Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/d3cb14-30ad-4213-815b-f6a513de2fea/1/7ma8rm9Nc8aP0i9rOur_HEzgHJs.roa
File: 7ma8rm9Nc8aP0i9rOur_HEzgHJs.roa (raw, json)
Hash identifier: GInuicNk1jMv1+rnjCpEDF87yGDttTl9tUwBgJS9KiA=
Subject key identifier: EE:66:BC:AE:6F:4D:73:C6:8F:D2:2F:6B:3A:EA:FF:1C:4C:E0:1C:9B
Certificate issuer: /CN=90ccd913a99bafd893e07ba968a67434e3df5420
Certificate serial: 01942521BEA42B71A55A91F3302F01D0E855
Authority key identifier: 90:CC:D9:13:A9:9B:AF:D8:93:E0:7B:A9:68:A6:74:34:E3:DF:54:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kMzZE6mbr9iT4HupaKZ0NOPfVCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/d3cb14-30ad-4213-815b-f6a513de2fea/1/7ma8rm9Nc8aP0i9rOur_HEzgHJs.roa
Signing time: Thu 02 Jan 2025 03:49:16 +0000
ROA not before: Thu 02 Jan 2025 03:49:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51348
IP address blocks: 195.226.209.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:be:a4:2b:71:a5:5a:91:f3:30:2f:01:d0:e8:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90ccd913a99bafd893e07ba968a67434e3df5420
Validity
Not Before: Jan 2 03:49:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ee66bcae6f4d73c68fd22f6b3aeaff1c4ce01c9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:33:8f:9f:bb:22:f7:cf:87:61:00:eb:a9:1e:
77:06:18:97:b0:1c:68:8f:a1:0b:cf:d4:69:ad:71:
f1:72:cf:39:a7:5c:2f:ef:46:91:2a:87:be:18:fc:
ac:f8:64:da:95:40:57:37:d8:8a:f9:a7:72:92:2e:
88:44:fb:df:41:58:55:cd:e1:eb:70:90:fa:a1:42:
71:46:d6:9b:44:89:7e:23:25:36:92:60:71:3d:ba:
db:16:99:df:20:28:e3:9a:7e:8f:8e:f3:f1:b4:df:
81:cd:64:0f:91:b0:3e:df:f6:31:3a:fd:7b:44:4b:
02:f3:f6:e7:ad:5f:0a:e0:d4:bc:31:f7:c7:3d:24:
a0:20:61:fe:b4:16:27:5a:3a:90:d1:0c:10:99:ac:
cc:47:fd:17:b2:2c:b2:ce:c5:b2:50:87:95:28:62:
36:04:db:aa:dc:94:f3:25:9f:44:88:15:2e:58:34:
6a:86:26:98:86:fa:fd:fd:50:cd:21:2c:b7:51:fc:
46:5c:b1:20:db:c2:35:03:48:23:5d:32:05:d1:4f:
06:c9:95:af:a2:40:8b:e0:84:0d:5c:c0:4c:a3:02:
19:0c:8c:d7:16:fc:03:51:37:b3:70:d0:f1:c8:e7:
35:01:e0:10:40:ab:04:a0:62:45:6a:12:62:16:b3:
c6:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:66:BC:AE:6F:4D:73:C6:8F:D2:2F:6B:3A:EA:FF:1C:4C:E0:1C:9B
X509v3 Authority Key Identifier:
keyid:90:CC:D9:13:A9:9B:AF:D8:93:E0:7B:A9:68:A6:74:34:E3:DF:54:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kMzZE6mbr9iT4HupaKZ0NOPfVCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/d3cb14-30ad-4213-815b-f6a513de2fea/1/7ma8rm9Nc8aP0i9rOur_HEzgHJs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/d3cb14-30ad-4213-815b-f6a513de2fea/1/kMzZE6mbr9iT4HupaKZ0NOPfVCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.226.209.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:b7:cd:d6:38:bf:b3:ed:7b:bb:74:fd:81:4b:ec:e5:9e:22:
61:23:52:0b:c4:16:28:11:8f:4d:bf:25:10:d2:8b:df:32:fc:
cd:cb:79:4a:9e:cb:85:8a:72:72:24:d2:82:d9:0a:d7:77:57:
d2:0d:61:22:6a:55:7d:a7:48:e9:32:90:50:4f:77:49:10:86:
37:13:41:a0:e9:20:a0:64:2c:11:94:a3:eb:af:60:ec:4f:f7:
fe:45:07:f7:2e:11:ce:82:3a:24:c2:bb:6b:19:b9:84:3e:70:
46:27:e5:e8:4a:9b:85:c6:04:a8:07:9e:92:45:ee:91:75:a0:
41:5a:80:53:5a:a2:1c:63:71:7a:2a:48:43:3d:d7:a9:9b:22:
48:a5:d2:17:75:94:bd:ad:a6:3c:9b:9e:8c:5c:86:59:ff:3a:
3f:34:93:f9:40:df:41:38:e0:0f:45:f2:38:91:1a:eb:f3:b2:
4c:89:ce:ab:65:7d:b6:85:9b:33:eb:e6:ca:22:24:3e:76:2a:
3e:c2:09:ca:ec:c8:d3:f3:99:80:84:64:71:88:35:00:a1:43:
e2:93:bf:e1:28:2a:d6:aa:3d:18:77:b8:61:9a:22:77:3c:09:
9c:dc:bc:0f:1e:80:83:a4:70:8a:f6:cb:e5:0f:03:1e:e7:d6:
c0:25:34:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:51:03 2025 by rpki-client