Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/769743-4ba1-43ce-af23-4846062f9a73/1/iB80sjC3FaeKn3w8-_wDD7I9eLg.roa
File: iB80sjC3FaeKn3w8-_wDD7I9eLg.roa (raw, json)
Hash identifier: J8k5oGXUl2TYImVeWDD/bvu/zaBz6UEfFHiKZd9EJV0=
Subject key identifier: 88:1F:34:B2:30:B7:15:A7:8A:9F:7C:3C:FB:FC:03:0F:B2:3D:78:B8
Certificate issuer: /CN=c0d2a8845cdf6576de8eb0111808abd65fd8bc44
Certificate serial: 0194258F431681A5890EDC3E34CFC93A01FF
Authority key identifier: C0:D2:A8:84:5C:DF:65:76:DE:8E:B0:11:18:08:AB:D6:5F:D8:BC:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wNKohFzfZXbejrARGAir1l_YvEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/769743-4ba1-43ce-af23-4846062f9a73/1/iB80sjC3FaeKn3w8-_wDD7I9eLg.roa
Signing time: Thu 02 Jan 2025 05:48:53 +0000
ROA not before: Thu 02 Jan 2025 05:48:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9211
IP address blocks: 195.242.100.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:43:16:81:a5:89:0e:dc:3e:34:cf:c9:3a:01:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0d2a8845cdf6576de8eb0111808abd65fd8bc44
Validity
Not Before: Jan 2 05:48:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=881f34b230b715a78a9f7c3cfbfc030fb23d78b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:5c:d5:13:1f:ed:65:d1:fd:a5:43:fe:2d:15:
24:6f:46:c7:e8:6d:8b:49:ff:b4:b7:7f:f8:12:55:
b2:26:97:a1:93:3f:a4:8c:e7:d8:fe:24:36:0f:16:
13:be:b8:ad:9f:69:6a:50:56:cc:2f:c4:dc:77:29:
84:58:e9:88:05:75:39:0d:db:df:a2:2c:b0:23:06:
24:45:71:3b:30:07:9e:6b:a3:25:b4:65:4f:1e:6a:
c2:71:3a:70:ba:1b:02:33:73:51:c8:a5:fb:e3:e9:
88:cc:0c:db:d3:d2:ef:33:87:3d:80:31:7f:5b:98:
ed:ca:29:f3:ba:af:87:d2:7a:91:b7:6c:95:3d:f1:
67:33:37:8a:81:db:6f:d1:36:44:ea:63:c2:fa:38:
b1:29:7c:7b:06:58:d6:07:25:54:f5:a2:6d:91:9a:
c7:cd:20:6a:91:d2:22:61:f5:29:e8:f4:32:f7:2e:
80:3c:10:c6:b5:22:33:59:4a:80:c7:b0:f0:72:03:
58:2b:34:cd:73:54:d3:1b:13:f4:02:d5:06:a6:c6:
2b:2f:ef:7d:3d:4a:bf:ca:3d:2d:3d:0c:23:a3:52:
ab:65:66:5b:d3:87:ef:f9:cd:e1:3f:eb:80:3a:d5:
71:18:cb:d3:af:08:d1:5f:08:64:7e:88:de:3a:7e:
b1:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:1F:34:B2:30:B7:15:A7:8A:9F:7C:3C:FB:FC:03:0F:B2:3D:78:B8
X509v3 Authority Key Identifier:
keyid:C0:D2:A8:84:5C:DF:65:76:DE:8E:B0:11:18:08:AB:D6:5F:D8:BC:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wNKohFzfZXbejrARGAir1l_YvEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/769743-4ba1-43ce-af23-4846062f9a73/1/iB80sjC3FaeKn3w8-_wDD7I9eLg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/769743-4ba1-43ce-af23-4846062f9a73/1/wNKohFzfZXbejrARGAir1l_YvEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.242.100.0/22
Signature Algorithm: sha256WithRSAEncryption
0b:e9:a6:ee:57:df:42:69:36:87:f7:93:41:28:6f:fc:f3:e6:
2a:6f:6c:61:fe:0a:e8:a6:72:73:27:d3:96:cb:48:09:10:15:
12:59:3e:47:32:d2:73:37:15:89:1a:2a:ea:58:ea:49:1f:5f:
33:e6:ba:c0:18:e6:7e:5a:b2:17:e9:4d:07:da:fc:0b:93:76:
af:02:3a:b9:40:54:a8:33:7b:99:75:57:b4:c5:40:87:39:f4:
42:08:08:15:d9:31:e4:0a:c6:62:f6:47:f3:56:9e:ec:8c:50:
ed:de:81:17:6c:82:af:a8:7c:a5:28:74:e7:c1:73:93:86:e1:
f3:69:6d:da:43:dd:89:19:1e:ec:10:3d:04:eb:99:fb:b6:22:
10:de:56:a8:da:c1:c7:5b:5d:b3:b2:47:fc:43:ae:ef:ec:df:
2a:71:e1:d9:e3:41:d9:c7:86:a8:ae:3e:a7:1b:88:40:46:35:
df:b8:62:13:6b:c8:d9:cf:e9:8b:ac:09:c5:32:48:d5:93:ff:
75:b6:ca:76:7c:24:64:60:06:1a:7d:28:f0:d5:2d:af:32:17:
6c:a5:5e:d1:b1:96:26:b2:1b:84:dc:91:e0:a7:ff:29:ff:6f:
21:4f:45:39:9d:c7:a9:ba:9b:11:4c:67:3d:c0:0e:60:0d:80:
a7:e9:b3:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:18:16 2025 by rpki-client