e:75:48:d0:8c:78:8e:80:c1:42:61:a6:dd:a6:c7:d3:dd:
3c:26:d6:0c:18:f0:87:dd:d9:8b:6c:d6:75:d2:51:7a:6d:36:
c2:24:db:6c:32:d4:74:4c:99:a7:4d:2e:d5:12:58:9d:31:b7:
87:a5:b7:c1:5f:cb:53:91:2b:25:82:d2:ec:84:8b:16:52:f7:
c7:fe:d7:02:69:da:a1:18:15:73:91:2d:7f:ed:9e:0f:d9:94:
1e:4f:e7:87:e7:b4:58:f2:fc:1b:e5:0a:64:4a:df:01:1a:16:
9e:7a:6b:8a:fb:cd:b8:34:ea:19:97:40:d4:80:92:b9:65:87:
b0:48:10:9a:b6:f3:54:35:d7:6a:93:1d:78:b4:2b:9c:fe:37:
b0:b8:39:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:40:00 2025 by rpki-client