Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/d81b59-c05a-48fe-b5b1-158927337689/1/Kp8YOETyXn_CJNlkKRcjiHTajds.roa
File: Kp8YOETyXn_CJNlkKRcjiHTajds.roa (raw, json)
Hash identifier: pE4tiu3XHnbIpJeimbwG8Yyb4EwnGUv1VJS0J7muojA=
Subject key identifier: 2A:9F:18:38:44:F2:5E:7F:C2:24:D9:64:29:17:23:88:74:DA:8D:DB
Certificate issuer: /CN=45617d2e086358dda7bdb0dc466ca1c86ed4feca
Certificate serial: 0194258F3B36BD349B5BA7C25DD8F22C29FB
Authority key identifier: 45:61:7D:2E:08:63:58:DD:A7:BD:B0:DC:46:6C:A1:C8:6E:D4:FE:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RWF9LghjWN2nvbDcRmyhyG7U_so.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/d81b59-c05a-48fe-b5b1-158927337689/1/Kp8YOETyXn_CJNlkKRcjiHTajds.roa
Signing time: Thu 02 Jan 2025 05:48:51 +0000
ROA not before: Thu 02 Jan 2025 05:48:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47692
IP address blocks: 195.2.220.0/23 maxlen: 23
195.2.220.0/24 maxlen: 24
195.2.221.0/24 maxlen: 24
2001:67c:1508::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:3b:36:bd:34:9b:5b:a7:c2:5d:d8:f2:2c:29:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45617d2e086358dda7bdb0dc466ca1c86ed4feca
Validity
Not Before: Jan 2 05:48:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2a9f183844f25e7fc224d9642917238874da8ddb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:68:20:4a:27:0a:db:51:39:e4:47:5b:78:63:
f8:1b:af:a8:54:91:89:a6:86:42:92:98:be:70:f7:
3d:cf:dd:8a:e3:2f:55:e0:d8:70:3a:49:62:79:dc:
d5:fd:45:7f:50:7e:7d:e7:82:98:a0:e3:3c:bd:dd:
4d:21:99:30:c8:1b:78:23:00:25:dc:8c:cd:9d:c1:
b8:1f:e2:1a:16:d4:01:c2:d6:82:c1:5b:93:a1:d9:
d3:fc:76:a4:2f:9d:48:8a:ad:df:d9:9a:ee:0e:73:
51:ae:28:82:b5:bf:32:07:70:16:a9:9d:92:24:76:
c6:ec:65:16:8c:21:2c:78:3c:9b:c9:2f:56:e2:70:
31:84:e8:91:46:93:ea:6c:3e:6e:b5:d0:dc:f2:75:
02:d8:1d:cc:26:42:d0:85:d5:94:9d:76:2e:a5:2d:
24:76:ef:02:b7:39:0d:9e:c0:bc:d6:d3:c7:8c:d4:
21:9b:fb:6d:0f:1f:2f:64:37:de:15:ce:d4:63:49:
8a:cb:fc:21:ce:76:26:9a:5d:02:4e:ee:8d:f9:c9:
75:45:43:62:0e:a1:53:21:00:e4:b7:7e:9d:87:2e:
79:4c:2b:78:65:fc:b4:f2:08:78:05:63:2c:55:a2:
55:53:3a:39:e8:b4:1c:d5:3e:e3:57:94:45:a8:13:
c6:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:9F:18:38:44:F2:5E:7F:C2:24:D9:64:29:17:23:88:74:DA:8D:DB
X509v3 Authority Key Identifier:
keyid:45:61:7D:2E:08:63:58:DD:A7:BD:B0:DC:46:6C:A1:C8:6E:D4:FE:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RWF9LghjWN2nvbDcRmyhyG7U_so.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/d81b59-c05a-48fe-b5b1-158927337689/1/Kp8YOETyXn_CJNlkKRcjiHTajds.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/d81b59-c05a-48fe-b5b1-158927337689/1/RWF9LghjWN2nvbDcRmyhyG7U_so.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.2.220.0/23
IPv6:
2001:67c:1508::/48
Signature Algorithm: sha256WithRSAEncryption
27:8d:e2:66:7c:d6:5f:34:a7:7b:2a:d5:11:f5:83:be:57:c2:
7a:d3:5d:0b:d5:63:30:6f:dc:de:bd:89:a8:a4:52:97:8f:a2:
52:0a:46:fe:5a:3e:58:e7:78:d2:7b:10:d2:27:f4:f9:d1:aa:
0c:8a:9f:db:46:07:e4:f1:7e:58:e8:0a:ba:5d:20:ad:3f:ed:
4c:70:5a:db:4f:5e:a2:45:ac:d9:31:e4:c1:b7:fa:ff:bd:4c:
43:62:b2:f2:89:2b:68:1e:39:82:de:62:58:2f:a7:be:d1:f1:
c8:d9:29:b3:2e:ed:61:2b:62:38:e2:47:84:be:b7:e4:eb:04:
ad:79:b1:d5:82:b6:9e:41:86:f8:80:1c:8e:cb:d0:fb:db:04:
2a:f5:14:0f:58:86:6f:23:45:0b:c2:ff:d1:bc:75:0c:ea:0d:
df:d4:3f:b7:52:a0:dd:c4:f0:84:8c:93:f2:b8:c6:b5:7c:4b:
4a:28:9e:87:81:da:bc:f6:28:55:64:9d:d5:a1:f3:c0:56:37:
cb:36:21:63:56:bc:9c:37:49:25:16:0f:ea:77:7c:ea:dc:5b:
49:2d:23:92:d9:9b:44:60:70:e3:66:21:e1:9c:92:33:5f:15:
5d:07:6c:ba:8e:a8:d0:2e:b0:2b:ba:b3:3b:ce:35:e0:52:b2:
c3:1b:27:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:22:44 2025 by rpki-client