Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/2Rska5d1fz-1LyWeLY5wNEQt-08.roa
File: 2Rska5d1fz-1LyWeLY5wNEQt-08.roa (raw, json)
Hash identifier: U17BQ8jBRMMMfY5zHF1Q7cNP8BTLe/506H0OjkJUWZc=
Subject key identifier: D9:1B:24:6B:97:75:7F:3F:B5:2F:25:9E:2D:8E:70:34:44:2D:FB:4F
Certificate issuer: /CN=b914961f67f22c61e84a66c8ad9c1a8ce51d099b
Certificate serial: 01948EFF0A5AD9CD4CA234C7C29A42266E2C
Authority key identifier: B9:14:96:1F:67:F2:2C:61:E8:4A:66:C8:AD:9C:1A:8C:E5:1D:09:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRSWH2fyLGHoSmbIrZwajOUdCZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/2Rska5d1fz-1LyWeLY5wNEQt-08.roa
Signing time: Wed 22 Jan 2025 17:11:06 +0000
ROA not before: Wed 22 Jan 2025 17:11:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206077
IP address blocks: 195.5.84.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:8e:ff:0a:5a:d9:cd:4c:a2:34:c7:c2:9a:42:26:6e:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b914961f67f22c61e84a66c8ad9c1a8ce51d099b
Validity
Not Before: Jan 22 17:11:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d91b246b97757f3fb52f259e2d8e7034442dfb4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:81:df:e5:2f:98:7a:86:43:37:e8:63:e8:7c:
9c:8e:ea:ab:ae:cb:5b:8d:84:39:e9:45:29:ea:cf:
32:30:3d:5e:64:eb:46:15:fe:35:7f:3e:fd:e9:67:
06:69:32:f1:ea:dc:9b:63:6c:6e:e7:07:9c:0a:9d:
8a:ee:0d:15:12:12:c5:ac:b2:bd:b7:c7:47:28:a6:
ef:96:a4:e4:7b:bf:d4:ca:e3:28:3c:6c:e8:9e:0c:
19:5c:48:95:46:59:11:a7:cb:b2:ae:d0:e3:ed:ae:
ed:94:11:d2:a3:ae:36:1e:eb:f2:e2:87:09:18:ad:
c1:aa:e7:b6:98:e0:51:19:9c:93:5e:e8:b6:ce:86:
a0:5d:dd:b2:6f:07:85:f6:3f:74:d6:66:7e:ce:4c:
e2:a5:cd:7f:98:8b:88:c2:d1:79:58:62:cc:8c:bd:
34:59:0c:26:d7:40:c1:71:cf:64:1f:c1:13:d6:15:
29:f9:bf:a5:8c:e8:fa:9a:f2:8f:45:62:e2:ca:23:
c2:7d:b2:97:78:28:e7:49:74:cd:f8:7f:7e:9a:19:
cd:19:0b:73:30:77:40:56:5e:75:ea:3d:c5:68:cb:
f8:3f:c2:63:95:97:88:01:4d:5a:72:87:14:b0:8e:
3c:95:25:ef:ff:ab:0c:fc:af:99:dc:78:c1:52:a6:
4d:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:1B:24:6B:97:75:7F:3F:B5:2F:25:9E:2D:8E:70:34:44:2D:FB:4F
X509v3 Authority Key Identifier:
keyid:B9:14:96:1F:67:F2:2C:61:E8:4A:66:C8:AD:9C:1A:8C:E5:1D:09:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRSWH2fyLGHoSmbIrZwajOUdCZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/2Rska5d1fz-1LyWeLY5wNEQt-08.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/uRSWH2fyLGHoSmbIrZwajOUdCZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.5.84.0/24
Signature Algorithm: sha256WithRSAEncryption
78:f1:e2:96:53:b4:2e:55:2f:47:17:3f:d8:35:4e:33:71:23:
26:bf:26:4b:b3:17:7f:d3:ea:4d:36:9f:29:4c:e5:5d:81:b8:
06:e6:8a:0c:b0:e4:ae:3b:e4:36:5b:3d:43:84:25:fe:c1:37:
a5:3b:47:b2:d3:28:8e:48:41:5a:c1:f9:a1:20:b3:83:92:a4:
9d:cb:8d:7c:d7:0c:12:a7:53:9a:c8:b1:fd:55:33:ee:63:3a:
d2:58:21:42:d8:02:be:94:77:4b:2d:b7:e7:1e:4f:7f:8e:bf:
e7:2e:b4:5b:ab:c0:dc:d1:7a:7b:14:57:58:52:8c:a9:b9:11:
18:be:1f:f1:2a:4f:ea:52:1a:d3:e9:74:38:5a:f4:2b:c6:93:
88:66:0a:a7:d4:ad:a1:45:be:99:ef:b0:d0:6c:2b:73:bd:68:
54:f1:81:0b:59:9a:9e:46:8f:4a:3a:4d:a9:13:44:e5:55:ac:
ff:1b:49:de:a3:2b:a7:0e:ef:92:40:f0:98:53:77:63:f0:ce:
4f:42:be:19:e0:c6:f8:b4:9d:0a:80:ca:4a:f2:78:b7:3b:8b:
f8:2a:2d:cb:1a:ec:2d:6d:4a:db:0f:81:32:6a:ec:e8:27:73:
b8:28:59:5d:c3:51:5a:b3:75:37:1b:bf:59:80:b3:eb:dc:25:
05:2a:c6:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 03:37:53 2025 by rpki-client