Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/kgYRLKeWjX2x42TlReTyIqKm_q8.roa
File: kgYRLKeWjX2x42TlReTyIqKm_q8.roa (raw, json)
Hash identifier: mQpToQvkCO6G4pNYzR0oGYIVbC0DTyOfYQpQwaj4Kgw=
Subject key identifier: 92:06:11:2C:A7:96:8D:7D:B1:E3:64:E5:45:E4:F2:22:A2:A6:FE:AF
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 01953DF38153361CF517B6083F0551507BCC
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/kgYRLKeWjX2x42TlReTyIqKm_q8.roa
Signing time: Tue 25 Feb 2025 16:32:03 +0000
ROA not before: Tue 25 Feb 2025 16:32:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 329007
IP address blocks: 195.178.156.0/24 maxlen: 24
212.111.217.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:3d:f3:81:53:36:1c:f5:17:b6:08:3f:05:51:50:7b:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Feb 25 16:32:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9206112ca7968d7db1e364e545e4f222a2a6feaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:9a:c6:29:f9:94:89:51:2f:ab:3f:82:91:d7:
5d:30:05:7e:31:e2:32:e5:24:04:74:dd:6d:f7:55:
63:0a:8b:ae:94:e1:02:40:d4:3c:65:6a:1b:86:01:
a3:1e:4b:51:81:56:1e:89:70:15:dd:23:2b:ef:94:
a7:47:1e:9e:6d:2c:b5:41:ae:a9:2a:ae:44:f1:82:
a3:31:3e:d4:0f:0c:9f:46:79:82:2f:5f:29:a0:4c:
ae:b4:15:cd:a9:bc:94:f6:6c:b8:fd:90:17:74:9c:
b9:8c:3b:db:df:33:ca:e9:45:65:44:57:a6:ec:aa:
c2:01:3c:54:84:3b:fb:5e:a4:6a:c7:43:da:70:64:
69:9d:37:b3:6d:50:c4:ba:6e:a6:b1:b2:99:07:91:
b0:7e:5b:d0:9f:c8:ee:38:c0:12:57:cc:57:65:d3:
ff:36:e8:0e:bd:ac:a3:f0:a0:78:89:df:47:40:7b:
75:9f:03:9b:5c:83:d0:a8:15:f0:cd:29:f7:c6:45:
fe:81:cd:8a:b5:13:3b:ac:6e:82:5e:e2:cd:56:80:
4b:72:53:81:b4:9c:da:b0:95:90:d6:08:87:fe:42:
d3:ae:d9:28:96:ad:bc:34:15:23:05:82:81:e2:d1:
b3:36:f3:62:2a:ce:af:a1:ec:c6:0e:1f:9f:69:bf:
c2:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:06:11:2C:A7:96:8D:7D:B1:E3:64:E5:45:E4:F2:22:A2:A6:FE:AF
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/kgYRLKeWjX2x42TlReTyIqKm_q8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.178.156.0/24
212.111.217.0/24
Signature Algorithm: sha256WithRSAEncryption
38:11:b8:c7:b1:81:92:f2:6e:6c:2a:f7:02:51:46:af:00:c7:
b0:3a:55:e2:a6:03:3b:19:cd:76:f8:7d:c9:7d:15:9b:5e:13:
fa:f8:25:3f:2e:d1:f5:65:da:32:50:2c:1e:09:cd:e7:fe:e5:
8f:34:33:91:9b:10:f9:e1:d6:f9:de:7d:a2:02:57:a2:e6:3a:
5b:78:f2:07:03:39:53:76:a8:8e:32:70:eb:f8:44:7e:a4:e2:
a5:56:f3:ae:3a:ff:bf:6a:bb:97:33:76:bd:21:6c:d0:fc:0c:
95:83:16:b0:ee:42:ad:7d:7b:39:e6:50:6c:3c:55:2b:f9:30:
ab:c0:b4:d8:98:79:6d:d9:9a:88:6e:71:99:44:ef:cd:28:f7:
a1:c7:14:bc:57:98:6f:dc:5d:86:f8:9c:ae:f5:9f:67:8d:11:
81:d2:6b:45:13:b9:48:8c:98:86:71:4c:40:e0:2a:0b:d4:a6:
94:dc:4d:e2:eb:7c:15:7d:79:b3:fc:25:1b:e7:b7:30:f3:bc:
6b:82:ac:3a:6b:b3:c6:cc:0e:60:4e:37:50:a4:b5:23:4f:0e:
66:09:08:8a:e0:78:6d:66:35:61:35:f1:1e:2c:2e:94:12:74:
4f:b9:79:62:12:a7:96:e0:91:a9:bc:a2:f5:b5:02:e9:13:34:
dc:1d:94:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:00:07 2025 by rpki-client