Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/0b8a72-7f7c-44e5-ad18-3d475e8e6c68/1/i-9QyRK7cTqkkzLm9VJJhVsSZQA.roa
File: i-9QyRK7cTqkkzLm9VJJhVsSZQA.roa (raw, json)
Hash identifier: mC+MLhcr3EpysgE3oTWnE65TQd5v1r3hizJF21L4OPI=
Subject key identifier: 8B:EF:50:C9:12:BB:71:3A:A4:93:32:E6:F5:52:49:85:5B:12:65:00
Certificate issuer: /CN=5251cedc9387c6b3d37fd56461019ca52118aa73
Certificate serial: 018CC8DF523479AF4B5AF3BE9FA271BE4030
Authority key identifier: 52:51:CE:DC:93:87:C6:B3:D3:7F:D5:64:61:01:9C:A5:21:18:AA:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UlHO3JOHxrPTf9VkYQGcpSEYqnM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/0b8a72-7f7c-44e5-ad18-3d475e8e6c68/1/i-9QyRK7cTqkkzLm9VJJhVsSZQA.roa
Signing time: Tue 02 Jan 2024 06:32:07 +0000
ROA not before: Tue 02 Jan 2024 06:32:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58061
IP address blocks: 195.64.110.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:52:34:79:af:4b:5a:f3:be:9f:a2:71:be:40:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5251cedc9387c6b3d37fd56461019ca52118aa73
Validity
Not Before: Jan 2 06:32:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8bef50c912bb713aa49332e6f55249855b126500
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:4b:1e:51:f9:82:8d:66:cf:f1:ef:d7:17:60:
ab:df:03:e3:01:21:41:74:d1:6c:25:23:b2:47:00:
0d:20:9b:c6:71:79:a8:0b:32:f8:0b:cf:a4:49:91:
db:cc:7b:4c:a2:0e:83:b3:d2:f8:da:75:04:0d:9f:
50:66:83:53:49:84:11:bf:3e:2d:fd:76:5d:a3:a3:
9a:3c:1d:df:4d:2b:15:15:e6:1c:e9:d2:6c:e4:be:
61:1a:cf:5b:ca:e5:f5:18:a1:71:dd:7b:de:03:a3:
57:85:2f:71:b7:8b:08:88:b3:e1:bb:8a:79:64:a0:
b6:62:38:4e:7e:04:2e:78:00:2e:fc:48:1f:f7:3d:
bf:0e:f5:dd:0d:8b:29:7c:7b:46:12:6e:f3:8f:5a:
15:b8:f5:fe:98:8d:60:a2:48:f4:79:55:4a:09:ce:
8d:13:2e:a7:81:19:1e:61:91:a1:d3:46:b1:96:4f:
a0:9b:0f:62:0f:d5:40:4e:75:d8:5e:20:bb:30:dd:
a0:aa:c9:bf:ae:01:16:e4:e9:b8:b9:dc:4a:73:c9:
d7:d9:41:5f:1f:f1:ef:09:d9:87:90:1d:1b:4b:5e:
67:b6:35:a1:cf:cd:7c:c5:a5:14:78:27:4e:e2:6a:
bd:db:92:56:0c:f7:fd:d2:56:19:c6:25:ce:b0:78:
98:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:EF:50:C9:12:BB:71:3A:A4:93:32:E6:F5:52:49:85:5B:12:65:00
X509v3 Authority Key Identifier:
keyid:52:51:CE:DC:93:87:C6:B3:D3:7F:D5:64:61:01:9C:A5:21:18:AA:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UlHO3JOHxrPTf9VkYQGcpSEYqnM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0b8a72-7f7c-44e5-ad18-3d475e8e6c68/1/i-9QyRK7cTqkkzLm9VJJhVsSZQA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0b8a72-7f7c-44e5-ad18-3d475e8e6c68/1/UlHO3JOHxrPTf9VkYQGcpSEYqnM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.64.110.0/24
Signature Algorithm: sha256WithRSAEncryption
47:04:2f:34:42:69:7d:c6:80:4f:fe:8f:a0:a8:75:de:a5:bb:
31:d4:0a:6c:b2:a9:6c:d7:ed:8c:d4:c5:8c:d6:95:11:bf:fb:
6f:9f:41:7d:bc:a8:78:f9:53:c1:58:5b:a3:ad:81:16:0a:bc:
f9:0a:3b:89:7d:d3:35:e2:0b:fb:e0:03:81:bb:e7:94:b7:13:
82:3b:d4:51:5f:c7:1f:92:cf:bc:d3:56:dd:49:33:f2:8c:31:
71:19:57:fd:0a:71:46:e7:3e:71:63:0f:ad:23:ac:f6:a1:8a:
d0:6f:3a:25:54:98:68:6f:2e:cb:5b:b1:49:fe:9b:50:77:f3:
32:42:a6:52:62:4f:d1:ce:97:69:4d:da:05:ea:97:2c:ce:d5:
17:7e:f2:8e:00:36:e9:73:17:1c:6c:46:4a:c5:06:cb:69:76:
0a:cc:38:92:46:c3:6a:dc:e0:86:62:23:6c:6d:31:10:fc:cc:
2e:35:2c:9b:98:1f:e3:cf:0d:1a:6c:3d:03:51:63:54:42:4b:
22:43:47:f3:52:c8:be:51:29:ca:38:c8:d6:a7:a0:3d:f4:2a:
d3:b1:37:16:6f:84:51:d0:62:ab:1e:63:ea:eb:74:48:fd:c4:
16:29:73:df:c5:7b:c0:16:3c:dc:92:d5:47:a9:f6:4d:db:3f:
e4:eb:a0:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:58:24 2025 by rpki-client