Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/I6vZ8VOpECMNEM_p-ZiDlI2fRxM.roa
File: I6vZ8VOpECMNEM_p-ZiDlI2fRxM.roa (raw, json)
Hash identifier: mGBX7KIjoeXPaxMpHirGGSpgWBgifIgHONo8LPL+d4Y=
Subject key identifier: 23:AB:D9:F1:53:A9:10:23:0D:10:CF:E9:F9:98:83:94:8D:9F:47:13
Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial: 019428281C7C93DBA26300291B21817A1134
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/I6vZ8VOpECMNEM_p-ZiDlI2fRxM.roa
Signing time: Thu 02 Jan 2025 17:55:04 +0000
ROA not before: Thu 02 Jan 2025 17:55:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51383
IP address blocks: 195.34.97.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:28:1c:7c:93:db:a2:63:00:29:1b:21:81:7a:11:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Validity
Not Before: Jan 2 17:55:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=23abd9f153a910230d10cfe9f99883948d9f4713
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:a3:b5:dc:0f:f1:c1:0a:62:dd:b1:2d:f9:0e:
44:e4:ee:29:81:5b:ab:29:50:93:5d:53:d9:0c:d2:
4e:bd:b1:48:24:b4:00:53:a2:62:92:0e:ad:ca:e0:
24:a5:08:9f:53:4c:f3:cc:7b:f1:b5:43:37:66:04:
16:7e:b6:34:7b:98:07:44:08:c2:a4:c9:8e:ca:4f:
87:41:5f:15:b4:e2:e2:61:24:cc:c3:b2:ad:91:fc:
ff:3a:2b:cf:13:a6:4f:11:59:d6:7e:0f:7a:93:15:
84:da:ce:a8:f5:ba:cb:15:56:e5:f7:af:e3:02:03:
30:0d:01:5b:0f:24:96:56:b2:b9:0a:4f:de:c9:dd:
5a:1a:22:1d:86:8c:21:c9:c4:ff:be:fb:a9:7f:a7:
58:ef:41:61:e6:87:46:9f:3c:b6:89:54:07:18:7f:
ec:00:45:6f:7d:ea:76:b2:3b:a7:af:2f:d6:51:eb:
8d:b8:30:64:aa:25:bd:61:67:41:91:ad:92:dd:e6:
93:a7:48:d5:b1:4b:9b:84:2a:a2:d4:9b:39:15:75:
3b:1f:87:b5:84:c8:f0:c8:49:1f:8f:16:f0:2e:50:
55:43:a8:68:55:ee:cf:57:92:68:d5:0a:df:f4:59:
6b:e6:1b:92:d8:c3:93:9b:bd:97:d8:de:2d:a1:f4:
1c:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:AB:D9:F1:53:A9:10:23:0D:10:CF:E9:F9:98:83:94:8D:9F:47:13
X509v3 Authority Key Identifier:
keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/I6vZ8VOpECMNEM_p-ZiDlI2fRxM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.34.97.0/24
Signature Algorithm: sha256WithRSAEncryption
13:30:4c:9a:7d:d2:f5:c5:e6:94:be:c9:e2:16:43:fe:ad:25:
88:ad:30:6e:de:48:93:cc:d3:cb:c7:aa:a9:28:fb:c9:3d:77:
bf:a3:13:7b:23:52:61:b1:d3:2c:71:c1:e3:a0:4d:91:ee:ea:
4b:96:f0:15:bd:df:17:2e:36:34:f2:4f:1c:69:dd:0b:df:a1:
d0:d4:27:df:f0:f2:35:92:93:0a:45:4d:98:8c:56:0d:2b:4a:
9b:eb:35:5a:c9:2e:db:6d:0d:bb:53:01:67:4a:f4:de:f4:e5:
54:f8:07:33:92:8b:9a:ca:75:3e:ec:f9:0a:b5:2a:ce:2c:86:
39:56:0a:a1:e3:5e:09:13:b8:44:19:eb:a6:1b:08:a3:b7:bd:
b8:34:d9:6a:b9:e8:0b:2d:62:8c:d6:d3:5c:7d:2c:18:22:84:
5a:e6:db:2a:c9:78:16:2d:70:8d:1e:a5:12:bf:b5:1d:4e:94:
dc:1d:1d:f5:37:a3:90:b4:fd:fa:a0:b0:2b:f4:8c:db:fe:8c:
62:5b:12:15:fc:27:45:9d:61:66:4f:3f:c1:60:9d:b5:59:40:
b2:1c:57:30:89:b8:b0:98:1f:f5:38:5a:96:4e:ea:a7:ff:70:
c7:a5:f5:44:b9:01:44:75:1c:d6:84:a0:30:4a:56:1d:83:15:
ba:b5:00:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:43:13 2025 by rpki-client