Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/3155bf-c881-4396-aefd-236ba9ee4056/1/294sEvFCPZcpapErUdpT5vNPLKY.roa
File: 294sEvFCPZcpapErUdpT5vNPLKY.roa (raw, json)
Hash identifier: K9zx63RQ0E6LnQ5ZYnogejedGoy5yi5fVZmpZbGiuTU=
Subject key identifier: DB:DE:2C:12:F1:42:3D:97:29:6A:91:2B:51:DA:53:E6:F3:4F:2C:A6
Certificate issuer: /CN=22f960fdeef407355ab7836dcb6b9026f44293ea
Certificate serial: 019420D5EE46B40B2A6F82393474CCD2F600
Authority key identifier: 22:F9:60:FD:EE:F4:07:35:5A:B7:83:6D:CB:6B:90:26:F4:42:93:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ivlg_e70BzVat4Nty2uQJvRCk-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/3155bf-c881-4396-aefd-236ba9ee4056/1/294sEvFCPZcpapErUdpT5vNPLKY.roa
Signing time: Wed 01 Jan 2025 07:47:58 +0000
ROA not before: Wed 01 Jan 2025 07:47:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205301
IP address blocks: 195.248.90.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:ee:46:b4:0b:2a:6f:82:39:34:74:cc:d2:f6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22f960fdeef407355ab7836dcb6b9026f44293ea
Validity
Not Before: Jan 1 07:47:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dbde2c12f1423d97296a912b51da53e6f34f2ca6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:d1:52:08:3f:00:31:65:4f:af:8e:ea:59:ec:
af:81:f4:f8:a4:69:f9:e6:26:fa:e0:bd:87:02:da:
24:48:16:45:57:cb:10:59:5a:c3:17:82:07:cf:2a:
1a:e8:a4:fa:2d:9c:21:ed:f4:5d:97:db:5d:fe:65:
32:a0:2b:13:d5:64:6a:94:a5:58:8c:7d:c9:cd:2e:
a6:90:4f:0a:55:38:cc:64:89:92:64:68:12:b3:70:
05:3e:74:18:cd:77:04:0a:96:c8:56:ef:ee:b2:94:
e8:7c:38:9f:39:4f:50:65:26:b6:08:e3:cf:04:74:
b7:ca:be:9f:82:c2:24:e3:ac:ac:f1:8d:7f:45:84:
00:a8:9b:72:79:8f:d8:08:57:53:0e:80:1a:41:3e:
f8:23:e4:f7:0c:fb:8c:2c:16:f0:98:0b:65:07:f0:
87:4c:e6:17:b7:a4:71:da:e5:38:b5:eb:30:9c:91:
a4:2c:a1:24:98:38:32:e6:1a:b9:a4:a2:f2:92:a4:
05:fc:dd:45:d1:2c:e4:96:3c:41:d7:b7:43:c6:f8:
27:f8:ef:d1:9c:f0:f8:1f:7a:ba:50:97:69:4b:ab:
7f:8f:d1:f4:c3:d4:36:83:8a:c5:fd:c9:8c:f3:e6:
e4:4a:fd:c0:79:43:27:5a:47:7b:2b:5c:ab:aa:52:
3f:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:DE:2C:12:F1:42:3D:97:29:6A:91:2B:51:DA:53:E6:F3:4F:2C:A6
X509v3 Authority Key Identifier:
keyid:22:F9:60:FD:EE:F4:07:35:5A:B7:83:6D:CB:6B:90:26:F4:42:93:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ivlg_e70BzVat4Nty2uQJvRCk-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3155bf-c881-4396-aefd-236ba9ee4056/1/294sEvFCPZcpapErUdpT5vNPLKY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3155bf-c881-4396-aefd-236ba9ee4056/1/Ivlg_e70BzVat4Nty2uQJvRCk-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.248.90.0/24
Signature Algorithm: sha256WithRSAEncryption
42:fc:99:f5:86:12:ac:e9:4f:85:87:6c:45:fd:66:ec:ff:fc:
1c:a2:13:89:59:b2:3a:38:8b:e7:da:f7:76:f4:2b:a6:eb:ab:
4b:2d:a6:33:78:ff:4b:81:a5:9f:ed:3d:27:41:e4:3c:c3:55:
2d:82:22:71:dc:52:44:2d:50:c4:b6:b1:6b:47:5b:f0:8b:f3:
1a:5e:19:09:9c:ba:ef:d6:53:0b:b0:a0:4c:95:a0:41:75:bf:
33:ca:2a:17:1e:e3:a4:37:5d:f1:53:3e:70:f0:93:49:59:75:
d7:92:1e:13:90:9f:9a:b5:83:69:3d:69:2d:ca:25:8b:1e:4a:
d2:fb:4a:e3:3b:16:b2:da:92:18:3d:53:62:06:59:d3:5c:6c:
04:ae:ef:a9:89:d9:6f:be:88:25:5c:b0:f9:30:0a:f9:85:ac:
78:77:46:5e:0a:e9:32:fd:2e:ad:8f:8d:c3:d5:6f:2d:f3:33:
f9:57:81:c3:ad:da:2e:72:09:24:a4:c5:b6:56:66:9f:6a:ed:
0c:66:32:9a:13:75:58:c8:df:51:9f:17:35:68:03:52:9d:00:
af:51:57:a4:ec:2f:76:c8:36:c0:4e:59:99:10:37:85:3c:ae:
7b:f7:ae:37:fd:1b:89:ad:94:95:9b:15:48:46:af:60:ab:4c:
75:18:06:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:26:47 2025 by rpki-client