Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/9Jn3Ao8kD2UL0UBy8f0i2zzE-8o.roa
File: 9Jn3Ao8kD2UL0UBy8f0i2zzE-8o.roa (raw, json)
Hash identifier: x5aIy8suItwCsXcwC1xvM9N3xbkHkVnj8Bi3Hjm0x2A=
Subject key identifier: F4:99:F7:02:8F:24:0F:65:0B:D1:40:72:F1:FD:22:DB:3C:C4:FB:CA
Certificate issuer: /CN=1319f052bc9e7284888074390c9d0bc127606692
Certificate serial: 0194244480DB55F8EB78A9B50D3D3A13E5C6
Authority key identifier: 13:19:F0:52:BC:9E:72:84:88:80:74:39:0C:9D:0B:C1:27:60:66:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ExnwUryecoSIgHQ5DJ0LwSdgZpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/9Jn3Ao8kD2UL0UBy8f0i2zzE-8o.roa
Signing time: Wed 01 Jan 2025 23:47:36 +0000
ROA not before: Wed 01 Jan 2025 23:47:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199130
IP address blocks: 195.23.98.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:80:db:55:f8:eb:78:a9:b5:0d:3d:3a:13:e5:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1319f052bc9e7284888074390c9d0bc127606692
Validity
Not Before: Jan 1 23:47:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f499f7028f240f650bd14072f1fd22db3cc4fbca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:f9:4c:f8:f0:58:92:34:49:63:78:63:cd:11:
e8:03:6f:8f:c4:d9:c1:a9:3a:b9:88:bf:9d:d5:1e:
31:f1:84:8c:3f:a1:f0:b1:f1:b1:af:7b:15:ef:f6:
ac:72:6d:2d:00:a9:fa:34:47:a3:21:24:da:72:fa:
d2:7d:3a:b8:e9:de:06:0b:89:02:74:49:d7:e8:92:
47:6a:ac:82:61:a2:44:0e:49:65:25:97:41:b8:20:
fc:45:8f:0e:45:3f:d7:74:f9:0a:3f:1a:60:c1:c5:
56:3d:30:b4:0a:b9:55:13:90:89:24:3b:b8:fd:b8:
0e:69:bb:42:e3:f3:35:3a:cb:d4:a2:8d:c5:cc:ab:
55:26:f8:55:e8:01:ed:14:19:e4:0c:e8:4d:ce:37:
e3:76:48:51:99:2b:a5:ca:87:db:e6:ae:f0:e1:c0:
67:5c:34:03:c8:a0:d7:95:71:be:6e:8c:2c:30:49:
25:85:84:8b:06:36:cf:45:6a:3e:41:31:2b:c5:3d:
75:19:98:a2:28:81:5c:76:37:12:66:a2:5e:0b:c7:
23:56:d0:2c:16:f2:fe:20:bf:14:10:54:84:a3:e4:
07:09:40:da:32:0c:c3:be:d0:c3:37:fb:55:09:b0:
a0:19:1a:d7:20:cc:3f:39:7a:8a:20:aa:a6:eb:b8:
59:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:99:F7:02:8F:24:0F:65:0B:D1:40:72:F1:FD:22:DB:3C:C4:FB:CA
X509v3 Authority Key Identifier:
keyid:13:19:F0:52:BC:9E:72:84:88:80:74:39:0C:9D:0B:C1:27:60:66:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ExnwUryecoSIgHQ5DJ0LwSdgZpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/9Jn3Ao8kD2UL0UBy8f0i2zzE-8o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/ExnwUryecoSIgHQ5DJ0LwSdgZpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.23.98.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:1e:30:fe:35:3c:25:b5:1b:39:3e:97:d4:70:ae:3a:b9:00:
16:03:86:27:0e:74:a8:ba:ac:83:a1:2d:54:3c:9b:59:29:78:
ba:b3:d4:b9:36:be:90:f5:0f:a4:55:2c:88:3a:5c:b2:28:c2:
5b:5a:8b:ab:ab:66:16:a8:6f:68:f3:6e:e2:22:fc:ac:1c:dc:
14:1c:d5:18:c8:08:fc:cc:ec:65:9f:88:c7:16:68:90:b5:d4:
b7:49:40:94:d8:f1:55:d2:ab:dc:cc:f2:e8:c6:25:68:24:10:
49:8d:ca:c1:dd:11:1f:dc:bd:b2:71:c9:c4:1e:10:00:ad:68:
65:91:10:e0:8e:bd:75:7a:16:2e:d1:48:12:f7:42:54:44:2e:
fb:de:18:ab:1b:0a:74:d2:c5:24:64:d0:ec:8b:ed:99:28:f0:
2b:9d:90:8d:6b:f7:d4:32:73:5b:10:4d:a8:21:ae:89:c6:93:
dd:a3:fe:a9:13:2f:1a:8e:2f:99:38:e9:ae:b9:26:7e:b3:4b:
d5:96:fb:be:f2:cb:d9:53:9e:89:0a:1a:46:69:4b:d1:0b:a1:
68:88:e9:de:af:ce:f5:fc:63:78:c8:85:35:74:3f:61:68:5b:
46:bd:76:61:82:aa:3f:08:18:8d:ca:48:b3:2f:52:b5:39:45:
1e:19:b0:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 22 05:21:14 2025 by rpki-client