Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/1-3WbQa6mWt1hAXXuort7hbEmXiY.roa
File: 1-3WbQa6mWt1hAXXuort7hbEmXiY.roa (raw, json)
Hash identifier: GF6ITgmw9KqlYpQ3zJphdxg2Nm3bdKenjBqanKwf5us=
Subject key identifier: FB:75:9B:41:AE:A6:5A:DD:61:01:75:EE:A2:BB:7B:85:B1:26:5E:26
Certificate issuer: /CN=3af09ba33b5ae581b0d29323249314f76aa10511
Certificate serial: 019420D5B0640E3A67700C99C852CF471994
Authority key identifier: 3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/1-3WbQa6mWt1hAXXuort7hbEmXiY.roa
Signing time: Wed 01 Jan 2025 07:47:42 +0000
ROA not before: Wed 01 Jan 2025 07:47:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39771
IP address blocks: 195.6.59.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:b0:64:0e:3a:67:70:0c:99:c8:52:cf:47:19:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3af09ba33b5ae581b0d29323249314f76aa10511
Validity
Not Before: Jan 1 07:47:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fb759b41aea65add610175eea2bb7b85b1265e26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:26:b3:9d:cf:87:e4:09:5d:2d:14:1a:59:d9:
47:c6:11:4d:4c:60:76:8b:8c:fc:78:c2:ff:39:28:
97:60:b4:b4:94:d9:a2:77:ab:b6:3d:4c:ea:0f:9e:
8b:84:3b:30:2d:1c:a7:11:4d:0e:5c:31:3e:ab:be:
e0:ba:11:4e:27:1a:e1:fb:79:07:9b:5e:f5:4e:8a:
18:08:7b:cc:ba:9d:b8:06:5c:26:fa:b0:dc:21:c6:
4c:a5:57:c8:ea:66:95:8f:70:38:9b:8b:bf:eb:85:
fb:a7:65:64:c4:47:8a:2a:31:6e:a8:36:b8:51:56:
de:a1:ff:31:a1:ec:e1:4f:54:53:09:7b:00:04:46:
68:13:ce:57:9e:30:d6:e4:5b:36:09:f0:4b:ce:4b:
02:23:79:fb:35:31:fc:12:04:07:95:b1:f5:5b:75:
f6:09:e6:2a:e1:66:62:58:6a:bf:57:ef:0e:ce:23:
40:77:6d:ef:d8:83:bc:89:39:a1:f4:6d:0e:89:36:
6c:bb:c6:5d:e2:cf:7e:ed:9b:e2:15:07:66:ac:d2:
9e:c8:7e:e2:c7:a6:04:9e:d4:19:cb:55:01:63:f2:
e4:0f:04:18:35:b5:c9:02:1d:61:80:4d:cc:91:c4:
7b:6b:78:ee:fc:de:e4:04:30:72:86:ab:11:1e:8d:
d7:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:75:9B:41:AE:A6:5A:DD:61:01:75:EE:A2:BB:7B:85:B1:26:5E:26
X509v3 Authority Key Identifier:
keyid:3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/1-3WbQa6mWt1hAXXuort7hbEmXiY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.6.59.0/24
Signature Algorithm: sha256WithRSAEncryption
51:00:3c:91:31:1e:02:d1:ea:f2:c9:a7:d3:42:68:5e:bc:68:
07:d5:12:97:1b:51:0c:be:0e:01:74:24:ba:e2:b9:4a:42:6d:
ca:c1:3f:aa:13:f8:01:f1:11:0b:22:33:0d:66:ad:34:0f:11:
00:7a:88:f3:0f:a2:97:5d:bd:e1:5a:28:3c:38:0f:3b:23:68:
79:af:a2:72:f5:4a:59:cd:e3:7f:47:f6:a8:29:0e:ee:19:95:
b7:d3:d5:fb:35:26:19:dd:04:09:ec:92:af:97:35:df:99:05:
89:e0:50:f2:e4:6f:64:8d:78:1a:40:f7:60:c4:ef:a5:03:92:
65:a6:25:19:7d:8f:5f:f2:79:1b:85:83:c4:11:8f:51:79:d6:
37:ae:f4:d6:70:c0:99:28:53:d2:90:65:25:a0:4c:71:db:a6:
46:c8:8f:20:03:d6:50:b3:a6:81:7e:27:3e:cd:49:3d:af:fe:
e7:86:77:0b:67:59:71:9a:42:d2:d5:23:7f:f5:14:38:6e:ac:
92:55:bf:d1:d3:99:75:af:ed:5c:1a:f3:f4:cf:af:72:98:1c:
1f:a4:0c:12:d3:17:44:93:53:b2:4f:00:7a:99:57:fd:9a:32:
06:97:8e:48:12:47:bd:eb:ce:e0:88:78:4d:96:a9:0a:64:ce:
be:4f:db:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 15:01:34 2025 by rpki-client