Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/_ASEE_JbkNj9mLPsLIOdutxmpec.roa
File: _ASEE_JbkNj9mLPsLIOdutxmpec.roa (raw, json)
Hash identifier: xn3yAMk/HU2tD26MclTTMfVdBRfDTr+I4yIe98ZiI9s=
Subject key identifier: FC:04:84:13:F2:5B:90:D8:FD:98:B3:EC:2C:83:9D:BA:DC:66:A5:E7
Certificate issuer: /CN=feb84d9f8f9e33156589a5ebf722203a899e0a51
Certificate serial: 019426D89C4D4850ED0E016151E6B5974A70
Authority key identifier: FE:B8:4D:9F:8F:9E:33:15:65:89:A5:EB:F7:22:20:3A:89:9E:0A:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_rhNn4-eMxVliaXr9yIgOomeClE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/_ASEE_JbkNj9mLPsLIOdutxmpec.roa
Signing time: Thu 02 Jan 2025 11:48:37 +0000
ROA not before: Thu 02 Jan 2025 11:48:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206352
IP address blocks: 195.210.98.0/24 maxlen: 24
195.210.100.0/22 maxlen: 22
195.210.110.0/23 maxlen: 23
195.210.122.0/24 maxlen: 24
195.210.124.0/23 maxlen: 23
195.210.126.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d8:9c:4d:48:50:ed:0e:01:61:51:e6:b5:97:4a:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=feb84d9f8f9e33156589a5ebf722203a899e0a51
Validity
Not Before: Jan 2 11:48:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fc048413f25b90d8fd98b3ec2c839dbadc66a5e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:3d:b2:18:dd:2c:f5:e5:4d:74:36:a5:4e:ed:
30:fb:89:bf:0e:1e:fb:e7:3b:24:1f:5f:9d:78:8c:
5d:63:3f:e3:f5:f7:4a:30:a2:bc:80:ca:f0:70:ca:
00:07:f2:04:d1:f7:b2:38:79:1e:26:23:05:88:b8:
0c:f8:3d:6d:8d:c8:7c:35:42:d4:17:58:d3:c1:e0:
9a:91:84:49:80:d5:11:28:3b:77:1e:4f:4e:72:a6:
12:9a:2e:0b:4a:0c:1c:6d:ef:f0:49:0e:e8:31:9e:
80:7b:22:c8:0d:b7:38:07:a1:0d:ee:b4:e6:52:06:
3c:0d:a4:36:0a:eb:e4:ec:80:a4:5f:6a:bf:3e:3e:
80:f7:82:5f:db:a7:0a:37:12:96:68:12:10:6c:1c:
3b:d8:94:7a:96:06:36:53:1a:bc:b2:05:4e:05:84:
15:a8:ee:9c:97:72:44:71:21:80:a7:3b:bc:56:80:
08:a2:47:f2:81:cc:94:b4:b7:45:3d:f4:f1:f4:f2:
af:dd:3e:11:8d:47:f7:3e:7e:8d:4d:b1:f9:e6:19:
16:d1:ad:87:a9:94:df:a3:73:59:09:77:3f:70:e1:
7a:02:ee:98:cb:61:34:31:cf:58:40:fd:3e:b4:d1:
fd:7d:19:5e:9b:03:60:80:5d:d3:de:7c:46:18:b8:
26:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:04:84:13:F2:5B:90:D8:FD:98:B3:EC:2C:83:9D:BA:DC:66:A5:E7
X509v3 Authority Key Identifier:
keyid:FE:B8:4D:9F:8F:9E:33:15:65:89:A5:EB:F7:22:20:3A:89:9E:0A:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_rhNn4-eMxVliaXr9yIgOomeClE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/_ASEE_JbkNj9mLPsLIOdutxmpec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/_rhNn4-eMxVliaXr9yIgOomeClE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.210.98.0/24
195.210.100.0/22
195.210.110.0/23
195.210.122.0/24
195.210.124.0/22
Signature Algorithm: sha256WithRSAEncryption
93:73:6b:87:a6:92:54:b5:10:56:37:d0:37:f0:38:12:c8:1b:
2f:5b:55:3b:f9:4b:96:f5:48:80:cd:ff:19:23:cc:e8:0b:e0:
f2:a6:d0:97:3d:fb:fe:f1:10:4f:96:05:53:4f:de:f9:90:b5:
78:c3:10:5f:13:43:46:7f:a2:d5:58:ad:3e:e4:34:09:e6:68:
37:66:40:42:2d:d8:a5:1a:76:9a:67:14:2f:17:ea:9e:ce:80:
91:c6:bf:70:2d:af:13:b7:c6:cd:18:6c:cc:69:e3:b0:89:6a:
ef:4f:11:53:38:42:b9:54:14:dd:fe:af:c4:1f:54:a7:a3:ba:
14:c4:05:9e:b4:f9:98:80:01:22:94:7c:59:d0:84:31:80:ca:
ec:32:c4:79:d8:40:6b:b3:2c:84:08:c1:e6:3e:30:90:f9:26:
37:af:de:7e:83:cd:38:1b:d8:cd:ba:c5:e9:17:1e:a1:52:c3:
b5:6e:37:4c:30:2b:99:22:57:86:1f:4f:1f:46:bf:6a:7e:81:
b8:5a:89:34:cd:2a:58:39:b6:a7:2e:64:71:ca:50:b8:bf:28:
81:78:89:6c:3f:6e:01:17:92:e3:26:09:ab:90:f9:e8:b1:85:
fb:82:38:e9:43:45:69:55:0a:04:ad:61:32:c4:15:d0:5f:b9:
2d:3e:86:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 09:10:14 2025 by rpki-client