Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/hkZJB1a79MvC4_Ennn8Lywm2Uvg.roa
File: hkZJB1a79MvC4_Ennn8Lywm2Uvg.roa (raw, json)
Hash identifier: DH2+5gYiz4tzvv9ffBPhkwZyLUMwN3ZmTOzXsu985ew=
Subject key identifier: 86:46:49:07:56:BB:F4:CB:C2:E3:F1:27:9E:7F:0B:CB:09:B6:52:F8
Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial: 019421B215B91C9AF7CD7EB9222EE91A4D4E
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/hkZJB1a79MvC4_Ennn8Lywm2Uvg.roa
Signing time: Wed 01 Jan 2025 11:48:26 +0000
ROA not before: Wed 01 Jan 2025 11:48:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39039
IP address blocks: 195.136.110.0/23 maxlen: 23
195.136.190.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:15:b9:1c:9a:f7:cd:7e:b9:22:2e:e9:1a:4d:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Validity
Not Before: Jan 1 11:48:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8646490756bbf4cbc2e3f1279e7f0bcb09b652f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:0a:30:6a:5b:f4:8d:9c:dd:d1:3c:b8:d4:79:
8e:1b:ed:e5:94:5f:30:b3:c9:05:13:72:20:84:c5:
17:73:72:c4:3c:54:4e:b9:64:65:a2:79:40:64:d7:
bd:f5:e2:95:b5:65:8f:11:2b:8a:f9:ef:a7:ab:9e:
1f:7b:d7:2e:ce:08:98:14:d8:3e:a3:88:40:a7:62:
13:ac:0e:b0:5c:77:6e:3d:21:e2:49:ed:79:9d:db:
11:a1:2f:aa:8f:d3:3e:7f:cb:68:d3:1f:f6:a8:9d:
79:31:f4:3f:b0:fc:62:55:16:46:20:8b:23:77:ee:
2a:0e:33:31:cd:62:7c:81:51:92:e0:bb:f4:ce:0d:
03:fb:c2:6c:23:65:4b:27:e6:f3:8d:84:08:f5:89:
41:85:3b:99:7f:28:bf:39:c5:74:c3:89:64:d5:83:
5c:5d:0c:30:08:2e:8c:e4:27:ce:a7:08:62:08:45:
6e:82:35:58:b6:a6:e0:9b:51:32:49:63:fa:dd:ab:
40:1f:02:8c:8a:d8:73:e5:b6:ce:1d:13:27:2a:6b:
5b:35:b6:8b:f2:5c:92:13:32:ab:20:bd:29:a4:f2:
62:d3:16:de:09:a7:5a:8d:6d:2f:c3:c5:d4:2b:8c:
2b:f9:52:4e:3e:9f:b7:ef:fa:dc:69:a1:f2:96:28:
bf:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:46:49:07:56:BB:F4:CB:C2:E3:F1:27:9E:7F:0B:CB:09:B6:52:F8
X509v3 Authority Key Identifier:
keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/hkZJB1a79MvC4_Ennn8Lywm2Uvg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.136.110.0/23
195.136.190.0/23
Signature Algorithm: sha256WithRSAEncryption
7b:1a:c6:32:12:07:1b:cb:95:21:11:22:d0:81:75:c7:91:15:
a2:cc:2f:cd:4e:19:0f:f0:49:32:a0:ee:9c:13:79:c5:6c:98:
37:ca:e9:30:26:d4:d7:92:32:13:df:1b:40:35:ae:4a:89:a5:
d0:69:76:d3:4b:21:1c:38:9f:0f:f2:9a:44:81:6e:47:3f:ba:
56:b2:c7:78:f0:68:2c:d5:5d:a3:16:0e:e5:23:07:e7:ee:6a:
c7:6e:ae:ff:fd:cb:20:b3:80:a6:d1:49:45:d0:fa:42:34:91:
c8:12:41:c8:f9:e2:ec:86:51:c8:22:72:22:d2:56:99:f7:75:
4b:5e:89:77:a2:66:2c:b7:8e:df:07:98:c3:56:02:78:52:e4:
29:41:73:d2:2b:be:82:0b:a5:9e:5f:5d:9b:96:78:cb:22:52:
de:3f:fb:43:f7:8f:6f:98:ca:ad:94:34:bc:6b:96:5a:0c:5e:
f1:50:56:03:fb:b1:9e:ab:24:d3:7a:d5:a6:9e:b5:41:9c:c7:
cc:0f:30:fb:8a:c0:76:45:a6:b0:fb:54:54:1e:c0:f7:a7:ca:
36:7d:95:02:97:c3:f1:8a:df:30:17:5d:e8:b3:ad:40:0e:31:
d2:fa:08:e9:b7:eb:f1:5f:c9:35:fa:07:dd:f9:e6:f6:70:f9:
9d:8b:6f:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:03:48 2025 by rpki-client