Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/o5F-UQ5Ex1nd7LCDmcH-hNxHjcw.roa
File: o5F-UQ5Ex1nd7LCDmcH-hNxHjcw.roa (raw, json)
Hash identifier: dtgxLHxedYnieKs2qJQgeDB1L0opFVBRj//6MoS0BZE=
Subject key identifier: A3:91:7E:51:0E:44:C7:59:DD:EC:B0:83:99:C1:FE:84:DC:47:8D:CC
Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d
Certificate serial: 01942067C120A4C3D5DC4317B10A15C35A63
Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/o5F-UQ5Ex1nd7LCDmcH-hNxHjcw.roa
Signing time: Wed 01 Jan 2025 05:47:38 +0000
ROA not before: Wed 01 Jan 2025 05:47:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15600
IP address blocks: 194.209.56.0/24 maxlen: 24
195.65.217.0/24 maxlen: 24
212.243.163.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:c1:20:a4:c3:d5:dc:43:17:b1:0a:15:c3:5a:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d
Validity
Not Before: Jan 1 05:47:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a3917e510e44c759ddecb08399c1fe84dc478dcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:6f:a6:d3:24:8f:c1:59:cb:17:3d:39:04:20:
9a:85:f0:52:96:e6:a2:94:5b:ca:2b:a8:12:25:10:
7d:46:70:7c:49:fb:1e:c7:ac:30:a1:73:4f:14:9c:
83:1a:27:12:5c:78:45:2d:a1:82:42:a8:d9:b0:fb:
7d:af:99:79:a9:0b:38:5c:8a:ed:e7:1a:21:25:a0:
a0:42:f2:6d:49:ca:b9:cc:db:24:fe:c0:c9:28:31:
4b:09:b9:53:6c:68:2b:80:81:e4:42:cf:21:3d:55:
85:d5:b2:c6:85:81:8f:1f:e2:c1:31:81:82:18:43:
97:e4:68:ea:64:01:ca:f9:bd:5b:b8:b5:c1:c5:8b:
22:65:10:7e:06:30:e5:11:a2:79:28:0d:c6:62:6e:
88:43:1b:b2:45:56:c4:12:84:c5:eb:69:e8:da:b4:
98:b5:9b:b6:94:e3:87:fa:c9:5c:c6:33:7a:ce:fb:
b6:0a:2c:cc:6c:50:98:18:a3:d1:bf:63:db:0f:1e:
ff:fe:1f:7c:07:b7:d8:52:01:7a:bc:68:53:ba:1c:
d7:d1:57:84:ce:0b:b2:cf:9f:21:7b:f8:af:a8:0e:
ef:c0:61:5b:da:ec:09:73:52:b4:f5:4a:0a:a3:32:
3e:ac:f0:14:03:e3:d9:24:82:8e:a6:b7:ea:29:66:
bb:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:91:7E:51:0E:44:C7:59:DD:EC:B0:83:99:C1:FE:84:DC:47:8D:CC
X509v3 Authority Key Identifier:
keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/o5F-UQ5Ex1nd7LCDmcH-hNxHjcw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.209.56.0/24
195.65.217.0/24
212.243.163.0/24
Signature Algorithm: sha256WithRSAEncryption
35:3e:bf:48:a3:ac:05:9a:fd:37:d0:61:31:30:65:43:21:ef:
03:0b:c2:3b:4a:cd:6b:bb:dd:23:50:88:51:6a:df:7a:74:fb:
b0:81:5c:19:8f:30:f3:99:7e:3b:24:0f:4e:25:06:60:e1:b8:
22:d0:bb:a5:b4:62:51:de:c2:6d:6f:f2:c2:be:96:aa:96:ad:
5a:5b:7e:31:d0:8f:ff:81:28:18:85:b5:90:09:b2:8f:82:13:
ba:66:0c:4e:be:60:ca:2f:f7:3b:03:18:c9:3d:f1:eb:4f:16:
30:43:fb:6a:52:bb:07:40:08:ab:50:93:72:e6:64:b2:e1:82:
14:97:4f:92:5b:1c:75:07:dd:cf:bf:8d:75:1e:08:cb:35:84:
05:d1:35:3e:b2:99:cd:0f:08:ae:0d:7d:fa:5b:fd:5c:dd:cc:
e9:5d:bf:e7:0f:0d:e6:d2:8a:ef:b7:3b:30:f2:97:00:30:3a:
c2:e7:a8:25:d5:bb:e7:1f:c6:c7:cc:b0:1e:91:6b:08:a9:7d:
15:d0:67:7e:2f:6c:31:b7:7e:cc:d4:d9:2d:7d:c3:44:ac:14:
ef:23:d2:1f:1a:3f:bd:d6:ab:89:79:e8:44:b1:a7:a8:a0:58:
db:ef:4c:7b:88:8b:a5:5c:89:bb:dc:8b:93:2d:46:ca:48:17:
d2:d3:87:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:28:14 2025 by rpki-client