Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/tFFJsIypHJ-ye5TiUahEza1WkhY.roa
File: tFFJsIypHJ-ye5TiUahEza1WkhY.roa (raw, json)
Hash identifier: 9hBEBrLy37c9QMP8hOxGH4OuDQA25DhF8noZjDYy7vg=
Subject key identifier: B4:51:49:B0:8C:A9:1C:9F:B2:7B:94:E2:51:A8:44:CD:AD:56:92:16
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0194282510CAFF7DB354CB0EAA9A1CFEAE50
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/tFFJsIypHJ-ye5TiUahEza1WkhY.roa
Signing time: Thu 02 Jan 2025 17:51:45 +0000
ROA not before: Thu 02 Jan 2025 17:51:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214504
IP address blocks: 195.133.93.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:25:10:ca:ff:7d:b3:54:cb:0e:aa:9a:1c:fe:ae:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 2 17:51:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b45149b08ca91c9fb27b94e251a844cdad569216
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e3:5d:b5:3a:4a:2e:31:96:4d:b2:98:6b:14:
62:fc:6c:15:2a:e1:fb:5e:33:b3:c7:96:c8:92:55:
b4:10:67:6f:8c:98:8b:90:7d:02:e4:fa:06:82:7a:
58:8c:48:f2:4b:a5:0f:9f:e0:83:da:a2:ee:5c:7b:
80:b0:3f:ac:b7:f3:76:32:c1:8d:b5:e7:03:aa:b8:
de:95:2d:b0:81:86:c2:0c:71:b2:d0:76:c7:5c:d7:
f7:d7:36:d6:47:05:05:94:58:6c:a6:cd:05:5c:c9:
db:86:4b:04:c9:7f:6e:1b:6e:93:c6:f6:10:f0:fa:
c8:dd:67:3d:64:22:be:86:c9:7b:c7:dc:42:43:cf:
5f:d7:4c:83:7e:27:fc:6f:03:5d:3b:cd:d2:2b:73:
41:ef:04:50:db:45:f6:d0:f8:93:00:1c:68:60:08:
14:f2:8e:bb:4e:e8:2b:b3:98:f1:3d:ed:db:8e:85:
ee:6a:4f:8a:13:60:78:5c:16:72:69:07:6b:d4:a7:
73:b6:04:d1:59:8d:97:ba:9e:ef:eb:ea:23:a9:40:
41:94:77:c6:9c:d0:6c:cc:58:7e:86:95:df:9a:19:
05:fa:53:3f:45:5e:8a:b9:66:a0:38:45:69:5f:75:
5d:77:15:cf:5f:3e:e2:d7:d4:42:87:04:51:76:24:
59:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:51:49:B0:8C:A9:1C:9F:B2:7B:94:E2:51:A8:44:CD:AD:56:92:16
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/tFFJsIypHJ-ye5TiUahEza1WkhY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.133.93.0/24
Signature Algorithm: sha256WithRSAEncryption
31:c7:82:8e:4e:72:e0:2f:f5:46:af:31:d7:3b:88:60:e4:c8:
c7:e8:39:2b:80:29:34:ad:de:28:e1:63:03:64:72:26:ff:59:
33:d7:9b:e9:4d:58:a2:f8:17:62:31:f8:34:45:99:ed:a6:1e:
1f:71:f4:89:dd:c7:43:af:1b:70:df:dd:b7:d0:4b:05:6d:9e:
d2:df:54:5e:ea:bc:05:ca:20:ed:ff:70:ee:48:07:bb:d7:c6:
4d:17:e5:6f:6d:47:95:22:53:5f:08:d9:2e:8e:ed:09:1b:19:
fc:11:50:cb:f9:ea:a1:45:ec:ba:f2:3f:35:4b:f3:22:f3:11:
77:97:d1:be:6d:f3:7c:08:91:3a:0d:a3:99:e8:2d:3c:60:56:
61:ec:55:e2:5b:28:fc:70:b2:b2:43:16:ab:0f:a1:ff:7d:9a:
86:37:95:88:31:6e:f2:88:aa:b4:e9:be:4d:54:b1:68:60:72:
f8:91:71:63:aa:4b:f4:3c:1b:16:c8:3a:3a:ca:df:12:22:a3:
b5:66:9e:22:b9:3e:c7:41:1a:56:df:fa:e7:ec:ae:93:27:7a:
b5:f1:34:2d:fa:7c:46:e1:b8:e4:85:93:4b:79:67:ae:4b:5b:
87:c8:d9:98:b5:fd:09:85:7b:36:a6:72:61:1e:b7:66:39:1f:
d0:a5:e0:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:34:07 2025 by rpki-client