Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/6296d7-c008-4c31-ae7a-84ef9cabb9b6/1/a_Q0Oj2hhJ8gyCrgqERD5VjhULo.roa
File: a_Q0Oj2hhJ8gyCrgqERD5VjhULo.roa (raw, json)
Hash identifier: ix5ZmIac7PSSZ8cbH+U6PyHdhcxmOIX450xPjZ8S6o0=
Subject key identifier: 6B:F4:34:3A:3D:A1:84:9F:20:C8:2A:E0:A8:44:43:E5:58:E1:50:BA
Certificate issuer: /CN=9c4b3086614f47838a3e80a3e6e051d3d8a692f9
Certificate serial: 019425219177B39E2ADCC9F6D1DD700BF746
Authority key identifier: 9C:4B:30:86:61:4F:47:83:8A:3E:80:A3:E6:E0:51:D3:D8:A6:92:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nEswhmFPR4OKPoCj5uBR09imkvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/6296d7-c008-4c31-ae7a-84ef9cabb9b6/1/a_Q0Oj2hhJ8gyCrgqERD5VjhULo.roa
Signing time: Thu 02 Jan 2025 03:49:04 +0000
ROA not before: Thu 02 Jan 2025 03:49:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35067
IP address blocks: 195.16.76.0/22 maxlen: 22
195.16.76.0/24 maxlen: 24
195.16.77.0/24 maxlen: 24
195.16.78.0/24 maxlen: 24
195.16.79.0/24 maxlen: 24
2001:678:5f0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:91:77:b3:9e:2a:dc:c9:f6:d1:dd:70:0b:f7:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c4b3086614f47838a3e80a3e6e051d3d8a692f9
Validity
Not Before: Jan 2 03:49:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6bf4343a3da1849f20c82ae0a84443e558e150ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:d8:f6:70:3c:8b:8a:cb:54:90:5f:45:f1:e9:
3d:9c:f8:f5:97:b8:99:2d:e8:16:d9:f6:ac:20:9d:
21:79:79:83:82:6f:8f:79:58:6d:53:0f:1e:cf:33:
b5:b5:45:c3:4c:2b:d2:5e:6a:68:01:fd:59:95:53:
ff:45:42:a6:3d:78:e2:1b:a4:e2:07:aa:c9:a4:16:
94:c1:f7:1e:3d:02:b5:db:f1:ce:a2:43:7b:64:a1:
07:55:08:24:54:96:2a:48:ad:a7:c7:b1:ab:a7:09:
77:3e:5e:70:ce:55:42:b4:a3:31:15:51:8d:e5:2b:
93:2b:e8:6f:a7:8d:74:cc:76:c2:e6:86:bb:37:76:
08:f5:db:fd:2e:d3:0c:0f:62:d8:d2:61:ee:a0:f1:
e2:35:aa:58:cc:4c:5a:75:c4:09:88:5c:ad:c3:20:
e4:79:13:77:de:82:4e:3b:ce:3f:1b:45:87:c7:d4:
b0:06:a8:18:f7:ab:83:b6:82:1b:ed:57:07:a0:ec:
fc:37:d6:2d:db:f4:b6:cd:6d:79:95:0d:8c:9a:dd:
6a:20:5d:e2:6d:64:f7:a7:82:3d:12:44:8a:af:96:
83:88:93:ec:19:58:7c:64:28:cf:8e:d0:ae:ec:b6:
ee:60:18:e5:a7:1e:b5:2a:a9:f0:dc:7b:bd:28:5e:
62:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:F4:34:3A:3D:A1:84:9F:20:C8:2A:E0:A8:44:43:E5:58:E1:50:BA
X509v3 Authority Key Identifier:
keyid:9C:4B:30:86:61:4F:47:83:8A:3E:80:A3:E6:E0:51:D3:D8:A6:92:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nEswhmFPR4OKPoCj5uBR09imkvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6296d7-c008-4c31-ae7a-84ef9cabb9b6/1/a_Q0Oj2hhJ8gyCrgqERD5VjhULo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6296d7-c008-4c31-ae7a-84ef9cabb9b6/1/nEswhmFPR4OKPoCj5uBR09imkvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.16.76.0/22
IPv6:
2001:678:5f0::/48
Signature Algorithm: sha256WithRSAEncryption
51:fb:4b:ad:04:52:55:0f:c1:b0:50:e1:04:49:b0:09:df:8c:
95:62:a5:97:f3:54:4b:0c:34:c4:99:38:e6:c2:5f:3b:6e:fc:
0a:99:a4:41:48:3f:6c:29:d3:ac:42:c1:6a:98:6d:d2:5d:2a:
8a:60:70:14:8f:f1:e4:4c:fe:a4:aa:67:f9:14:1b:ff:e5:2d:
57:38:c7:63:5d:1d:5f:e2:f0:ec:1b:de:4f:2f:d5:72:44:95:
24:6a:fb:e6:7a:db:8f:d5:b2:05:e1:9d:94:b4:2d:a3:00:92:
23:95:07:86:ae:c0:75:18:f0:cf:a4:fb:03:6b:85:8b:10:29:
84:00:9e:c6:11:33:49:32:2e:b4:c2:48:69:e1:04:10:a1:4b:
19:a3:48:28:b2:88:1f:c5:75:cb:f2:20:6c:56:2a:cb:38:8f:
4e:da:40:10:13:0f:01:55:ae:c5:91:e3:13:74:f2:e6:c2:42:
4b:5b:23:86:6a:e9:09:86:26:f3:a3:d8:28:cc:43:fa:34:54:
fc:1b:67:19:8a:e1:1f:d9:af:5c:d4:03:26:ce:05:b2:fc:0e:
a4:8d:e3:46:8b:71:ae:14:15:91:96:b8:fb:1c:5d:11:e1:49:
6a:79:4e:a4:1c:74:80:20:b2:42:bc:93:72:d2:a2:5c:08:dc:
5d:42:7c:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:35:06 2025 by rpki-client