Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/ee9c81-6d67-4e33-bd1f-1348ec97b902/1/Jzc1N5JK_K9rsqLLazjrhQAzn9E.roa
File: Jzc1N5JK_K9rsqLLazjrhQAzn9E.roa (raw, json)
Hash identifier: c37u7+7V7zO9cUACPw1X9wuITqfc2J+4zg3NEuS9Gzw=
Subject key identifier: 27:37:35:37:92:4A:FC:AF:6B:B2:A2:CB:6B:38:EB:85:00:33:9F:D1
Certificate issuer: /CN=f174a1a42d40a7fb82a6c08ce97651cb66abf370
Certificate serial: 019423D6F204B56640E365E3DF6C67C5E8FE
Authority key identifier: F1:74:A1:A4:2D:40:A7:FB:82:A6:C0:8C:E9:76:51:CB:66:AB:F3:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8XShpC1Ap_uCpsCM6XZRy2ar83A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/ee9c81-6d67-4e33-bd1f-1348ec97b902/1/Jzc1N5JK_K9rsqLLazjrhQAzn9E.roa
Signing time: Wed 01 Jan 2025 21:47:56 +0000
ROA not before: Wed 01 Jan 2025 21:47:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197320
IP address blocks: 195.20.155.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:f2:04:b5:66:40:e3:65:e3:df:6c:67:c5:e8:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f174a1a42d40a7fb82a6c08ce97651cb66abf370
Validity
Not Before: Jan 1 21:47:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=27373537924afcaf6bb2a2cb6b38eb8500339fd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ad:6a:29:23:0a:4e:f5:df:53:a2:2d:95:c0:
3f:0f:a5:51:96:3e:20:08:3c:6f:da:74:77:61:91:
59:a8:f1:6e:dc:a0:87:30:54:32:2f:f8:de:16:21:
75:6e:1b:0a:b0:03:b7:4a:00:9c:88:52:b8:06:41:
4f:d5:9d:3a:95:e7:9d:69:95:f1:db:65:96:fe:71:
e7:34:73:d9:2e:57:94:be:bc:30:89:9c:c8:f1:bb:
44:ef:44:26:41:8a:04:31:09:d6:68:44:73:14:66:
d1:ff:06:91:3f:11:41:48:ff:3f:62:d7:35:e7:d8:
5b:f5:b4:4e:1a:28:04:90:ce:86:91:ee:7d:ab:a8:
90:d5:2d:27:9b:09:98:01:45:a2:c5:94:7b:76:38:
07:ca:f0:2d:b7:8b:a7:2a:ec:2b:37:dc:fb:6b:13:
28:84:11:bd:2b:02:c0:e9:07:8d:d7:10:c6:4a:ff:
2c:3b:36:a2:3c:7e:6a:29:5e:1a:77:8f:5e:96:7c:
06:df:81:06:1c:e6:77:a5:94:05:4a:e9:86:e5:70:
af:06:d0:f6:5b:fa:97:08:72:b0:e5:ff:72:40:6e:
8d:17:ba:a8:01:82:d9:48:6b:5f:74:51:27:7f:82:
f4:e4:4e:52:6f:d0:72:ef:77:fb:cf:1f:60:83:80:
b4:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:37:35:37:92:4A:FC:AF:6B:B2:A2:CB:6B:38:EB:85:00:33:9F:D1
X509v3 Authority Key Identifier:
keyid:F1:74:A1:A4:2D:40:A7:FB:82:A6:C0:8C:E9:76:51:CB:66:AB:F3:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8XShpC1Ap_uCpsCM6XZRy2ar83A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/ee9c81-6d67-4e33-bd1f-1348ec97b902/1/Jzc1N5JK_K9rsqLLazjrhQAzn9E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/ee9c81-6d67-4e33-bd1f-1348ec97b902/1/8XShpC1Ap_uCpsCM6XZRy2ar83A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.20.155.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:99:ba:44:79:52:ad:6a:ab:a9:52:be:0f:5b:0b:e7:26:ce:
d5:47:9b:54:c6:15:72:d6:42:02:79:aa:62:40:42:4a:0e:b4:
11:96:b3:58:b4:be:1a:f4:5a:d4:cc:6c:3c:9e:e6:54:51:b6:
19:d1:9d:94:82:4c:1c:21:10:26:40:35:97:3c:fa:e0:91:c1:
95:55:45:54:b5:de:7d:20:e5:27:b0:d4:76:67:09:99:49:74:
cd:e1:56:de:0f:5f:6a:33:a4:2e:68:43:b7:3b:ef:e1:2d:8d:
77:ee:9b:11:c7:d0:47:70:67:ad:d4:ca:eb:fa:48:cd:89:52:
13:3a:80:ed:43:8f:84:0d:6b:cf:02:e7:af:1f:a3:6e:68:08:
7b:17:7b:79:9b:3b:bf:69:56:e2:8a:64:dc:89:75:ec:90:5b:
3d:e1:56:3b:44:14:7f:a8:14:36:f6:75:d5:ef:79:fc:02:7c:
3e:e0:5b:cc:02:de:2f:c4:0b:c8:7c:a1:5f:84:5c:4a:ec:81:
6e:01:09:f9:f5:24:d1:c8:93:74:dc:31:3e:ab:c1:e3:b1:66:
8a:11:30:8a:9f:4d:d4:40:1b:94:32:c0:69:33:54:d2:c8:7d:
e3:b7:95:48:72:3e:7e:08:f8:e0:99:93:b8:79:93:18:0b:34:
14:64:43:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:56:14 2025 by rpki-client