Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/Gm9NfecPR-RUq_slL2NKmzGqQ1c.roa
File: Gm9NfecPR-RUq_slL2NKmzGqQ1c.roa (raw, json)
Hash identifier: tkU2/2KHzDAlfUyxsnryBif6WpEicFze6N39RJoBTkM=
Subject key identifier: 1A:6F:4D:7D:E7:0F:47:E4:54:AB:FB:25:2F:63:4A:9B:31:AA:43:57
Certificate issuer: /CN=4f2d30b015ec4ef1b0d3c64347c8d1b598293f81
Certificate serial: 0194228E3B7337B904FDB251210CB5DA560C
Authority key identifier: 4F:2D:30:B0:15:EC:4E:F1:B0:D3:C6:43:47:C8:D1:B5:98:29:3F:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/Gm9NfecPR-RUq_slL2NKmzGqQ1c.roa
Signing time: Wed 01 Jan 2025 15:48:54 +0000
ROA not before: Wed 01 Jan 2025 15:48:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215826
IP address blocks: 195.10.205.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:3b:73:37:b9:04:fd:b2:51:21:0c:b5:da:56:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f2d30b015ec4ef1b0d3c64347c8d1b598293f81
Validity
Not Before: Jan 1 15:48:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1a6f4d7de70f47e454abfb252f634a9b31aa4357
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:00:81:78:a8:ab:7d:46:07:1a:15:bc:91:13:
47:c9:32:24:e3:97:27:bb:d5:ef:0c:60:88:01:49:
74:d4:59:3d:20:78:f3:b4:d9:dc:68:48:9c:3c:d9:
76:6d:f7:1a:a9:4b:cf:33:4f:c2:8d:c2:43:45:50:
54:41:9c:ea:98:dd:c8:e9:cf:22:10:0a:82:4e:d6:
95:b7:54:e9:8f:49:e8:c2:87:fa:9c:96:13:a6:fb:
c4:8d:12:1a:1c:18:d9:64:86:07:26:ab:50:3a:b4:
b5:cb:fe:a7:71:7f:74:96:8e:b5:c5:9e:d1:a9:8e:
ab:78:3e:6c:fe:bb:47:b0:11:4c:ac:a6:4d:b8:ad:
0b:b1:22:e3:5f:da:cd:eb:9e:e1:3f:0a:b6:6e:16:
6a:fa:44:43:91:06:ab:a6:cb:11:4c:3f:a7:2b:71:
2b:e2:62:ce:37:b5:8c:8e:f6:dc:c4:a1:3e:8c:0a:
66:57:41:12:07:ce:c1:db:bf:13:c3:20:a4:9e:cd:
2e:58:0c:34:99:36:ad:23:29:01:d1:98:7e:93:14:
4f:f2:fa:da:45:08:b4:ef:6d:66:22:da:d1:23:08:
21:1a:1d:28:6b:15:3c:81:c8:97:c7:88:57:6b:dc:
56:e4:c1:3f:f5:89:c2:5d:fa:85:67:ce:4b:a3:fc:
a2:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:6F:4D:7D:E7:0F:47:E4:54:AB:FB:25:2F:63:4A:9B:31:AA:43:57
X509v3 Authority Key Identifier:
keyid:4F:2D:30:B0:15:EC:4E:F1:B0:D3:C6:43:47:C8:D1:B5:98:29:3F:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/Gm9NfecPR-RUq_slL2NKmzGqQ1c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.10.205.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:2a:d1:38:aa:23:73:33:d6:d1:ed:eb:15:91:14:00:c6:95:
30:de:32:95:45:7e:2d:8e:06:d5:6e:0a:18:bc:7c:16:74:dd:
e8:d2:9d:03:13:b7:55:fb:2b:6c:ba:a4:4c:1a:47:e2:ba:03:
1a:5c:84:de:fa:64:9b:67:8c:3b:b8:bd:2e:4d:a0:e9:d9:79:
31:54:93:3f:8d:5c:6e:93:e9:fb:a4:6c:81:e3:56:95:57:b4:
b1:90:43:ae:49:6f:28:15:26:73:5b:6c:cc:8f:32:87:3b:e7:
ca:83:80:97:ac:31:90:ee:b6:b9:67:b9:51:af:e5:14:e6:d4:
23:d7:7e:30:95:f6:65:21:07:c3:09:21:2f:22:02:bd:9d:38:
de:df:c6:b6:24:ed:26:1f:0c:23:ab:60:7a:66:0f:e1:da:2f:
20:37:4c:9c:c4:68:dd:3a:87:2b:40:c5:a3:1d:bc:dc:94:de:
12:be:2c:99:87:41:96:11:cd:de:bc:9e:bb:28:66:d6:74:5a:
ec:cc:b3:a2:43:5d:85:00:5b:8b:76:9f:4d:e8:f9:4e:7f:7e:
fa:6c:4c:7d:00:e5:60:69:be:1e:2a:b3:32:79:c3:4c:e4:15:
52:85:89:60:19:3a:a2:cf:b1:3c:db:24:39:26:bc:23:24:f6:
56:95:d3:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 06:32:33 2025 by rpki-client