
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/fEpq9DdIP9_2nad6jXW1KwPbOmY.roa
File: fEpq9DdIP9_2nad6jXW1KwPbOmY.roa (raw, json)
Hash identifier: jNRyz0mfdBPIr+myxBnVzRJNjsmPS2tkxn+QYcZLgCU=
Subject key identifier: 7C:4A:6A:F4:37:48:3F:DF:F6:9D:A7:7A:8D:75:B5:2B:03:DB:3A:66
Certificate issuer: /CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
Certificate serial: 01941F8C7256444F1F2734C601D84F0D5718
Authority key identifier: 08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/fEpq9DdIP9_2nad6jXW1KwPbOmY.roa
Signing time: Wed 01 Jan 2025 01:48:05 +0000
ROA not before: Wed 01 Jan 2025 01:48:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207239
IP address blocks: 195.64.140.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:72:56:44:4f:1f:27:34:c6:01:d8:4f:0d:57:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
Validity
Not Before: Jan 1 01:48:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7c4a6af437483fdff69da77a8d75b52b03db3a66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:59:ef:93:26:e2:13:51:23:74:d4:d7:a8:39:
bc:6e:40:58:e9:23:ee:e0:63:92:7d:c4:d9:75:77:
f0:5d:7e:4e:bd:d7:56:7b:58:a8:6c:0f:db:9f:65:
5e:2f:27:fe:0e:a1:27:63:7d:49:99:6a:22:83:98:
e0:10:07:3e:cc:66:28:5a:d7:58:c9:f3:06:12:c3:
e7:8f:53:8a:89:6a:81:b9:ed:9c:d4:14:29:d0:5f:
4e:5c:8e:80:98:77:65:70:df:7b:c2:ee:30:6c:d8:
f8:16:08:04:30:6b:a2:1a:b8:27:46:eb:b4:e9:65:
b9:08:18:7e:71:cb:55:d8:31:a3:2c:a7:6c:26:bd:
79:bd:d5:6d:25:dd:bd:51:5b:18:8a:c4:39:ac:82:
e0:74:6e:e4:3f:a7:4c:73:c9:57:f4:42:15:9b:7a:
58:24:d0:c1:ca:e6:b5:5b:f7:15:8b:e1:ec:61:2d:
86:a0:65:75:16:48:53:c3:6b:c9:fe:cc:57:57:bd:
75:8a:7a:97:85:ea:4f:c0:77:1f:71:bf:92:40:8a:
68:51:a4:74:6c:14:43:d8:f7:59:53:08:9c:e4:57:
fc:dc:3b:6d:24:a8:75:cf:2c:8d:5f:5f:a2:5a:00:
bb:92:78:11:49:5f:64:b1:80:2f:7f:92:48:48:70:
33:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:4A:6A:F4:37:48:3F:DF:F6:9D:A7:7A:8D:75:B5:2B:03:DB:3A:66
X509v3 Authority Key Identifier:
keyid:08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/fEpq9DdIP9_2nad6jXW1KwPbOmY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.64.140.0/24
Signature Algorithm: sha256WithRSAEncryption
37:c1:47:d4:fa:c7:fc:70:65:16:96:be:a3:0c:29:43:cf:79:
b2:1d:66:2b:4f:54:dd:1b:d8:8d:e1:ed:0a:a5:be:cc:dd:da:
9b:c9:fd:f2:6b:fb:9f:f2:eb:42:37:27:05:f8:5d:3b:e3:4a:
f4:ef:67:61:ae:5f:8a:3a:d0:34:93:c9:3c:42:e0:8c:e4:16:
99:07:72:a8:28:4e:25:59:d8:28:dc:b4:8f:19:3c:51:88:36:
61:01:2c:1a:e8:0d:1a:66:e0:f9:dd:2d:25:08:a4:42:aa:3c:
e2:3c:9c:b8:0e:74:64:0e:8c:07:1e:49:f7:9a:eb:91:d8:42:
86:04:02:2d:ce:51:df:60:ad:6d:65:ee:f5:f4:34:6a:fa:b2:
e7:52:29:43:d9:ed:53:41:b2:68:f5:bf:e2:00:bb:33:75:df:
e2:f1:61:d2:90:ac:25:08:1a:a0:a3:18:1d:1b:53:1b:89:e8:
a3:47:6e:9d:01:66:01:22:b9:09:68:a8:8e:42:35:63:06:19:
ae:05:72:c5:29:1a:83:8f:d3:36:0e:3c:2b:59:f2:a4:49:08:
fe:17:d6:96:cd:fc:0b:2f:d0:b0:86:a2:54:ef:57:5e:61:d8:
00:e3:e5:1c:ac:5a:45:1d:9a:90:44:6b:78:dd:a0:37:83:77:
1b:95:e3:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:39:50 2025 by rpki-client