Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/27cbd0-a7b9-45fb-9954-78d1144ad967/1/DnVFEpYRkYdsvx6fTEjYM0mnXYg.roa
File: DnVFEpYRkYdsvx6fTEjYM0mnXYg.roa (raw, json)
Hash identifier: Q/XnpIbexx4X2BOItVZgFWxgUIF3KGLUNsRlADlMLPI=
Subject key identifier: 0E:75:45:12:96:11:91:87:6C:BF:1E:9F:4C:48:D8:33:49:A7:5D:88
Certificate issuer: /CN=ce5d4560448f78a4dcdcb791a07dad2163a08cdf
Certificate serial: 019427483854C13D9054EA01CCD2E9EC9052
Authority key identifier: CE:5D:45:60:44:8F:78:A4:DC:DC:B7:91:A0:7D:AD:21:63:A0:8C:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zl1FYESPeKTc3LeRoH2tIWOgjN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/27cbd0-a7b9-45fb-9954-78d1144ad967/1/DnVFEpYRkYdsvx6fTEjYM0mnXYg.roa
Signing time: Thu 02 Jan 2025 13:50:31 +0000
ROA not before: Thu 02 Jan 2025 13:50:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20473
IP address blocks: 195.68.242.0/23 maxlen: 23
195.68.242.0/24 maxlen: 24
195.68.243.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:38:54:c1:3d:90:54:ea:01:cc:d2:e9:ec:90:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce5d4560448f78a4dcdcb791a07dad2163a08cdf
Validity
Not Before: Jan 2 13:50:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0e754512961191876cbf1e9f4c48d83349a75d88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:1f:b9:ab:67:08:60:ac:d0:62:76:32:c7:66:
50:94:e7:df:59:27:43:11:5a:5b:c4:cf:cf:80:bd:
00:4e:81:a2:50:15:b4:e4:f4:81:c6:cb:7f:4e:6c:
8a:d0:57:cb:d1:a4:51:64:8d:a8:4e:ca:8c:be:09:
b9:af:fd:46:7f:c9:ce:4c:16:69:cd:21:24:3f:bb:
1c:c0:f2:eb:3e:3a:83:7f:95:91:a6:0c:48:01:27:
d0:fc:eb:79:93:46:b0:98:68:e8:73:c8:b0:5b:82:
3e:c5:14:06:67:56:9e:d9:c8:4f:24:6f:1b:37:b0:
16:e3:65:ec:b7:31:8c:17:da:05:4d:32:71:03:dc:
91:b1:16:e0:06:10:d0:d5:ca:f2:93:11:a3:da:dd:
4f:f8:83:25:c1:c7:30:8f:b6:c2:2f:69:1a:31:d8:
3b:93:96:33:af:b5:c3:9f:e5:92:49:7c:dd:68:87:
bf:69:f2:fa:45:43:ea:f6:a3:6e:fe:d9:b0:e1:25:
e3:e2:92:4b:62:1c:b6:9e:55:53:6a:13:12:83:5e:
03:da:f4:46:4f:4d:90:83:88:ed:77:fc:bc:80:40:
d3:bd:ad:7c:5d:36:0e:d2:69:8f:a4:a1:b6:f3:6d:
09:41:a6:9b:f7:fe:fc:f8:8e:5c:c1:e8:ba:be:1d:
8b:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:75:45:12:96:11:91:87:6C:BF:1E:9F:4C:48:D8:33:49:A7:5D:88
X509v3 Authority Key Identifier:
keyid:CE:5D:45:60:44:8F:78:A4:DC:DC:B7:91:A0:7D:AD:21:63:A0:8C:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zl1FYESPeKTc3LeRoH2tIWOgjN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/27cbd0-a7b9-45fb-9954-78d1144ad967/1/DnVFEpYRkYdsvx6fTEjYM0mnXYg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/27cbd0-a7b9-45fb-9954-78d1144ad967/1/zl1FYESPeKTc3LeRoH2tIWOgjN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.68.242.0/23
Signature Algorithm: sha256WithRSAEncryption
35:34:9c:97:1b:34:b4:cd:b7:c2:f6:fe:68:09:1d:96:08:ad:
2b:cf:98:ec:85:14:e2:b9:db:ef:7c:0a:7d:2f:5a:03:42:e8:
6a:f0:79:d8:3b:2c:cb:9f:a6:4e:e2:fe:ba:02:3c:2a:89:11:
2d:d7:73:9c:1c:08:6b:d7:b8:24:ab:76:24:07:8c:ba:bc:65:
c0:11:c6:8e:cf:6c:e7:d7:94:fe:24:b6:79:69:2d:aa:12:ef:
55:54:f4:ca:27:8b:5e:11:63:ae:0a:d6:cf:42:56:c6:b7:3c:
88:8d:34:39:28:a4:15:56:63:d9:37:96:ab:28:0b:12:fc:db:
b3:c6:eb:aa:6e:d2:1d:de:2d:7c:f5:da:86:88:d2:dc:23:a0:
4e:74:91:91:77:95:7f:d2:ab:c0:05:d0:a8:ae:8d:3a:5b:bf:
e5:57:f4:a6:c6:3c:9c:a9:41:d4:2e:2a:6c:f6:c8:22:a3:3c:
00:75:11:e3:54:ce:b8:b8:e3:e0:d0:ee:78:39:c1:c6:43:c2:
5e:d6:56:09:60:95:28:d8:01:9e:9f:01:cb:fe:be:14:cb:d5:
fb:a7:9f:d0:0b:8c:17:3e:e9:d1:2f:3b:a5:5d:4b:d1:88:f8:
e3:0c:8c:45:3c:d4:c8:d6:08:83:73:90:3d:f4:c2:ee:aa:07:
12:1e:af:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:15:12 2025 by rpki-client