Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/b06fe0-3690-437d-8924-071daa05dabf/1/upvfUH_YjoaPJNTn3nKwVUkJlqc.roa
File: upvfUH_YjoaPJNTn3nKwVUkJlqc.roa (raw, json)
Hash identifier: GMdb4SO6ufP1WGhwXYRzniR/Z7eY9kD3nmj07BQxDnQ=
Subject key identifier: BA:9B:DF:50:7F:D8:8E:86:8F:24:D4:E7:DE:72:B0:55:49:09:96:A7
Certificate issuer: /CN=2ffb641d3ca2ec1157f477321789cec0cc5f29a4
Certificate serial: 019425FDC85D427D9B7337F4EF9FC9B972B3
Authority key identifier: 2F:FB:64:1D:3C:A2:EC:11:57:F4:77:32:17:89:CE:C0:CC:5F:29:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L_tkHTyi7BFX9HcyF4nOwMxfKaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/b06fe0-3690-437d-8924-071daa05dabf/1/upvfUH_YjoaPJNTn3nKwVUkJlqc.roa
Signing time: Thu 02 Jan 2025 07:49:36 +0000
ROA not before: Thu 02 Jan 2025 07:49:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56655
IP address blocks: 195.35.113.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:c8:5d:42:7d:9b:73:37:f4:ef:9f:c9:b9:72:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ffb641d3ca2ec1157f477321789cec0cc5f29a4
Validity
Not Before: Jan 2 07:49:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ba9bdf507fd88e868f24d4e7de72b055490996a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:57:3a:68:96:fe:7a:77:3b:7e:19:d8:21:b6:
7c:1c:48:ff:ee:52:62:ef:b8:da:e2:53:4b:e6:ad:
77:5a:43:77:20:7a:33:56:0c:bb:6c:e7:89:a4:ba:
cf:92:42:af:5d:68:8c:6f:3d:e6:2c:f3:76:79:e4:
75:ff:44:3c:1f:48:b7:e8:0f:36:3d:b3:3c:a6:c7:
90:19:d5:b3:68:85:91:1c:9f:a3:af:44:09:f7:80:
69:f8:fb:f3:4a:58:c8:e7:77:75:af:cb:15:c1:45:
fc:8f:b7:a4:82:e9:1d:4b:0a:cb:73:47:5e:92:73:
22:9f:0c:8a:3b:4e:82:61:89:f4:44:86:f4:24:3d:
e5:0d:49:11:7c:81:8b:f9:1f:a1:c2:97:fb:51:80:
e0:7c:83:6e:dc:4e:6c:c1:97:e9:a1:5e:38:0a:46:
91:21:ea:c7:32:24:b7:13:04:b4:79:a3:b4:ce:5e:
e4:ae:b9:d2:ad:a6:8c:51:6e:75:39:7d:d1:30:50:
f2:b9:8e:9f:13:e9:7c:db:0b:98:c2:0c:c1:c1:13:
ae:4e:51:e0:fa:75:96:71:28:1e:fd:e3:2d:37:1b:
d3:a6:3a:fc:e1:0a:e3:de:f6:d1:6c:f2:f4:82:48:
b6:94:56:d8:b7:f8:41:b5:64:ff:bd:4d:57:9a:f1:
a1:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:9B:DF:50:7F:D8:8E:86:8F:24:D4:E7:DE:72:B0:55:49:09:96:A7
X509v3 Authority Key Identifier:
keyid:2F:FB:64:1D:3C:A2:EC:11:57:F4:77:32:17:89:CE:C0:CC:5F:29:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L_tkHTyi7BFX9HcyF4nOwMxfKaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/b06fe0-3690-437d-8924-071daa05dabf/1/upvfUH_YjoaPJNTn3nKwVUkJlqc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/b06fe0-3690-437d-8924-071daa05dabf/1/L_tkHTyi7BFX9HcyF4nOwMxfKaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.35.113.0/24
Signature Algorithm: sha256WithRSAEncryption
78:40:24:7b:fc:ff:31:e2:b6:1f:f2:4d:87:34:21:d5:2b:1d:
ab:93:f5:81:72:6c:ce:2c:87:3f:b6:53:0b:06:f0:31:63:39:
1f:6d:59:d8:ed:2b:9d:01:e1:5f:fd:db:57:0e:1c:3b:76:cb:
7c:53:de:30:b0:11:3e:10:9d:bb:c3:3b:10:55:b4:4a:9c:14:
d7:78:b1:c0:89:8b:12:d3:f5:8d:3d:2f:fd:0b:bf:be:78:81:
f4:b7:ae:a5:d4:29:88:ca:25:fc:52:43:b0:94:70:31:55:1f:
b0:7f:05:2f:4a:1d:6c:c1:34:1a:75:99:ed:f7:89:09:e0:1d:
65:05:b0:e8:0f:6b:de:0d:cc:58:a4:62:22:97:24:74:12:f7:
2a:ed:bd:72:3b:01:fe:c0:49:1c:e3:c2:db:5b:4b:33:02:ff:
08:6a:1f:ad:58:cc:52:15:d4:51:42:a2:03:2e:56:6d:b4:d8:
db:fb:69:c7:fd:fb:44:6b:1b:7d:19:f1:fc:84:c0:e0:5a:b4:
3f:03:1c:42:08:a2:54:6c:ab:f2:16:2b:8d:cc:4c:45:12:da:
5d:9a:b6:20:9b:55:7c:c3:57:31:15:ff:32:69:f8:a5:85:3e:
96:50:e8:7f:c0:e8:c3:6d:9a:6f:27:32:06:9b:94:b8:d4:6f:
c0:10:30:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:38:35 2025 by rpki-client