Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/68cd10-e5cc-4f47-84a9-15a0207d4609/1/ZaUvqR58Anq8vLQipN0wr5eky28.roa
File: ZaUvqR58Anq8vLQipN0wr5eky28.roa (raw, json)
Hash identifier: SPNO6fIwJVYF/onFgsSackS0wfwUe38bLzIxAklnkrs=
Subject key identifier: 65:A5:2F:A9:1E:7C:02:7A:BC:BC:B4:22:A4:DD:30:AF:97:A4:CB:6F
Certificate issuer: /CN=88a5ab669fabe72dec2e8378476a7e915c24edcf
Certificate serial: 0194236A3965B8900C47216BE1AFFD5DB50A
Authority key identifier: 88:A5:AB:66:9F:AB:E7:2D:EC:2E:83:78:47:6A:7E:91:5C:24:ED:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iKWrZp-r5y3sLoN4R2p-kVwk7c8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/68cd10-e5cc-4f47-84a9-15a0207d4609/1/ZaUvqR58Anq8vLQipN0wr5eky28.roa
Signing time: Wed 01 Jan 2025 19:49:11 +0000
ROA not before: Wed 01 Jan 2025 19:49:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8751
IP address blocks: 195.245.220.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:39:65:b8:90:0c:47:21:6b:e1:af:fd:5d:b5:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88a5ab669fabe72dec2e8378476a7e915c24edcf
Validity
Not Before: Jan 1 19:49:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=65a52fa91e7c027abcbcb422a4dd30af97a4cb6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:75:ce:92:9e:45:57:74:9c:db:fc:25:de:0c:
09:4a:1a:2b:0b:3b:ad:a0:57:9e:24:9d:7a:ce:8d:
20:36:44:b5:87:fc:61:b4:6f:da:50:dd:d8:61:d4:
ae:e6:b4:82:94:6b:39:22:60:6e:37:44:55:cf:5e:
90:9c:d4:c0:fa:71:87:f3:8a:37:a5:4f:a3:cb:88:
58:4d:cd:83:b8:57:64:5d:82:cf:f6:a2:6d:0f:36:
1e:22:81:2a:f5:3d:39:a2:76:7a:87:c4:7d:c7:f7:
d5:b7:95:8c:20:33:1a:fc:16:97:62:0f:ab:c2:66:
51:25:60:5c:3b:d1:ea:22:98:b2:28:a6:09:c8:2b:
7d:72:13:f9:43:c0:d5:35:c1:54:6c:aa:f5:60:0a:
37:68:ab:7d:07:11:dc:ff:e3:11:b4:ae:b9:5a:8a:
bd:15:7f:ca:4b:40:f0:fc:47:dc:94:5c:5b:d0:68:
ac:64:a2:ce:7c:63:0b:91:fb:97:39:3b:b7:da:8f:
46:3b:92:16:95:ed:b3:4f:36:b5:00:eb:88:d3:25:
90:8c:b2:be:b8:00:9c:a5:fb:c1:4c:3f:82:b9:a2:
08:c3:28:0f:57:4b:e6:ae:d3:8c:c7:fe:64:7b:fd:
83:71:75:89:63:e7:36:a7:68:91:b4:f9:41:2b:dd:
4f:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:A5:2F:A9:1E:7C:02:7A:BC:BC:B4:22:A4:DD:30:AF:97:A4:CB:6F
X509v3 Authority Key Identifier:
keyid:88:A5:AB:66:9F:AB:E7:2D:EC:2E:83:78:47:6A:7E:91:5C:24:ED:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iKWrZp-r5y3sLoN4R2p-kVwk7c8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/68cd10-e5cc-4f47-84a9-15a0207d4609/1/ZaUvqR58Anq8vLQipN0wr5eky28.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/68cd10-e5cc-4f47-84a9-15a0207d4609/1/iKWrZp-r5y3sLoN4R2p-kVwk7c8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.245.220.0/24
Signature Algorithm: sha256WithRSAEncryption
53:4b:65:10:38:35:fe:ea:aa:dd:b0:6d:2b:4d:f2:7e:dd:5a:
fb:15:9f:90:0d:6a:26:bc:46:f1:31:ac:b3:a5:72:c6:ab:3c:
8c:d7:9b:54:72:76:10:4d:72:86:52:a8:2b:d9:f6:64:94:21:
2e:fa:8f:46:78:f8:e4:4d:66:1c:96:74:83:fd:34:8c:8e:62:
68:dd:33:eb:5e:ae:de:9f:8d:ec:84:09:8f:3d:28:87:92:78:
1d:fb:3f:13:f0:a7:49:f8:37:30:a6:ee:1a:d7:8f:a0:95:5f:
28:8a:68:34:61:f1:47:67:2c:ac:d4:78:18:de:0d:c7:8c:4f:
0c:2b:da:5d:99:47:08:65:e8:fd:a6:c4:e4:44:52:85:ce:4a:
af:13:87:09:51:31:31:47:01:9a:77:30:05:56:da:8b:22:d4:
15:e7:92:0e:41:7a:58:18:e4:68:74:13:ee:01:5c:c2:67:ba:
bf:aa:7b:bc:f3:c0:97:36:f0:39:9d:5e:11:2e:47:30:76:56:
dd:83:6b:b6:60:f4:5a:d4:41:4f:c5:2a:c4:db:44:51:ee:a1:
5e:4e:4e:42:9d:c1:99:7b:ed:c4:a6:7c:59:fd:c6:04:d8:bc:
b5:85:38:f2:c4:d1:68:6b:6e:c2:2a:28:13:ae:3c:b4:0f:ba:
20:5a:b4:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 12:21:15 2025 by rpki-client