Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/N4kp25NQt5eYKe2Pbf18glC3mII.roa
File: N4kp25NQt5eYKe2Pbf18glC3mII.roa (raw, json)
Hash identifier: dQtJ8mi55CwgGy9cyPZ96yZlBA/ED416BI/yW9Y+qv4=
Subject key identifier: 37:89:29:DB:93:50:B7:97:98:29:ED:8F:6D:FD:7C:82:50:B7:98:82
Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d
Certificate serial: 01942067C625D69A0C0D0C1B2D0EEF821FEA
Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/N4kp25NQt5eYKe2Pbf18glC3mII.roa
Signing time: Wed 01 Jan 2025 05:47:39 +0000
ROA not before: Wed 01 Jan 2025 05:47:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29166
IP address blocks: 195.65.148.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:c6:25:d6:9a:0c:0d:0c:1b:2d:0e:ef:82:1f:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d
Validity
Not Before: Jan 1 05:47:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=378929db9350b7979829ed8f6dfd7c8250b79882
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:40:c6:59:90:93:55:18:26:b0:45:10:8e:ab:
00:72:d7:cd:59:82:ae:28:f9:6b:c7:95:b1:94:b3:
73:1c:8d:67:d1:1d:8e:08:7b:73:19:27:7d:ce:69:
a9:ac:7f:5f:c5:ef:50:9c:24:14:ce:7f:55:7a:f7:
d5:f8:66:d7:ad:8e:50:42:5c:64:a3:85:87:eb:11:
8f:35:6d:a6:f0:cc:60:37:e7:24:06:6d:43:1f:5d:
13:6c:52:3e:1a:e1:b6:87:7e:f2:0a:86:62:19:be:
13:7d:04:df:cc:19:c8:d1:d9:a6:8f:52:bf:c6:e4:
fd:21:6f:99:ba:d3:6c:d9:5d:12:be:c4:56:d2:ee:
17:ea:8a:9a:39:05:ed:12:b2:86:48:51:eb:30:89:
db:e4:a1:eb:c8:33:f0:fe:f3:d0:bf:57:03:6d:54:
ff:0b:70:bc:13:d2:e4:85:48:97:12:c9:24:6c:19:
fc:db:d9:0b:fb:18:3d:d0:47:83:b6:9c:db:d4:5a:
86:02:4d:b7:5a:a6:58:86:c5:03:65:bd:c8:61:dd:
1c:bd:b0:a8:7a:41:b7:28:c2:bc:56:27:72:ca:a3:
77:c8:65:43:9b:21:8d:15:07:a2:95:bc:95:b1:e5:
19:8c:2f:40:37:b3:68:4b:57:78:f0:5e:bf:b1:cb:
fc:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:89:29:DB:93:50:B7:97:98:29:ED:8F:6D:FD:7C:82:50:B7:98:82
X509v3 Authority Key Identifier:
keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/N4kp25NQt5eYKe2Pbf18glC3mII.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.65.148.0/24
Signature Algorithm: sha256WithRSAEncryption
13:21:ff:10:cc:60:4e:49:87:06:4b:4e:81:6c:9c:69:cf:38:
84:5e:1c:87:81:91:44:af:f6:fb:22:55:69:4b:cf:32:80:93:
b4:fb:96:76:42:12:22:6e:b1:d2:ef:13:96:d7:d5:18:70:09:
79:67:5c:ee:c3:67:ab:85:3c:23:1d:96:34:f6:09:04:1c:a6:
18:7e:0d:6f:68:4c:05:bb:3d:2d:ba:80:2d:26:41:62:11:f5:
71:a1:2a:8e:e8:9b:21:a4:07:e5:83:20:cd:b6:71:97:8e:62:
95:51:c8:dc:4f:4b:ad:ae:f5:5f:b4:ba:21:a7:5e:3e:7f:7a:
10:7d:e5:b8:4b:c1:7e:43:84:d6:07:3c:00:53:0f:35:ee:59:
73:10:bb:bb:b0:02:49:7d:f0:51:e2:a8:2e:85:09:37:8d:c5:
3c:78:ba:52:ea:8f:cc:a5:30:86:59:4c:57:94:dc:d9:80:1b:
2a:7f:e4:ff:fb:02:5f:3b:7c:69:77:46:cd:76:93:eb:90:7b:
a3:77:b4:47:6f:74:e7:c3:dc:42:a1:04:58:07:c1:5e:f1:b7:
bc:cb:2e:2c:71:d3:f3:6a:2d:83:b3:35:bd:fc:7a:ba:e3:7f:
53:a8:19:b7:a9:6c:ad:5c:f1:d4:a2:34:a0:17:ba:37:bf:dd:
76:cf:8d:77
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQgZ8Yl1poMDQwbLQ7vgh/qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2NjNmM2RiMTUyZTA1NWFjMTQ1YmRiYjQyOWUwMTg2NTQy
MDRjOGQwHhcNMjUwMTAxMDU0NzM5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNzg5MjlkYjkzNTBiNzk3OTgyOWVkOGY2ZGZkN2M4MjUwYjc5ODgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtUDGWZCTVRgmsEUQjqsActfNWYKu
KPlrx5WxlLNzHI1n0R2OCHtzGSd9zmmprH9fxe9QnCQUzn9VevfV+GbXrY5QQlxk
o4WH6xGPNW2m8MxgN+ckBm1DH10TbFI+GuG2h37yCoZiGb4TfQTfzBnI0dmmj1K/
xuT9IW+ZutNs2V0SvsRW0u4X6oqaOQXtErKGSFHrMInb5KHryDPw/vPQv1cDbVT/
C3C8E9LkhUiXEskkbBn829kL+xg90EeDtpzb1FqGAk23WqZYhsUDZb3IYd0cvbCo
ekG3KMK8VidyyqN3yGVDmyGNFQeilbyVseUZjC9AN7NoS1d48F6/scv8iQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDeJKduTULeXmCntj239fIJQt5iCMB8GA1UdIwQY
MBaAFCZj89sVLgVawUW9u0KeAYZUIEyNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSm1QejJ4VXVCVnJCUmIyN1FwNEJobFFnVEkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9jOGM2ZjYtNTk1Yy00NWIxLWE3NmUt
YmQxOTI2NzZjOWJiLzEvTjRrcDI1TlF0NWVZS2UyUGJmMThnbEMzbUlJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS9jOGM2ZjYtNTk1Yy00NWIxLWE3NmUtYmQxOTI2NzZjOWJi
LzEvSm1QejJ4VXVCVnJCUmIyN1FwNEJobFFnVEkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw0GUMA0G
CSqGSIb3DQEBCwUAA4IBAQATIf8QzGBOSYcGS06BbJxpzziEXhyHgZFEr/b7IlVp
S88ygJO0+5Z2QhIibrHS7xOW19UYcAl5Z1zuw2erhTwjHZY09gkEHKYYfg1vaEwF
uz0tuoAtJkFiEfVxoSqO6JshpAflgyDNtnGXjmKVUcjcT0utrvVftLohp14+f3oQ
feW4S8F+Q4TWBzwAUw817llzELu7sAJJffBR4qguhQk3jcU8eLpS6o/MpTCGWUxX
lNzZgBsqf+T/+wJfO3xpd0bNdpPrkHujd7RHb3Tnw9xCoQRYB8Fe8be8yy4scdPz
ai2DszW9/Hq6439TqBm3qWytXPHUojSgF7o3v912z413
-----END CERTIFICATE-----
Generated at Sun Apr 6 10:25:12 2025 by rpki-client