Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/4c3e48-9990-4b0b-af77-7e94068450e9/1/dQ5CeIqNmMFyT6_9_9epmZiAW_o.roa
File: dQ5CeIqNmMFyT6_9_9epmZiAW_o.roa (raw, json)
Hash identifier: 7PsoXv4TdhRgpWrTu3PPrBHRt4ZMCFwOmDxZpcBYlfA=
Subject key identifier: 75:0E:42:78:8A:8D:98:C1:72:4F:AF:FD:FF:D7:A9:99:98:80:5B:FA
Certificate issuer: /CN=cc82c39a5f3e91ea05051bb3ed9c0d16ae82fa0c
Certificate serial: 01861D96D4A64A98EB13A49C645E0A88CD64
Authority key identifier: CC:82:C3:9A:5F:3E:91:EA:05:05:1B:B3:ED:9C:0D:16:AE:82:FA:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zILDml8-keoFBRuz7ZwNFq6C-gw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/4c3e48-9990-4b0b-af77-7e94068450e9/1/dQ5CeIqNmMFyT6_9_9epmZiAW_o.roa
Signing time: Sat 04 Feb 2023 18:01:09 +0000
ROA not before: Sat 04 Feb 2023 18:01:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34907
IP address blocks: 195.245.200.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:1d:96:d4:a6:4a:98:eb:13:a4:9c:64:5e:0a:88:cd:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc82c39a5f3e91ea05051bb3ed9c0d16ae82fa0c
Validity
Not Before: Feb 4 18:01:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=750e42788a8d98c1724faffdffd7a99998805bfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:5a:37:1f:ac:63:f8:c6:b3:6f:27:d5:e6:ea:
55:4f:5b:a3:ca:15:e9:8d:a1:b1:79:28:c8:7e:5f:
df:98:93:b1:d0:24:6f:8b:9e:08:40:7a:6a:00:75:
7d:6b:c9:0b:0f:06:9e:91:c2:17:a5:aa:ac:0f:ee:
15:51:f3:8d:ea:e4:c3:03:f2:2d:e8:22:ad:d6:17:
a5:30:30:92:26:41:7d:9d:32:d0:5f:4f:12:04:00:
8b:73:86:2a:ad:9f:ec:c9:63:4f:d4:94:d3:24:52:
d2:d7:90:79:73:4b:2f:75:72:fc:db:35:3b:9d:5f:
eb:e2:2b:05:96:e3:85:7a:46:2d:95:95:48:70:ba:
54:68:69:ec:50:89:e5:40:8b:87:8c:f1:ca:83:35:
54:5f:3d:bc:f8:14:26:0e:15:bf:e2:20:12:db:72:
ac:47:d7:03:fb:0c:e7:54:2b:c9:f5:76:4e:3c:d5:
c1:14:a1:3d:63:c6:b6:a9:b5:0f:64:5a:3a:bf:bf:
d1:f7:6f:97:3e:06:4d:33:91:99:fb:72:a8:69:21:
78:8e:40:1b:a9:50:44:61:55:8f:ee:55:be:11:4c:
69:24:4c:3d:d0:ea:ea:cd:eb:1b:42:f9:ba:f2:9e:
ae:23:26:c9:7b:fd:eb:bd:84:69:4c:af:6b:7a:f2:
d8:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:0E:42:78:8A:8D:98:C1:72:4F:AF:FD:FF:D7:A9:99:98:80:5B:FA
X509v3 Authority Key Identifier:
keyid:CC:82:C3:9A:5F:3E:91:EA:05:05:1B:B3:ED:9C:0D:16:AE:82:FA:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zILDml8-keoFBRuz7ZwNFq6C-gw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/4c3e48-9990-4b0b-af77-7e94068450e9/1/dQ5CeIqNmMFyT6_9_9epmZiAW_o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/4c3e48-9990-4b0b-af77-7e94068450e9/1/zILDml8-keoFBRuz7ZwNFq6C-gw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.245.200.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:62:a9:9b:9c:aa:63:67:b8:17:29:d0:09:5c:07:2c:74:91:
9d:66:df:c7:cd:76:7f:9a:a5:c8:01:e4:00:c2:a8:27:17:03:
af:51:c2:2a:ec:b8:f9:d0:f6:3b:37:6d:df:bc:12:3a:cb:cd:
ec:ed:41:e7:ce:e0:84:c5:14:23:0c:6f:83:b7:7c:9f:18:a0:
aa:23:15:79:3c:fb:4e:ed:b0:30:20:a0:9b:7c:7f:f3:b6:67:
2e:a3:59:21:92:1d:84:0e:b3:b9:21:71:11:d9:03:6e:71:9a:
f5:68:cd:43:65:fe:a8:8f:48:96:f2:13:b9:46:a4:ab:e4:2b:
58:d2:d4:08:f4:86:f5:64:f1:51:f0:ac:ab:34:60:e7:e3:c7:
db:69:c4:f3:5a:dc:02:ba:f4:1f:de:3a:49:b9:f8:d0:a8:2f:
ef:8a:41:d5:cc:bd:4f:d4:3f:47:72:55:1d:32:ee:20:2c:28:
b7:63:84:82:79:29:fb:8b:3a:65:35:58:b5:54:95:af:01:c8:
17:a7:45:ea:c2:2d:9f:d7:f2:9d:89:2f:69:c3:25:c7:16:a6:
7f:ac:c3:3b:77:3f:61:2e:61:2b:cd:7c:d9:99:e4:2e:d5:a9:
49:4c:de:46:5f:27:b7:19:d3:9d:fe:eb:b1:15:4e:8b:a5:30:
b1:2c:d4:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 18:41:20 2025 by rpki-client