Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/a02d99-c996-49ee-8c01-b75472910aec/1/3jZdSUeMezmZBYav2Kaaa39qUfc.roa
File: 3jZdSUeMezmZBYav2Kaaa39qUfc.roa (raw, json)
Hash identifier: OPdd45Q4gpxhm/6Q0LNFFlr2CdfthpqpprBTnctlRTs=
Subject key identifier: DE:36:5D:49:47:8C:7B:39:99:05:86:AF:D8:A6:9A:6B:7F:6A:51:F7
Certificate issuer: /CN=1f16b101d91fcefe28b61d53c6bf7429e7eebba5
Certificate serial: 01856C4125FE533E523CC199B8FBD1026625
Authority key identifier: 1F:16:B1:01:D9:1F:CE:FE:28:B6:1D:53:C6:BF:74:29:E7:EE:BB:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HxaxAdkfzv4oth1Txr90Kefuu6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/a02d99-c996-49ee-8c01-b75472910aec/1/3jZdSUeMezmZBYav2Kaaa39qUfc.roa
Signing time: Sun 01 Jan 2023 07:34:46 +0000
ROA not before: Sun 01 Jan 2023 07:34:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212667
IP address blocks: 195.96.141.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:41:25:fe:53:3e:52:3c:c1:99:b8:fb:d1:02:66:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f16b101d91fcefe28b61d53c6bf7429e7eebba5
Validity
Not Before: Jan 1 07:34:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=de365d49478c7b39990586afd8a69a6b7f6a51f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:64:1e:a8:7d:10:e9:9a:2d:e3:a3:96:cd:2e:
95:84:f3:af:69:77:81:c2:28:84:2b:9a:3c:c2:1a:
d7:ca:62:49:9c:92:6e:b9:90:7e:fd:0d:b5:29:ed:
43:2e:d0:4a:21:88:fc:32:00:3b:b2:c5:13:75:cb:
97:cb:fd:8d:24:b1:5f:b7:f4:57:a5:a8:5f:21:54:
30:3f:cc:e0:f9:81:89:68:1c:fc:0f:d6:7d:04:00:
23:6b:a2:9c:73:1a:eb:7a:0c:cc:69:25:f5:8f:11:
18:26:a3:e6:b8:06:db:6e:bf:a6:9e:43:ca:7f:37:
ba:ef:54:04:ba:25:c8:bb:68:35:93:8b:79:55:3c:
d9:2e:3d:ef:13:28:af:0f:d0:e0:1c:c7:05:bd:f5:
fc:80:bc:9b:0f:91:cb:7e:42:89:f1:21:96:f9:76:
48:a2:66:d2:3b:49:d5:48:ac:85:e4:4f:86:a2:ff:
fc:00:7c:6f:43:90:c9:d6:1b:0c:68:3e:d5:07:0f:
f9:0e:ff:62:ca:ed:76:71:67:0e:d5:e6:cd:70:01:
94:9c:7e:72:b6:e0:ee:01:88:9a:0a:38:02:59:6f:
68:a6:ec:60:90:c0:60:8f:3d:e6:62:76:4d:c7:96:
90:31:1c:9b:9f:a0:22:f0:b9:04:25:eb:75:c2:f4:
1e:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:36:5D:49:47:8C:7B:39:99:05:86:AF:D8:A6:9A:6B:7F:6A:51:F7
X509v3 Authority Key Identifier:
keyid:1F:16:B1:01:D9:1F:CE:FE:28:B6:1D:53:C6:BF:74:29:E7:EE:BB:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HxaxAdkfzv4oth1Txr90Kefuu6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/a02d99-c996-49ee-8c01-b75472910aec/1/3jZdSUeMezmZBYav2Kaaa39qUfc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/a02d99-c996-49ee-8c01-b75472910aec/1/HxaxAdkfzv4oth1Txr90Kefuu6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.96.141.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:9d:7d:76:92:84:05:1a:a5:98:60:be:4d:9d:a8:c9:3a:1c:
59:5a:e6:b5:6f:7e:52:b3:38:d7:d1:93:d0:0b:84:41:79:7e:
ea:d6:f5:ad:84:07:4c:2c:0b:86:97:1c:ef:e8:87:94:52:8d:
83:26:cf:1d:6b:39:5b:60:5c:aa:5b:98:c9:f8:73:85:51:06:
1c:b2:07:33:82:1b:c2:3e:f3:45:8e:39:44:c7:02:43:27:bf:
fd:ea:b2:1c:5f:98:5b:91:31:fe:a6:00:9b:6a:e1:a1:98:61:
89:c0:00:7f:48:d9:84:18:4c:86:d2:3f:49:b9:ed:2f:f9:26:
ce:76:70:13:71:e8:a7:70:4b:fd:89:2f:47:6e:0e:33:06:90:
d8:23:83:b5:e1:35:c3:ba:25:01:81:49:82:a7:ce:93:63:69:
7c:f8:3e:e7:a9:ef:7b:f4:37:92:98:51:14:e8:02:7e:0a:fe:
8d:27:c1:e0:b6:3b:2f:27:a7:5b:11:89:60:bc:70:8d:3b:66:
9f:ea:6c:ba:07:fe:3b:dc:9c:43:4f:f6:09:1a:21:75:f3:e3:
ee:74:90:67:86:30:34:ac:0a:f0:3d:a0:f7:e7:d3:17:0f:ac:
3e:29:2f:5f:bd:8a:f9:3e:7b:fb:ae:b6:62:08:df:26:94:f0:
35:3b:29:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 06:28:52 2025 by rpki-client