Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/bd6a19-2595-4df9-84b5-ebadbc34a124/1/C_2rnRXS3QjxW-teLqzNaP7zeZA.roa
File: C_2rnRXS3QjxW-teLqzNaP7zeZA.roa (raw, json)
Hash identifier: BG1AjTGCfJixd76FW9snTcyI+aJAeVT7cMwHWv9i4KY=
Subject key identifier: 0B:FD:AB:9D:15:D2:DD:08:F1:5B:EB:5E:2E:AC:CD:68:FE:F3:79:90
Certificate issuer: /CN=40665ce80820a47ce3b83f480289554a58a45df4
Certificate serial: 01856DCB135A41B7458B4F0296FB2BF18D47
Authority key identifier: 40:66:5C:E8:08:20:A4:7C:E3:B8:3F:48:02:89:55:4A:58:A4:5D:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QGZc6AggpHzjuD9IAolVSlikXfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/bd6a19-2595-4df9-84b5-ebadbc34a124/1/C_2rnRXS3QjxW-teLqzNaP7zeZA.roa
Signing time: Sun 01 Jan 2023 14:45:03 +0000
ROA not before: Sun 01 Jan 2023 14:45:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202943
IP address blocks: 195.216.248.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:cb:13:5a:41:b7:45:8b:4f:02:96:fb:2b:f1:8d:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40665ce80820a47ce3b83f480289554a58a45df4
Validity
Not Before: Jan 1 14:45:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0bfdab9d15d2dd08f15beb5e2eaccd68fef37990
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:a5:3e:4c:5e:38:65:77:9e:b6:5e:11:0b:b9:
65:7b:b7:c4:ca:4d:ed:92:9e:5d:94:2d:5e:37:b4:
a6:4c:76:5a:84:4e:f0:bc:af:41:03:5a:a4:69:fd:
f7:5a:3d:90:66:f2:5d:03:ba:33:79:9d:f8:b6:ec:
90:1c:f4:69:18:ea:f7:0c:ba:9a:8d:5b:41:95:f3:
f8:b5:46:9c:0f:30:db:ca:fe:fc:52:7d:85:d0:7a:
46:61:a7:62:66:32:ef:27:76:6c:27:48:a4:54:21:
69:9e:51:8b:d9:99:06:a6:47:e4:45:97:ef:b6:da:
9c:3d:44:23:93:cc:84:7b:4f:00:1a:f7:17:92:45:
c9:ee:23:b7:01:9f:4d:ad:cb:26:01:eb:06:7d:84:
12:aa:23:bf:61:69:91:d2:5a:1b:dc:6d:6f:a9:0a:
43:54:76:5a:24:65:15:f4:20:0d:a3:0d:f2:d1:fc:
9e:72:c3:95:fc:06:b4:5d:4a:d2:77:f3:ee:21:68:
e9:57:05:1e:76:11:7d:bc:8a:22:ad:ef:68:13:ae:
f8:0b:7e:21:a0:ab:5e:72:e7:4b:72:73:63:b2:24:
3f:0b:ba:de:02:9b:72:ff:f0:74:79:1e:19:68:1d:
1c:6f:df:0f:2a:fe:95:fb:84:40:c1:78:05:07:dc:
b6:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:FD:AB:9D:15:D2:DD:08:F1:5B:EB:5E:2E:AC:CD:68:FE:F3:79:90
X509v3 Authority Key Identifier:
keyid:40:66:5C:E8:08:20:A4:7C:E3:B8:3F:48:02:89:55:4A:58:A4:5D:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QGZc6AggpHzjuD9IAolVSlikXfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/bd6a19-2595-4df9-84b5-ebadbc34a124/1/C_2rnRXS3QjxW-teLqzNaP7zeZA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/bd6a19-2595-4df9-84b5-ebadbc34a124/1/QGZc6AggpHzjuD9IAolVSlikXfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.216.248.0/24
Signature Algorithm: sha256WithRSAEncryption
51:75:24:4a:58:5a:7d:7f:63:1b:8d:0a:2a:cc:e0:ad:3c:5e:
0c:31:16:01:e2:a2:ce:00:9c:67:c8:27:4f:51:c0:9f:57:46:
99:87:69:06:74:20:30:fe:5f:78:9e:ec:0d:40:6c:7f:a0:61:
41:fd:2a:d7:4f:a8:5a:a8:57:e7:0d:54:44:27:fb:7e:53:cd:
39:bb:ca:b7:0e:7d:c2:7a:d2:da:c4:9c:44:97:8b:16:d1:fb:
96:f8:15:d0:1f:47:92:db:bb:17:40:c4:c4:3f:1c:13:d7:a2:
88:69:ad:21:99:47:b6:83:b7:1d:e4:85:db:89:a5:a1:eb:79:
6e:39:04:2d:1c:6f:4d:e3:de:5a:94:2f:ee:cd:9e:04:9b:8f:
af:b4:89:6b:23:72:30:8e:98:cf:5d:19:37:a0:29:c5:d3:99:
b1:c7:c4:75:f4:48:ca:00:a0:3a:59:53:bf:86:ec:e2:53:5c:
a4:ea:f7:83:ee:ca:0e:2e:66:b3:42:94:53:ff:c2:89:d2:78:
1d:e8:a0:9c:7a:ef:7b:1c:e7:5e:f3:de:59:f0:d3:a2:0a:3f:
2a:c0:4d:53:fb:e1:8f:38:72:d0:9a:37:1e:17:68:ee:10:f1:
e5:a8:9a:ac:a4:5a:03:5a:b2:15:3e:3e:dd:4d:85:28:83:c3:
0c:b5:e4:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 01:50:27 2025 by rpki-client