Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/1tI7Gq6wrPLRpjeUzC_GrOYPqZ0.roa
File: 1tI7Gq6wrPLRpjeUzC_GrOYPqZ0.roa (raw, json)
Hash identifier: xlDzBukhszCg1ynm8q0OHDdDRpBK+e0yk8+3eMgwkrM=
Subject key identifier: D6:D2:3B:1A:AE:B0:AC:F2:D1:A6:37:94:CC:2F:C6:AC:E6:0F:A9:9D
Certificate issuer: /CN=9e3533d662c3f0d6bb1e692f3fab6d7ba3824c28
Certificate serial: 019426D9E127CEFEDB0836CAEEBFCE235781
Authority key identifier: 9E:35:33:D6:62:C3:F0:D6:BB:1E:69:2F:3F:AB:6D:7B:A3:82:4C:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/njUz1mLD8Na7HmkvP6tte6OCTCg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/1tI7Gq6wrPLRpjeUzC_GrOYPqZ0.roa
Signing time: Thu 02 Jan 2025 11:50:00 +0000
ROA not before: Thu 02 Jan 2025 11:50:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6830
IP address blocks: 195.13.61.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:e1:27:ce:fe:db:08:36:ca:ee:bf:ce:23:57:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e3533d662c3f0d6bb1e692f3fab6d7ba3824c28
Validity
Not Before: Jan 2 11:50:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d6d23b1aaeb0acf2d1a63794cc2fc6ace60fa99d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b6:c8:bb:8c:18:81:f4:57:2f:ae:55:09:8e:
2b:8c:80:12:de:32:9f:b0:ee:2a:9d:7b:b3:f7:04:
d3:b3:ff:5c:5a:34:36:b7:30:98:c2:0a:e3:1b:07:
21:8d:66:68:af:26:68:70:89:30:a6:fe:bc:c3:83:
f7:90:82:4f:b4:52:1d:7c:e0:87:73:9e:2a:b2:b9:
37:ca:ad:d2:96:8c:93:6c:d9:99:0c:c5:7a:42:cc:
79:14:41:e9:62:33:75:91:4f:73:10:b7:4f:fd:ae:
a6:1d:dc:f2:3f:74:21:98:fb:dd:ca:33:93:ca:5c:
ba:96:81:97:9c:21:95:6c:e3:ca:53:75:9d:72:63:
8e:3e:70:26:89:37:fe:c0:d3:28:21:17:ef:ea:71:
7e:3d:13:79:09:fa:ee:34:f9:a5:65:ff:d8:81:fc:
3d:15:4f:ca:e8:2a:cb:f7:ac:af:82:bf:79:c4:77:
5e:7d:35:ff:40:9c:30:91:50:ab:ed:ee:14:e3:c0:
8d:7f:47:89:da:b2:2e:8c:54:d1:25:bc:b1:83:98:
39:1b:03:03:ea:45:b9:24:71:4d:77:be:a5:9e:f1:
d2:56:e4:0e:0c:a4:9f:23:2c:83:00:9b:6d:9a:f7:
8f:14:e4:53:d9:00:fe:a2:86:c0:85:7a:5c:38:a1:
29:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:D2:3B:1A:AE:B0:AC:F2:D1:A6:37:94:CC:2F:C6:AC:E6:0F:A9:9D
X509v3 Authority Key Identifier:
keyid:9E:35:33:D6:62:C3:F0:D6:BB:1E:69:2F:3F:AB:6D:7B:A3:82:4C:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/njUz1mLD8Na7HmkvP6tte6OCTCg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/1tI7Gq6wrPLRpjeUzC_GrOYPqZ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/njUz1mLD8Na7HmkvP6tte6OCTCg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.13.61.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:86:52:0f:de:69:35:e1:c9:c5:16:51:71:58:b4:dd:e0:37:
f2:8b:96:56:8d:c3:29:6f:13:6a:08:e3:0c:af:fa:f2:71:07:
fd:4b:fb:72:e3:fe:cb:d1:ff:7a:cd:92:41:47:8a:79:85:0e:
07:60:c3:1d:59:98:a6:bc:22:c7:2d:b7:9b:75:12:e6:cf:7e:
6d:52:68:5d:48:11:b3:3f:e9:29:1e:bd:0d:19:3f:8f:94:b3:
12:f4:5f:26:9d:b9:9f:17:d3:96:44:91:10:33:bf:05:74:2d:
ed:74:7a:15:4d:74:4f:af:b2:13:44:98:38:a7:c7:0d:dc:33:
0b:a7:2c:9b:20:88:72:91:d1:0d:8c:02:cf:9a:be:95:88:c6:
e2:85:17:ae:55:13:a9:31:3b:ee:7f:93:54:86:be:d3:48:ea:
f9:bc:61:b0:81:8d:8d:b1:a7:7e:aa:93:a1:b4:5e:2c:53:97:
21:aa:23:a4:7f:b7:05:10:7b:b5:cc:9b:d3:00:a8:de:da:a0:
8f:c7:dc:6c:90:95:a7:55:f2:02:96:52:10:fa:12:c0:22:f6:
4c:56:50:29:80:c6:b3:0d:37:06:e9:fa:b7:21:7d:af:1b:44:
62:3b:17:36:96:82:14:36:0a:21:39:76:f8:f3:9f:bd:b0:9e:
b8:7a:57:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 05:29:54 2025 by rpki-client