Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/plBE2K-1jhmKq6eM8fW4KaXWZeQ.roa
File: plBE2K-1jhmKq6eM8fW4KaXWZeQ.roa (raw, json)
Hash identifier: Fhmhnyiel4/Ua1E2ksX/40TvHfAVYkZD+dMm3wF8AAw=
Subject key identifier: A6:50:44:D8:AF:B5:8E:19:8A:AB:A7:8C:F1:F5:B8:29:A5:D6:65:E4
Certificate issuer: /CN=557b0ac10b8642a27dd3d74ed6cb5ee045e67b97
Certificate serial: 019421B22EA21D2117A4E3617E23C1D506C2
Authority key identifier: 55:7B:0A:C1:0B:86:42:A2:7D:D3:D7:4E:D6:CB:5E:E0:45:E6:7B:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VXsKwQuGQqJ909dO1ste4EXme5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/plBE2K-1jhmKq6eM8fW4KaXWZeQ.roa
Signing time: Wed 01 Jan 2025 11:48:32 +0000
ROA not before: Wed 01 Jan 2025 11:48:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60974
IP address blocks: 95.169.195.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:2e:a2:1d:21:17:a4:e3:61:7e:23:c1:d5:06:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=557b0ac10b8642a27dd3d74ed6cb5ee045e67b97
Validity
Not Before: Jan 1 11:48:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a65044d8afb58e198aaba78cf1f5b829a5d665e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:02:54:74:f3:43:dd:c2:64:ef:e3:4f:da:48:
75:1a:7b:e5:40:cd:f4:06:52:83:24:cf:3e:99:7d:
5c:1d:5f:0d:99:ac:1a:c5:51:8c:70:2a:66:ad:05:
c6:e0:eb:e4:0c:9b:6a:ce:63:40:45:8a:46:0c:9f:
dc:04:74:18:a8:a9:2f:4b:fa:cc:43:dd:8d:43:f7:
90:c8:66:e6:d2:a3:60:19:f0:02:73:e5:34:a4:bc:
10:bf:d1:67:9e:22:95:c9:31:7c:c3:12:5f:4a:7f:
f2:df:fb:1d:fa:bd:9b:e3:29:df:35:8d:18:a9:71:
77:a7:fb:62:e2:0e:6b:e5:92:f0:ed:b4:5f:a3:1b:
94:25:0e:d0:c0:44:4b:16:5d:21:1e:25:13:a4:96:
f2:33:0c:ce:2c:20:b2:64:a1:99:8c:95:79:5c:56:
ae:77:79:56:5e:33:a0:47:55:f3:82:de:cc:66:68:
1f:0f:fd:47:20:d5:da:d0:02:be:2c:d6:6f:9f:04:
8a:49:e6:18:a6:4b:a4:e0:f1:ad:0f:b1:03:4f:89:
88:6e:7e:58:86:62:c0:a6:d6:05:5c:07:6b:8f:f7:
72:df:25:db:87:96:4e:c2:47:5c:9d:26:b9:bf:c4:
eb:00:84:18:d2:d2:50:23:53:d2:cf:78:ad:c8:43:
89:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:50:44:D8:AF:B5:8E:19:8A:AB:A7:8C:F1:F5:B8:29:A5:D6:65:E4
X509v3 Authority Key Identifier:
keyid:55:7B:0A:C1:0B:86:42:A2:7D:D3:D7:4E:D6:CB:5E:E0:45:E6:7B:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VXsKwQuGQqJ909dO1ste4EXme5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/plBE2K-1jhmKq6eM8fW4KaXWZeQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.169.195.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:df:03:72:d1:43:d1:4a:a8:6f:74:cf:b1:6a:ea:a3:dc:7d:
55:ba:42:02:35:a7:cf:25:3c:59:c6:65:3a:af:5c:a9:12:c7:
43:38:dc:09:ab:84:e5:ee:53:f2:34:f1:cb:0c:dd:45:07:3f:
35:3e:01:a8:c0:47:06:46:ab:af:6f:17:68:72:b7:31:42:1f:
2e:0b:b0:11:7f:7b:e9:40:f1:18:a5:df:3a:13:81:9f:88:10:
da:e0:aa:32:79:bf:48:fa:12:59:46:52:0c:90:92:84:16:ca:
6f:69:55:75:a9:fc:ad:21:da:bb:41:90:9e:07:95:8e:27:c6:
f7:95:69:07:06:34:85:cf:bd:04:6e:af:1d:30:4b:cd:99:ec:
b2:60:dc:bc:d6:13:5e:e2:61:59:f9:ff:cc:d0:4e:20:ba:65:
5d:89:fa:5e:55:6c:67:39:8c:55:15:fd:80:f5:25:6d:01:e3:
5d:79:19:14:a4:87:07:03:0b:f9:2d:80:30:7d:fd:93:50:cf:
bc:82:b3:86:dd:17:bc:5c:2a:4b:a3:71:17:de:e9:f6:2c:a3:
2d:19:ec:b0:d7:68:87:2e:f6:4a:51:97:4c:cd:39:b4:3a:7f:
b7:ad:09:ba:94:16:4e:2b:11:f2:62:88:ec:4d:ae:04:45:51:
12:29:89:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:18:07 2025 by rpki-client