Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/a1399a-ea6b-4a09-8b40-90c0bde09869/1/47RTgndCr3WK9uvLA47Mf3Veeq0.roa
File: 47RTgndCr3WK9uvLA47Mf3Veeq0.roa (raw, json)
Hash identifier: nqkQXS//GUp6pq9hI3HV70pQJ3Mrf63Mr+wizeUmh6Y=
Subject key identifier: E3:B4:53:82:77:42:AF:75:8A:F6:EB:CB:03:8E:CC:7F:75:5E:7A:AD
Certificate issuer: /CN=ad80679b96ca322bfa85500cab206c6d47412edf
Certificate serial: 019427B5BFCFA7C2EE33BD236F1E2C1326C8
Authority key identifier: AD:80:67:9B:96:CA:32:2B:FA:85:50:0C:AB:20:6C:6D:47:41:2E:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rYBnm5bKMiv6hVAMqyBsbUdBLt8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/a1399a-ea6b-4a09-8b40-90c0bde09869/1/47RTgndCr3WK9uvLA47Mf3Veeq0.roa
Signing time: Thu 02 Jan 2025 15:50:10 +0000
ROA not before: Thu 02 Jan 2025 15:50:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51540
IP address blocks: 195.42.241.0/24 maxlen: 24
195.42.242.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:bf:cf:a7:c2:ee:33:bd:23:6f:1e:2c:13:26:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad80679b96ca322bfa85500cab206c6d47412edf
Validity
Not Before: Jan 2 15:50:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e3b453827742af758af6ebcb038ecc7f755e7aad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:d8:c8:f4:87:b6:da:67:c5:a8:89:1a:41:97:
8a:63:fd:96:a5:cf:37:6f:c9:10:ae:84:b2:01:9d:
fc:f3:be:b5:40:9a:c0:00:70:4c:47:fa:6e:f9:8e:
e8:42:29:92:7e:44:ef:3f:47:f6:67:b7:a8:d2:6a:
86:0b:f0:cf:37:7f:94:31:84:dd:34:1c:6f:bc:8a:
7f:f1:ea:81:d3:f5:27:cd:10:55:86:54:88:5c:2c:
fa:75:81:3a:be:be:ad:4d:53:68:c0:dc:3b:1e:59:
98:8d:56:50:8a:65:4e:47:9d:71:1a:56:74:02:a3:
81:9d:e8:9d:75:42:79:07:63:48:04:13:bf:f4:d1:
bc:2a:a0:64:e4:01:60:10:54:26:2a:be:3f:af:7e:
c4:90:02:1b:7a:c3:36:d4:66:62:24:33:82:8b:b9:
c2:60:60:bd:1d:cd:31:e0:3a:f8:05:8f:c1:98:74:
61:5c:d2:95:11:12:b7:a7:49:d9:e6:bb:61:f3:5c:
5f:23:1e:88:bd:12:18:87:69:d2:ee:40:ac:1d:93:
45:a6:cc:f1:07:9b:82:9d:02:fb:df:83:36:75:18:
69:82:c3:49:f7:af:9e:c1:f6:52:83:08:66:c9:26:
6f:be:7a:af:c3:50:7c:a4:1b:63:77:73:5c:9a:d7:
78:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:B4:53:82:77:42:AF:75:8A:F6:EB:CB:03:8E:CC:7F:75:5E:7A:AD
X509v3 Authority Key Identifier:
keyid:AD:80:67:9B:96:CA:32:2B:FA:85:50:0C:AB:20:6C:6D:47:41:2E:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rYBnm5bKMiv6hVAMqyBsbUdBLt8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/a1399a-ea6b-4a09-8b40-90c0bde09869/1/47RTgndCr3WK9uvLA47Mf3Veeq0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/a1399a-ea6b-4a09-8b40-90c0bde09869/1/rYBnm5bKMiv6hVAMqyBsbUdBLt8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.42.241.0-195.42.242.255
Signature Algorithm: sha256WithRSAEncryption
62:9d:fc:91:d2:f6:68:dc:eb:52:2e:10:ad:9e:73:03:8e:0d:
87:79:5a:15:53:0a:8b:1f:6c:f6:d3:76:c2:e6:33:26:d1:75:
c3:ea:2a:84:60:5b:91:76:7f:7f:60:aa:ee:fe:70:65:ce:af:
d8:62:8b:36:cb:b9:73:bd:a4:09:12:17:5f:f4:d4:d1:49:5b:
03:bf:3c:fa:b0:d8:ad:9d:a5:38:1c:ca:1c:33:f9:a6:f0:20:
27:b9:ae:a0:0e:3f:6e:10:d5:6e:a8:d5:af:ef:02:1c:44:12:
54:23:8d:56:f8:a4:ce:88:f1:90:7b:5f:8e:26:cc:93:b7:e4:
0f:89:70:9e:5f:e3:be:1b:3a:59:71:f1:bc:94:2f:fd:d5:9e:
d2:a4:55:70:5d:23:23:c1:ed:bd:b5:d9:fe:96:3e:0f:ae:89:
4d:5c:86:39:b6:6c:15:93:9a:f6:82:99:27:00:4b:dd:82:40:
a3:c3:ee:ff:02:9f:66:3c:c4:5b:c4:b0:3b:01:28:37:8f:5b:
a3:19:c6:98:ed:92:89:17:d6:7d:91:46:3b:d3:bd:ea:cd:32:
b7:23:44:99:3a:8c:3c:08:d3:a6:ba:4e:71:2f:67:c6:77:9b:
e4:12:70:cf:82:86:9e:31:9a:7b:c9:fa:a1:16:79:3c:4d:ce:
cd:1a:8a:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 23:51:25 2025 by rpki-client