Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/47e909-7744-4db3-b691-a7b9c7115c1e/1/e0RKB6c0KB07YznYp0xB1MsPmzk.roa
File: e0RKB6c0KB07YznYp0xB1MsPmzk.roa (raw, json)
Hash identifier: qPmTA1Xz3mqQ1fzxdYI8NmB7dWpfMeJeVGXYLIJQJaY=
Subject key identifier: 7B:44:4A:07:A7:34:28:1D:3B:63:39:D8:A7:4C:41:D4:CB:0F:9B:39
Certificate issuer: /CN=00ccfa2c166f86c3cd01c6ebae193745e1eb0f29
Certificate serial: 0194266C3E3B6E16AF5A4AAAF6F7B3D1DFF1
Authority key identifier: 00:CC:FA:2C:16:6F:86:C3:CD:01:C6:EB:AE:19:37:45:E1:EB:0F:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AMz6LBZvhsPNAcbrrhk3ReHrDyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/47e909-7744-4db3-b691-a7b9c7115c1e/1/e0RKB6c0KB07YznYp0xB1MsPmzk.roa
Signing time: Thu 02 Jan 2025 09:50:15 +0000
ROA not before: Thu 02 Jan 2025 09:50:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60458
IP address blocks: 195.60.239.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:3e:3b:6e:16:af:5a:4a:aa:f6:f7:b3:d1:df:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00ccfa2c166f86c3cd01c6ebae193745e1eb0f29
Validity
Not Before: Jan 2 09:50:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7b444a07a734281d3b6339d8a74c41d4cb0f9b39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b1:17:f1:e3:70:b3:23:e1:33:84:e6:3a:c9:
ae:22:a6:00:d4:a1:4c:9e:15:38:af:28:1c:4a:99:
bd:3f:ad:9e:07:98:47:c8:bc:3b:2c:45:e9:72:11:
0d:c1:16:e3:ff:f3:c9:87:4d:6a:e0:48:c3:79:3b:
35:e9:db:8b:d6:92:a0:97:c9:a0:cf:17:c1:b8:1f:
fe:db:54:cd:0d:01:be:d6:9e:93:6f:75:31:f1:0f:
09:d6:ef:af:df:dc:25:be:ad:0b:e3:ad:ae:bb:a7:
3e:58:28:01:cc:4c:b3:d9:a3:8b:6f:f8:8a:0c:f1:
8d:de:d8:42:cb:1e:ea:e3:d8:93:3d:71:27:c9:c1:
7c:f3:6f:2b:56:f6:a9:6c:c7:c5:61:ff:ba:63:a4:
11:9f:3b:18:35:d3:47:0e:78:e7:a3:b6:a7:db:ee:
c5:a4:0b:1e:81:77:7c:c3:e4:e0:ae:76:66:78:18:
02:25:ec:67:bd:98:ea:f2:d0:af:3a:a2:42:8f:08:
fc:5e:54:7d:67:cb:93:78:48:06:ac:9c:e8:e9:16:
d5:a6:ad:5a:60:31:b7:93:0a:cd:0e:b4:39:82:03:
4a:ca:21:81:d9:0e:da:8f:9e:82:90:4e:e8:6d:36:
1f:a2:c9:c8:1a:28:6d:aa:85:3d:f1:c4:2c:bb:14:
a9:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:44:4A:07:A7:34:28:1D:3B:63:39:D8:A7:4C:41:D4:CB:0F:9B:39
X509v3 Authority Key Identifier:
keyid:00:CC:FA:2C:16:6F:86:C3:CD:01:C6:EB:AE:19:37:45:E1:EB:0F:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AMz6LBZvhsPNAcbrrhk3ReHrDyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/47e909-7744-4db3-b691-a7b9c7115c1e/1/e0RKB6c0KB07YznYp0xB1MsPmzk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/47e909-7744-4db3-b691-a7b9c7115c1e/1/AMz6LBZvhsPNAcbrrhk3ReHrDyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.60.239.0/24
Signature Algorithm: sha256WithRSAEncryption
14:e2:cb:9d:0c:64:dd:a5:8f:a7:d8:33:a9:ba:50:f7:a8:cc:
48:33:55:77:d6:7d:9c:86:92:08:6e:56:de:e9:b5:cc:f6:ba:
e3:3e:c8:79:d6:e3:1d:ab:88:e7:48:7f:37:ac:b7:d6:a4:48:
c5:09:4f:bb:87:8b:1a:c8:40:19:8d:a5:de:14:49:bc:ea:2b:
85:1d:1e:4d:0a:a8:7f:a4:ee:c3:94:18:e9:c6:a0:cb:36:56:
6d:2b:c1:f8:42:ae:9d:4f:ad:13:7b:21:59:8e:44:e7:04:77:
98:ac:52:87:98:55:fd:e3:ee:39:7b:7f:18:a1:46:82:d3:5c:
8f:07:dd:26:9f:d8:ba:95:53:0c:d0:a7:52:c3:25:00:42:97:
43:ec:88:1c:10:fb:74:20:3a:65:cd:7b:d3:94:25:f7:0f:c9:
9a:9b:e0:79:09:cd:22:96:9d:c9:fc:68:53:2d:60:35:4d:74:
e1:56:a5:c7:a8:89:cb:95:be:23:91:cf:7c:48:00:4a:40:91:
30:e7:a1:d0:85:d6:13:5d:27:26:a6:8f:e8:d0:05:90:7f:03:
bd:83:62:b7:3c:4e:07:de:25:ae:fc:75:00:f9:30:7a:06:7b:
98:86:24:6c:f6:41:71:7f:c0:0c:51:1e:43:78:2d:91:19:3e:
61:ff:c5:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:19:28 2025 by rpki-client