Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/g1_rxFV8zYIpl85TtctqInXOB3M.roa
File: g1_rxFV8zYIpl85TtctqInXOB3M.roa (raw, json)
Hash identifier: zKxPQ+ibcMrkBAirpgYwRuRKriQwCHJsHxMc1x3VmQ8=
Subject key identifier: 83:5F:EB:C4:55:7C:CD:82:29:97:CE:53:B5:CB:6A:22:75:CE:07:73
Certificate issuer: /CN=3af09ba33b5ae581b0d29323249314f76aa10511
Certificate serial: 019420D5A25D6DD6519C920FD4224E4A8102
Authority key identifier: 3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/g1_rxFV8zYIpl85TtctqInXOB3M.roa
Signing time: Wed 01 Jan 2025 07:47:39 +0000
ROA not before: Wed 01 Jan 2025 07:47:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12601
IP address blocks: 195.101.164.0/23 maxlen: 23
195.101.166.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:a2:5d:6d:d6:51:9c:92:0f:d4:22:4e:4a:81:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3af09ba33b5ae581b0d29323249314f76aa10511
Validity
Not Before: Jan 1 07:47:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=835febc4557ccd822997ce53b5cb6a2275ce0773
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d0:39:69:5b:eb:29:3e:bd:a8:3b:b3:43:59:
af:4f:83:e1:c3:94:c5:10:75:24:a7:96:f7:28:67:
da:71:50:64:97:75:f5:b3:31:b8:6d:52:5a:28:5c:
a7:2a:92:c7:8f:ac:d3:fd:cc:26:19:ea:1b:9c:1b:
a2:5f:bc:a9:92:b7:cd:65:96:1c:26:d0:94:25:bb:
57:e2:34:8e:e8:b8:c3:fd:d0:4c:30:ab:f7:7f:f4:
46:ac:ea:6b:ce:a5:cd:7d:30:47:29:c6:b4:99:1a:
f0:d4:17:20:65:38:2d:97:d5:cf:fa:82:82:fd:f6:
06:f6:c7:f1:8b:04:ed:68:6b:1e:a4:91:8b:34:fd:
f8:91:69:03:a5:c5:2f:3a:c7:ee:51:14:5b:61:da:
2f:a5:7b:2c:a3:cc:64:68:8d:e8:63:5d:47:d2:c7:
e0:0e:69:24:80:79:76:e4:59:95:d3:af:a2:f9:c7:
dc:57:92:bf:bd:b3:64:be:61:4e:0a:9c:c1:6b:09:
d5:af:36:07:14:b1:6d:5e:c4:8a:14:ea:0c:8c:e5:
4b:fe:93:e6:4a:75:76:86:a9:51:e8:e0:ab:54:3f:
76:d4:74:d3:fb:47:e1:2e:2f:7a:8d:c3:8f:ba:83:
b7:8f:aa:3e:61:38:2a:9c:87:18:de:5f:31:90:84:
31:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:5F:EB:C4:55:7C:CD:82:29:97:CE:53:B5:CB:6A:22:75:CE:07:73
X509v3 Authority Key Identifier:
keyid:3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/g1_rxFV8zYIpl85TtctqInXOB3M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.101.164.0/22
Signature Algorithm: sha256WithRSAEncryption
40:e0:c7:58:cb:5d:0c:51:4f:0b:58:75:5a:d9:07:30:57:58:
be:4f:44:14:34:08:90:2c:b5:9e:16:04:7c:b6:ba:24:96:2d:
d1:dc:d5:ac:18:c1:be:37:be:d7:5c:b4:fc:aa:c4:be:6b:a6:
4c:9c:16:cc:65:1b:84:3a:c0:a1:30:ae:54:e2:30:c6:15:81:
4c:bc:73:41:f7:e0:f9:c6:70:b2:d0:f4:b2:d0:02:76:5a:35:
19:11:a4:31:fb:a7:83:5a:22:6b:cd:c0:ba:21:35:8b:05:05:
7b:30:d6:1b:7f:a3:c1:d5:91:e6:36:a5:92:f9:82:5c:25:49:
30:2e:dd:85:5d:95:0e:33:88:ff:d4:45:b0:2e:f9:4e:c9:f1:
0a:92:7e:18:92:21:ed:da:4c:96:60:75:cf:64:ab:ce:f4:8f:
67:90:96:b8:c4:8e:c6:8b:d4:ec:1d:cb:91:a8:97:54:56:99:
bc:ec:d8:b9:13:1a:3b:e2:f0:23:fd:36:59:9b:8c:d7:a4:5f:
38:9e:9c:d4:ee:d5:3c:a6:6e:5e:7c:1a:5e:db:78:f9:00:ab:
24:f7:64:2f:46:00:e6:7d:75:e5:29:26:ba:aa:52:35:9f:0c:
a1:eb:28:33:fb:e7:db:82:47:3b:48:a9:4a:c3:a6:14:02:cd:
9b:59:09:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 14:15:22 2025 by rpki-client