Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/f40486-2cd9-475b-bbe1-16cd8f4fb4b9/1/dL_cPR3BvEV2FZeLKttQtUtkTJA.roa
File: dL_cPR3BvEV2FZeLKttQtUtkTJA.roa (raw, json)
Hash identifier: sW6C8Oel7oIOAbSvnZNd6R3ZV3AqqC/NBWFrXS1er6s=
Subject key identifier: 74:BF:DC:3D:1D:C1:BC:45:76:15:97:8B:2A:DB:50:B5:4B:64:4C:90
Certificate issuer: /CN=f8f19e224c73f83c4fdd196d06608aeb3a881804
Certificate serial: 019427B5BFFC437383064CCB2B11151C366D
Authority key identifier: F8:F1:9E:22:4C:73:F8:3C:4F:DD:19:6D:06:60:8A:EB:3A:88:18:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-PGeIkxz-DxP3RltBmCK6zqIGAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/f40486-2cd9-475b-bbe1-16cd8f4fb4b9/1/dL_cPR3BvEV2FZeLKttQtUtkTJA.roa
Signing time: Thu 02 Jan 2025 15:50:10 +0000
ROA not before: Thu 02 Jan 2025 15:50:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206687
IP address blocks: 195.150.100.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:bf:fc:43:73:83:06:4c:cb:2b:11:15:1c:36:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8f19e224c73f83c4fdd196d06608aeb3a881804
Validity
Not Before: Jan 2 15:50:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=74bfdc3d1dc1bc457615978b2adb50b54b644c90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ce:3b:6d:8c:e3:52:1b:84:a6:a3:1d:b9:a9:
31:53:74:fa:62:9a:29:e4:9a:a8:ad:15:9e:1b:2b:
b6:1c:93:ad:46:18:08:c3:24:71:8d:be:ee:55:2c:
62:01:13:43:e6:a8:f2:8e:6c:0a:3b:44:62:5b:4d:
5b:41:17:01:32:12:db:50:62:72:2a:ce:6c:bf:85:
09:44:3a:7b:5f:bf:a2:d4:e1:ad:23:43:0b:f2:1a:
79:4f:98:12:85:41:3d:12:f8:54:34:96:e3:fe:70:
84:5a:cb:86:fb:a9:f8:48:f8:ad:7f:de:d8:12:c1:
a4:ba:d1:66:59:1d:11:7a:e3:38:14:3a:53:7f:c8:
43:37:38:12:66:1c:8f:ba:56:dd:3a:fd:d0:e7:66:
51:94:c3:19:bd:5f:b2:02:13:d6:a9:c1:ae:af:96:
db:fb:b8:3c:dd:41:a4:bd:dc:7e:5d:49:99:72:a3:
56:51:70:e8:e6:75:fd:59:4e:32:62:57:ea:de:37:
df:3a:f6:39:18:f3:4a:6a:8e:82:15:61:9b:c9:6a:
75:9f:1a:69:12:7b:40:ab:3e:46:68:4b:7d:63:ac:
13:ba:9b:e2:74:5d:8c:66:86:45:65:e1:d9:f8:06:
a9:5a:77:41:68:d0:4b:45:eb:5d:7d:6a:3f:26:81:
69:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:BF:DC:3D:1D:C1:BC:45:76:15:97:8B:2A:DB:50:B5:4B:64:4C:90
X509v3 Authority Key Identifier:
keyid:F8:F1:9E:22:4C:73:F8:3C:4F:DD:19:6D:06:60:8A:EB:3A:88:18:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-PGeIkxz-DxP3RltBmCK6zqIGAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/f40486-2cd9-475b-bbe1-16cd8f4fb4b9/1/dL_cPR3BvEV2FZeLKttQtUtkTJA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/f40486-2cd9-475b-bbe1-16cd8f4fb4b9/1/1-PGeIkxz-DxP3RltBmCK6zqIGAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.150.100.0/24
Signature Algorithm: sha256WithRSAEncryption
12:c2:09:44:9d:38:45:41:a2:2c:40:a5:1c:a2:b5:28:d8:5f:
06:1f:ad:4c:c0:e1:ce:33:dd:46:ea:c4:af:1d:4d:2b:ab:e5:
0d:ac:f3:bb:09:79:36:48:26:6f:f3:b5:8b:38:6e:c0:0a:a8:
1b:7c:14:98:f9:1c:ba:e5:ae:6b:b9:b9:5b:ef:5c:68:5f:ca:
4b:fa:cb:7f:31:2b:64:be:2a:e9:a6:4a:b1:51:d1:26:5b:e7:
8f:32:9b:f8:b9:c8:2d:60:06:ac:b1:58:70:ff:6f:0b:9a:f5:
35:9f:5e:50:dd:a6:39:4f:03:80:2c:d7:df:01:21:4d:5b:df:
13:b5:b2:25:1e:ee:57:62:63:ec:ba:5a:ee:a3:7a:d4:f2:5f:
97:f9:68:52:2d:a7:e6:40:00:f8:76:71:30:94:e6:f3:cf:c0:
cc:a4:1c:70:74:ac:f1:8a:3d:e7:55:b3:57:23:93:d5:bb:2b:
b2:c7:ae:98:bf:0e:15:f0:5a:09:34:57:2d:e8:77:b6:a9:a7:
2e:6c:af:e2:44:85:62:23:3f:bd:e5:23:bc:75:42:96:de:20:
0f:68:39:1f:c7:e1:fb:a0:eb:7b:3e:ec:84:19:62:91:49:51:
6f:cf:0b:2e:66:68:ad:dc:db:cf:82:50:df:77:21:2b:e8:7b:
76:12:1f:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 05:36:10 2025 by rpki-client