Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/1_C71Bp_1zp5_8UCG63SlZecnB0.roa
File: 1_C71Bp_1zp5_8UCG63SlZecnB0.roa (raw, json)
Hash identifier: ioiof2rpAfqlM62KgwJgvkNW9CxRMj1zH+bY4YBSAdM=
Subject key identifier: D7:F0:BB:D4:1A:7F:D7:3A:79:FF:C5:02:1B:AD:D2:95:97:9C:9C:1D
Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d
Certificate serial: 018CC348E6FC7857CFF6056B2E2AABD320FE
Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/1_C71Bp_1zp5_8UCG63SlZecnB0.roa
Signing time: Mon 01 Jan 2024 04:29:43 +0000
ROA not before: Mon 01 Jan 2024 04:29:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209494
IP address blocks: 195.65.43.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:e6:fc:78:57:cf:f6:05:6b:2e:2a:ab:d3:20:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d
Validity
Not Before: Jan 1 04:29:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d7f0bbd41a7fd73a79ffc5021badd295979c9c1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:61:b9:74:31:97:c0:60:e0:16:3f:f6:27:e3:
b5:c8:61:3c:74:f0:c4:e0:89:3c:7e:6b:5b:66:7b:
a2:de:8d:35:ec:e6:61:66:e8:40:34:e7:c9:de:f2:
97:62:22:b0:40:db:92:ef:27:3c:70:71:7a:5a:a0:
62:29:7b:d8:4b:b8:1f:bb:69:15:9b:9d:cd:38:37:
f1:77:61:4a:d9:de:b7:da:e8:8e:53:1d:f0:dd:0a:
d4:e7:0f:1e:42:ed:3a:e9:72:f1:02:2d:0e:3c:5b:
2e:e5:21:7c:87:e5:74:8a:9c:ac:f6:68:85:08:d5:
6a:1b:6e:1f:c2:54:64:e4:fe:2d:21:32:69:3f:e9:
fb:d8:51:7e:1e:12:3c:51:91:30:a9:b5:40:fb:30:
c2:cf:6c:d2:f8:60:7c:54:b9:13:8c:6c:7f:f6:5a:
5b:d3:78:83:b2:61:a7:85:0b:85:06:4a:9e:af:d6:
74:07:bd:77:5e:4f:a7:af:28:94:89:e7:f7:91:09:
a1:02:ba:c1:88:74:8e:b5:22:99:1c:ab:25:a7:e6:
19:da:4e:dc:ec:cd:30:5d:45:ed:8d:d8:9b:9a:a8:
70:25:08:52:1d:d4:82:aa:9f:b8:cd:ce:16:b7:6b:
b3:ea:6e:22:8e:16:fc:63:f7:36:6b:b9:78:e1:52:
fa:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:F0:BB:D4:1A:7F:D7:3A:79:FF:C5:02:1B:AD:D2:95:97:9C:9C:1D
X509v3 Authority Key Identifier:
keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/1_C71Bp_1zp5_8UCG63SlZecnB0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.65.43.0/24
Signature Algorithm: sha256WithRSAEncryption
72:d3:3b:95:a0:6d:9c:58:98:7b:19:c4:4d:16:1a:f4:91:0e:
9c:a3:37:ec:57:12:63:36:90:dd:37:bc:f0:bb:be:8e:57:7a:
c2:af:13:89:99:51:fc:e2:f7:f1:e8:1f:71:32:7a:f5:2f:79:
35:90:11:dc:08:6b:06:b4:90:83:18:cf:61:81:87:2b:10:3a:
f1:cd:f2:72:64:60:54:64:cf:c1:e8:97:8c:87:b6:97:11:35:
78:15:fd:4a:41:67:77:ce:27:11:a3:54:dd:5c:c2:25:90:27:
10:8a:98:61:b0:eb:c6:c0:59:41:34:c7:94:ee:34:43:87:66:
d6:c5:ae:47:47:8c:78:be:d6:78:43:63:96:19:62:7d:43:3a:
30:53:1b:de:93:b8:86:7d:26:b3:b2:ea:85:11:aa:50:e0:61:
39:ea:96:1b:bd:2a:d3:47:b0:62:a9:ff:99:c9:76:66:fa:9c:
6b:0b:e3:5d:20:1f:59:bc:58:81:ac:98:38:09:35:5f:01:32:
b4:e6:db:de:dd:b5:71:20:73:e5:91:6f:94:76:8f:51:17:9b:
89:3d:00:f7:7f:03:99:99:c2:37:c5:5c:3f:ca:fd:86:a4:65:
e8:af:9a:ba:98:31:c3:40:0c:98:20:b0:4f:32:ba:cf:bc:06:
d6:b2:63:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:25:40 2025 by rpki-client