Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/7e4045-2275-4e50-b641-5f04e58df1c2/1/2jf60Yjy6HLBv6d8yR7rie7dcvM.roa
File: 2jf60Yjy6HLBv6d8yR7rie7dcvM.roa (raw, json)
Hash identifier: KUJJAA4N19gfVcdXpDwoxv1pVLrdLYxvm5tedzjrpBo=
Subject key identifier: DA:37:FA:D1:88:F2:E8:72:C1:BF:A7:7C:C9:1E:EB:89:EE:DD:72:F3
Certificate issuer: /CN=41e2392b6548b09b18a64d3e5080bbbb9279310b
Certificate serial: 0194221F7810313607E2339E086C38B12113
Authority key identifier: 41:E2:39:2B:65:48:B0:9B:18:A6:4D:3E:50:80:BB:BB:92:79:31:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QeI5K2VIsJsYpk0-UIC7u5J5MQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/7e4045-2275-4e50-b641-5f04e58df1c2/1/2jf60Yjy6HLBv6d8yR7rie7dcvM.roa
Signing time: Wed 01 Jan 2025 13:47:55 +0000
ROA not before: Wed 01 Jan 2025 13:47:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58180
IP address blocks: 195.206.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:78:10:31:36:07:e2:33:9e:08:6c:38:b1:21:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41e2392b6548b09b18a64d3e5080bbbb9279310b
Validity
Not Before: Jan 1 13:47:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=da37fad188f2e872c1bfa77cc91eeb89eedd72f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b2:62:57:13:db:02:c0:66:96:0a:30:fd:3d:
0e:87:4e:34:41:9c:ee:a8:16:dc:42:31:38:fa:d8:
f5:83:2a:06:4f:d6:b0:9a:6d:61:84:e1:dc:a8:c4:
00:e5:af:56:7a:59:c2:cf:31:88:c8:20:5c:33:3d:
2c:8d:c9:45:cf:1e:14:ff:80:89:c5:ca:e9:2b:49:
69:7a:f9:03:27:27:08:07:17:8a:61:85:92:f3:b2:
29:dc:7f:2e:5c:6b:45:b7:20:14:7f:62:37:1c:69:
97:e8:ce:56:4f:ce:3b:e0:27:08:00:34:48:fb:36:
bd:39:4a:d4:35:29:b9:f5:15:39:71:65:d9:47:72:
e8:b1:25:8f:31:d6:d5:a8:67:bf:d7:70:69:36:af:
17:c5:0c:45:85:82:c9:c9:46:f0:98:e3:2c:89:93:
95:59:db:30:45:e3:c8:f4:e9:27:db:63:a2:ae:99:
55:4b:30:bb:23:c8:af:ca:32:b1:f6:a2:29:c4:0d:
12:67:aa:74:db:a7:11:04:f0:f1:bd:a3:dd:fb:56:
3f:a7:17:18:e3:6c:91:6e:9c:5b:8c:65:d2:33:4f:
83:09:2f:4d:27:a5:da:8b:29:61:66:ae:bf:df:66:
a6:1f:f1:78:04:2a:5d:38:72:61:2e:57:2f:6a:c8:
12:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:37:FA:D1:88:F2:E8:72:C1:BF:A7:7C:C9:1E:EB:89:EE:DD:72:F3
X509v3 Authority Key Identifier:
keyid:41:E2:39:2B:65:48:B0:9B:18:A6:4D:3E:50:80:BB:BB:92:79:31:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QeI5K2VIsJsYpk0-UIC7u5J5MQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/7e4045-2275-4e50-b641-5f04e58df1c2/1/2jf60Yjy6HLBv6d8yR7rie7dcvM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/7e4045-2275-4e50-b641-5f04e58df1c2/1/QeI5K2VIsJsYpk0-UIC7u5J5MQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.206.120.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:d7:4e:c1:26:6d:ca:3f:99:bb:cd:52:03:75:44:89:f9:5b:
03:68:0b:25:20:e8:82:a3:7b:c0:2e:2a:0a:67:87:9e:3d:a4:
a8:c4:ed:38:07:da:4f:06:f3:df:fc:4f:a5:03:67:92:61:39:
4a:d2:e8:1f:7b:f2:a5:6e:f3:71:06:c4:59:9e:77:c1:ec:6a:
86:93:8a:2a:95:a3:e5:7f:d1:8c:d0:d6:06:8e:1a:2b:b5:33:
03:04:ab:36:bc:cb:f9:5d:b9:5c:35:60:08:c5:f6:31:67:1e:
0a:05:00:ef:55:06:b1:e1:67:b7:74:44:a1:0a:82:b2:56:d8:
f7:ee:0b:37:b7:3a:dc:37:27:29:57:c4:0e:18:ea:3a:91:49:
54:a5:f5:18:49:20:91:9a:58:65:bc:0e:f8:5c:ac:05:02:50:
ee:f3:a8:57:bf:db:34:58:4b:bb:34:f1:aa:f4:f3:1c:9e:d0:
43:57:8b:9d:3e:1e:1e:5f:c9:39:e8:90:19:1a:14:37:32:68:
40:b8:f2:75:9a:50:66:61:61:7d:14:2e:e5:5e:69:40:2d:54:
3d:34:da:97:79:b9:e2:f3:e8:b8:ef:1d:43:ba:da:17:be:f8:
b8:fa:27:17:82:82:50:0c:84:04:40:87:98:7c:18:b7:19:6a:
cd:4f:33:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:52:39 2025 by rpki-client