Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/141887-5507-45a5-8b0a-57a1f0b32f01/1/t01s41tuzCg0n-ebuqBLNh-kZ8U.roa
File: t01s41tuzCg0n-ebuqBLNh-kZ8U.roa (raw, json)
Hash identifier: gu7VW+b5U5NLSfKbHP6Ioqtp4/dVeiqqPEeW+qWaaC0=
Subject key identifier: B7:4D:6C:E3:5B:6E:CC:28:34:9F:E7:9B:BA:A0:4B:36:1F:A4:67:C5
Certificate issuer: /CN=ed89298644ed486ded509d946a6d6d839589ce11
Certificate serial: 0194228E12CF1D4EC125DA825BE0828E6B1B
Authority key identifier: ED:89:29:86:44:ED:48:6D:ED:50:9D:94:6A:6D:6D:83:95:89:CE:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7YkphkTtSG3tUJ2Uam1tg5WJzhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/141887-5507-45a5-8b0a-57a1f0b32f01/1/t01s41tuzCg0n-ebuqBLNh-kZ8U.roa
Signing time: Wed 01 Jan 2025 15:48:43 +0000
ROA not before: Wed 01 Jan 2025 15:48:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50689
IP address blocks: 195.191.222.0/24 maxlen: 24
195.191.223.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:12:cf:1d:4e:c1:25:da:82:5b:e0:82:8e:6b:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed89298644ed486ded509d946a6d6d839589ce11
Validity
Not Before: Jan 1 15:48:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b74d6ce35b6ecc28349fe79bbaa04b361fa467c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d9:06:ea:02:06:0d:29:79:ec:55:52:41:4f:
87:9d:28:9b:a8:d6:c6:f3:9f:49:0e:b6:ae:33:13:
fe:5f:2a:44:e6:0d:90:09:55:31:96:e0:b6:24:44:
62:56:23:44:99:34:39:1a:da:bb:d1:2f:a3:55:84:
9c:a6:c1:6c:24:e2:e3:7a:38:0a:80:28:e7:9f:1b:
2a:93:32:ca:c7:3f:58:cb:00:4e:92:78:ee:c4:c7:
6f:fd:d5:38:77:82:c4:13:27:dd:cc:ee:e0:38:80:
7e:c6:86:5b:ca:d1:70:c0:9f:76:fb:62:27:7b:d9:
36:3f:5c:74:4b:03:02:0f:b7:bc:de:e2:16:ca:fa:
4b:41:2e:fe:59:b3:97:2d:68:94:05:0b:e2:fa:8b:
03:8c:b8:48:65:0e:cc:7a:88:80:49:74:02:48:7d:
5b:6a:32:4c:7e:ac:ff:55:2c:b5:18:d4:1d:0f:05:
4b:1f:a8:ea:e5:a7:61:c1:37:68:c8:6c:bb:06:48:
5b:b4:8d:72:bc:3f:b9:0b:ba:43:77:f0:35:5c:8a:
05:b5:b4:5a:c2:5f:22:1f:32:80:ef:6c:d8:59:d9:
c0:84:f6:d5:7f:c1:2d:0f:16:27:18:dd:24:ec:f0:
e6:da:92:5e:ba:2a:19:51:0b:56:88:d5:31:bf:98:
48:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:4D:6C:E3:5B:6E:CC:28:34:9F:E7:9B:BA:A0:4B:36:1F:A4:67:C5
X509v3 Authority Key Identifier:
keyid:ED:89:29:86:44:ED:48:6D:ED:50:9D:94:6A:6D:6D:83:95:89:CE:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7YkphkTtSG3tUJ2Uam1tg5WJzhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/141887-5507-45a5-8b0a-57a1f0b32f01/1/t01s41tuzCg0n-ebuqBLNh-kZ8U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/141887-5507-45a5-8b0a-57a1f0b32f01/1/7YkphkTtSG3tUJ2Uam1tg5WJzhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.191.222.0/23
Signature Algorithm: sha256WithRSAEncryption
88:be:78:02:62:59:a9:64:df:f9:5d:ad:89:85:77:9b:89:65:
d8:b4:74:2f:e0:d2:21:8a:7f:a6:25:17:02:72:cc:b5:77:b5:
13:52:70:6a:e7:80:49:1b:bd:05:71:44:13:76:b5:fb:65:af:
d0:ee:c2:e1:93:58:7d:bb:c8:d9:90:80:ee:bd:78:cc:1f:78:
fe:04:67:c6:af:fe:23:3d:06:5d:4b:f9:b0:04:18:bc:fb:bd:
f0:89:0b:3c:ed:6a:03:0b:02:2e:61:bf:61:c3:d9:3b:34:b1:
34:ba:f6:49:39:ea:72:ed:a9:36:61:a8:b8:cd:42:35:3f:bc:
d0:4a:17:97:bd:ae:e7:8c:ea:ff:3d:e1:d0:6d:01:53:66:88:
c4:b7:46:e1:30:ec:3e:be:90:a1:d4:e3:c4:6f:dc:1b:a8:bf:
9c:d6:72:d5:10:42:fc:99:0d:17:e2:1f:db:0b:b6:b0:ab:ce:
83:f0:7a:9d:c2:fa:d6:f2:23:8a:0d:81:7a:c3:26:9b:48:47:
b2:c8:95:14:79:b8:43:78:05:d8:d1:ec:97:8f:67:6b:db:3b:
5f:f8:db:4a:c1:7d:71:e8:69:8b:74:ad:02:c4:59:87:e4:44:
91:92:24:3c:24:6e:e6:26:4d:56:37:b1:b3:c0:6d:44:ad:ba:
0f:ef:54:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:17:54 2025 by rpki-client