Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/c4091f-0478-416c-bfee-79aa8a4bdaaa/1/dGPclKcbnr7GvfMKIU8h6jU6Ob0.roa
File: dGPclKcbnr7GvfMKIU8h6jU6Ob0.roa (raw, json)
Hash identifier: MhAFi1N17d88XhGnVaXk+i+RHTzJ5iUi/AI7y7V/H2A=
Subject key identifier: 74:63:DC:94:A7:1B:9E:BE:C6:BD:F3:0A:21:4F:21:EA:35:3A:39:BD
Certificate issuer: /CN=c01e01a400975975ce86b15f59a652a80dc3509c
Certificate serial: 01856B4A3575D9DCEA5EF10A55A2217F3855
Authority key identifier: C0:1E:01:A4:00:97:59:75:CE:86:B1:5F:59:A6:52:A8:0D:C3:50:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wB4BpACXWXXOhrFfWaZSqA3DUJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/c4091f-0478-416c-bfee-79aa8a4bdaaa/1/dGPclKcbnr7GvfMKIU8h6jU6Ob0.roa
Signing time: Sun 01 Jan 2023 03:05:03 +0000
ROA not before: Sun 01 Jan 2023 03:05:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 45035
IP address blocks: 195.60.178.0/24 maxlen: 24
195.60.179.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:4a:35:75:d9:dc:ea:5e:f1:0a:55:a2:21:7f:38:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c01e01a400975975ce86b15f59a652a80dc3509c
Validity
Not Before: Jan 1 03:05:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7463dc94a71b9ebec6bdf30a214f21ea353a39bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:0f:e2:de:b7:c5:ae:d7:f3:f4:70:cd:8e:3f:
e3:d3:39:a9:1a:36:69:1e:ca:cb:36:d6:f9:51:ea:
48:61:24:2c:d6:f9:8a:24:7e:05:7d:c3:65:87:d6:
51:3e:03:14:ae:a9:f9:dc:dd:1d:7e:bd:00:36:ae:
7b:0f:b1:20:51:3b:80:bd:7a:c7:3c:e7:47:96:9e:
48:da:5f:43:8c:ef:80:8c:f8:8a:a1:48:03:f1:80:
14:24:1e:5a:90:50:b3:9d:9d:eb:0a:cd:85:c8:e9:
39:61:40:0c:73:d5:26:23:cd:cf:5a:ec:57:fa:15:
f7:36:c9:4c:c3:4e:72:04:30:c8:cf:89:37:eb:a5:
8f:9b:00:79:fb:5a:09:c0:b8:74:55:57:fa:ed:29:
3c:74:50:82:99:0f:5f:c1:7f:48:af:d9:78:bf:fb:
12:06:a3:63:f8:a1:71:ea:f5:32:7b:61:6f:6f:89:
b9:e5:9f:78:06:b1:40:11:05:71:3d:87:60:8e:12:
44:6f:50:ae:be:30:9f:d7:2d:0f:67:12:4d:44:5d:
62:08:8d:a0:fc:d9:02:8d:38:c9:fe:78:bb:7f:5f:
5b:b7:88:4d:65:6c:cb:fd:a7:0e:10:c5:f3:70:d0:
e2:3b:77:8e:24:02:97:33:88:07:f3:e5:c1:d9:57:
d8:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:63:DC:94:A7:1B:9E:BE:C6:BD:F3:0A:21:4F:21:EA:35:3A:39:BD
X509v3 Authority Key Identifier:
keyid:C0:1E:01:A4:00:97:59:75:CE:86:B1:5F:59:A6:52:A8:0D:C3:50:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wB4BpACXWXXOhrFfWaZSqA3DUJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/c4091f-0478-416c-bfee-79aa8a4bdaaa/1/dGPclKcbnr7GvfMKIU8h6jU6Ob0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/c4091f-0478-416c-bfee-79aa8a4bdaaa/1/wB4BpACXWXXOhrFfWaZSqA3DUJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.60.178.0/23
Signature Algorithm: sha256WithRSAEncryption
09:6a:a0:70:77:97:c4:2b:f8:03:de:7e:53:09:e6:e6:68:6d:
62:24:69:95:f5:c9:f1:7e:fb:b5:ac:bf:51:b8:0e:c0:3f:ad:
38:d8:25:cc:24:9c:99:59:89:43:6f:cb:f4:f1:5e:3f:d6:79:
a7:b0:cb:c9:eb:d8:aa:8e:b7:e1:29:35:b4:2a:13:5c:63:a2:
23:f4:59:f2:e6:df:e5:0f:6a:6f:e4:74:30:63:bf:04:e3:cd:
3c:82:d5:0a:46:27:7d:32:77:67:ab:13:0c:7d:e0:93:f3:ab:
cf:1a:50:fa:e5:33:b3:a9:12:ae:a5:88:cd:d9:83:ba:2c:b3:
11:3c:61:69:7f:e2:5e:21:1a:ab:f5:38:db:02:84:8e:1e:f7:
42:f1:f6:3e:5a:e7:a5:69:0e:9f:39:a6:67:6c:af:7f:dd:99:
dc:07:1e:e8:0a:e0:e2:28:ec:84:40:31:fe:6c:07:ec:12:68:
f1:08:ed:19:7f:02:91:b7:e8:e8:91:3e:a9:b2:7b:9e:21:84:
78:bb:7d:c4:31:e9:88:15:7b:bd:ed:0f:de:86:45:b5:c5:42:
ac:1a:eb:ef:7f:2e:9f:91:f9:fc:bf:63:60:a5:e4:51:1d:87:
36:ce:9b:70:13:5e:b5:bc:6a:18:3a:00:c7:53:79:a1:38:f8:
a0:28:07:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 01:54:19 2025 by rpki-client