Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/OrAqrhrBllmvUWbZf0pond9hPqI.roa
File: OrAqrhrBllmvUWbZf0pond9hPqI.roa (raw, json)
Hash identifier: 3xrjzpulHjH580HV3AU4XFj6ROvV3qpo+ZXN7POYjWo=
Subject key identifier: 3A:B0:2A:AE:1A:C1:96:59:AF:51:66:D9:7F:4A:68:9D:DF:61:3E:A2
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0194282463CE704661F9FB6BD55437231D78
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/OrAqrhrBllmvUWbZf0pond9hPqI.roa
Signing time: Thu 02 Jan 2025 17:51:00 +0000
ROA not before: Thu 02 Jan 2025 17:51:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20473
IP address blocks: 195.178.111.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:63:ce:70:46:61:f9:fb:6b:d5:54:37:23:1d:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 17:51:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3ab02aae1ac19659af5166d97f4a689ddf613ea2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:90:0f:f0:2e:26:2b:01:22:05:f9:ac:11:df:
9f:30:12:d1:9a:08:c1:22:be:1a:d8:50:0c:d3:3a:
a4:9a:bd:3d:ed:42:42:5a:31:66:e3:8d:24:02:04:
a9:5c:9b:b7:32:cc:eb:0c:e7:e1:18:bf:51:28:f1:
78:2f:8b:41:52:78:0c:f4:fa:00:9a:76:19:80:e8:
ca:aa:59:17:4b:1a:9a:ce:4a:e6:1a:f8:d1:cd:de:
3e:cb:90:ee:b6:5a:c2:71:0a:a9:0d:8e:68:67:71:
04:59:eb:79:73:8b:db:82:87:3c:e9:92:d4:75:aa:
f5:23:7c:8b:c1:a0:8d:e7:59:ef:d3:02:75:ac:21:
a3:fd:66:0d:04:68:a6:cb:43:2f:98:6a:3c:98:07:
7d:69:7a:d6:5a:28:08:7b:6c:f6:cc:9b:08:84:71:
d9:60:f6:10:74:0a:33:2b:8c:c7:40:36:43:5f:00:
df:af:f6:4f:2c:64:81:86:19:23:d5:36:8c:d4:4d:
90:a1:09:38:4e:66:54:cc:cb:29:24:ef:31:85:32:
d8:04:5e:3c:17:38:98:e1:7c:f2:69:d7:17:27:a0:
23:f6:1a:fd:74:16:57:23:48:3a:37:68:b9:80:b1:
c4:13:b2:b5:2a:fb:9a:6b:6b:03:19:11:3d:25:76:
dd:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:B0:2A:AE:1A:C1:96:59:AF:51:66:D9:7F:4A:68:9D:DF:61:3E:A2
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/OrAqrhrBllmvUWbZf0pond9hPqI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.178.111.0/24
Signature Algorithm: sha256WithRSAEncryption
39:e3:90:ec:8b:51:af:13:3d:7c:59:77:b3:fb:c3:8a:34:f2:
7a:fa:c8:91:28:ce:aa:38:d8:9f:76:cc:c5:65:99:a0:a5:7b:
e1:1f:ff:bd:d1:98:e6:66:2a:95:83:c4:fc:b5:d3:40:d4:d0:
14:7a:ef:a3:4e:e0:31:fa:db:f7:97:32:7f:41:81:e4:76:b4:
f4:29:73:d5:f7:29:ac:c5:af:92:b0:b2:ef:11:39:da:52:23:
a0:d3:45:0f:8f:3c:ef:44:17:75:ce:c3:5c:ab:22:00:d8:ba:
44:ef:f8:41:2a:7a:12:41:02:92:60:5f:e8:ad:6d:74:11:64:
f6:bf:34:65:ba:b5:50:d1:db:11:1e:c8:4a:b3:d4:82:a6:b0:
4d:8c:96:3a:7e:3c:60:df:61:60:63:1b:c3:1f:f6:9f:8c:28:
52:3d:2a:31:36:04:13:90:c1:13:f5:20:57:6b:fd:42:b0:08:
88:4a:21:99:5b:54:7e:56:9a:60:8f:77:64:10:54:91:25:3e:
03:f0:5c:57:69:86:35:7c:e7:57:21:c0:6c:71:58:98:77:0b:
07:2d:9f:dc:d2:d3:c1:55:5c:b1:f6:cf:84:09:57:2a:db:f0:
32:68:4b:c4:b3:d2:b0:8f:fc:e5:ee:7f:41:57:db:01:4b:fe:
c9:9d:0b:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:58:47 2025 by rpki-client