Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/3mWHpU1N1nCrKUYHnfDAWfj9idI.roa
File: 3mWHpU1N1nCrKUYHnfDAWfj9idI.roa (raw, json)
Hash identifier: LWWBrQMXH28Yjqmks7VSTiV1iKuMnL1K2v6OhyLbMKA=
Subject key identifier: DE:65:87:A5:4D:4D:D6:70:AB:29:46:07:9D:F0:C0:59:F8:FD:89:D2
Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d
Certificate serial: 01942067DAAEA6C6506BC39B710F8B44A9A8
Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/3mWHpU1N1nCrKUYHnfDAWfj9idI.roa
Signing time: Wed 01 Jan 2025 05:47:44 +0000
ROA not before: Wed 01 Jan 2025 05:47:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208305
IP address blocks: 195.65.0.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:da:ae:a6:c6:50:6b:c3:9b:71:0f:8b:44:a9:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d
Validity
Not Before: Jan 1 05:47:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=de6587a54d4dd670ab2946079df0c059f8fd89d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:1a:b2:81:18:6a:19:72:f0:7b:50:ac:73:34:
d4:03:0d:bf:7a:34:c1:b4:96:1a:02:d7:a1:8c:cb:
d9:98:9a:5a:97:8b:12:b6:04:b1:6d:ff:c9:d2:7b:
4f:3f:38:df:77:77:fb:bb:88:e1:74:7e:65:6d:f2:
ec:05:1a:10:81:c8:41:81:b7:05:09:f9:9d:fc:fa:
bb:11:1a:3a:07:6e:8d:c8:66:d5:13:18:67:18:7f:
9b:d8:99:03:36:b2:ff:18:60:34:de:c1:fd:05:d7:
cb:02:a8:9c:cf:20:4a:b4:d0:d2:f3:2d:e2:b5:21:
19:45:ce:5e:e1:d2:32:0d:be:50:dd:d2:72:b9:5e:
dd:d5:5b:3e:1a:62:da:4b:4b:78:10:c6:93:a6:2b:
41:3e:64:20:fe:37:08:5c:8f:8c:b4:60:32:00:e9:
8c:75:55:ca:cf:42:18:21:e8:a3:06:0d:9d:52:8b:
eb:f7:f8:3f:ff:90:56:4a:d3:86:72:da:bd:4a:10:
90:e0:e1:f9:0e:1f:9f:0c:3e:48:5c:eb:32:61:0c:
d4:a6:f1:d8:80:5c:d5:f3:ab:1c:a8:aa:4b:4d:0e:
11:77:b0:39:8e:67:a9:20:90:66:2d:87:0c:0e:fb:
74:08:b0:87:fb:ea:34:a9:99:ea:8f:f3:48:4f:e8:
96:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:65:87:A5:4D:4D:D6:70:AB:29:46:07:9D:F0:C0:59:F8:FD:89:D2
X509v3 Authority Key Identifier:
keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/3mWHpU1N1nCrKUYHnfDAWfj9idI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.65.0.0/24
Signature Algorithm: sha256WithRSAEncryption
56:c5:4f:48:3f:f0:a1:4d:dd:5b:b4:c7:fb:8e:a1:de:ee:b9:
0d:21:ec:3c:fc:e5:c3:a3:29:ef:bd:ac:76:c0:7a:b6:1d:79:
25:18:a3:a1:e2:67:7a:35:2d:e8:b1:57:5e:e9:d4:75:e9:a3:
86:0a:2a:4d:82:91:5d:d1:f4:f2:96:5b:cc:a0:f6:5b:07:f9:
42:3f:42:82:b2:d4:c0:5a:ff:b4:01:b1:62:a7:cd:25:83:1c:
55:a1:0b:f8:e7:a0:d2:17:cf:46:1e:99:30:e4:54:de:64:76:
91:1c:69:f3:95:ae:e3:78:24:f1:37:c5:d9:b8:d9:69:c0:fc:
f8:e6:02:0a:3c:8f:7e:90:fe:db:d0:6e:4a:b5:0f:a9:5b:5b:
b1:89:46:fd:9a:0c:22:32:59:af:d1:66:11:d7:fb:04:89:b2:
52:f9:55:3c:47:a4:94:3a:1b:da:83:2b:16:44:d1:29:56:70:
ae:51:00:fe:1f:db:1e:6b:a5:d5:4a:fe:72:e3:88:55:11:48:
8f:0b:ad:1c:28:85:3b:d7:ae:8b:dd:a0:41:a0:79:71:31:c1:
c0:ab:3d:e4:e3:c6:35:20:3c:b5:aa:9f:dc:29:d8:38:16:28:
d8:31:b8:10:74:ed:f9:19:60:36:e7:6e:38:00:d6:f9:2c:77:
cf:6e:9a:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:55:28 2025 by rpki-client