Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/oRojqrF2upd4qpGF9qwuvKkB85M.roa
File: oRojqrF2upd4qpGF9qwuvKkB85M.roa (raw, json)
Hash identifier: rI1ZvEDD5nBz4EJV2sl7C1HlZDCYTwKf5IAxKcbibxk=
Subject key identifier: A1:1A:23:AA:B1:76:BA:97:78:AA:91:85:F6:AC:2E:BC:A9:01:F3:93
Certificate issuer: /CN=abc8dbe52083ad335c9f1fde6016ec8b49293140
Certificate serial: 0194228D370F573E7637F39AC454BD4118A8
Authority key identifier: AB:C8:DB:E5:20:83:AD:33:5C:9F:1F:DE:60:16:EC:8B:49:29:31:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q8jb5SCDrTNcnx_eYBbsi0kpMUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/oRojqrF2upd4qpGF9qwuvKkB85M.roa
Signing time: Wed 01 Jan 2025 15:47:47 +0000
ROA not before: Wed 01 Jan 2025 15:47:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8075
IP address blocks: 195.114.140.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:37:0f:57:3e:76:37:f3:9a:c4:54:bd:41:18:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abc8dbe52083ad335c9f1fde6016ec8b49293140
Validity
Not Before: Jan 1 15:47:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a11a23aab176ba9778aa9185f6ac2ebca901f393
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:09:0e:5b:69:f4:e9:45:1d:9e:57:02:13:c6:
75:c6:3b:94:33:b4:1e:00:d6:01:a6:eb:25:ff:cc:
67:ff:bb:22:b6:3a:db:91:8f:33:32:16:2f:08:4b:
f2:5b:3a:41:09:94:10:39:de:64:b4:31:a7:23:f7:
c6:e2:aa:0c:3e:27:6b:28:b8:54:af:dc:04:63:e1:
70:49:46:e5:38:63:bf:97:b0:95:d7:91:00:70:da:
fc:ab:e2:c0:8a:8e:fb:f7:26:b2:3e:01:73:5e:af:
2e:91:79:06:a2:46:43:d5:62:46:3b:54:4a:ec:77:
d7:4d:bc:2b:f0:39:08:27:cf:d9:bd:62:09:a0:fa:
8d:ce:5d:20:9c:bc:8c:82:35:44:2b:13:13:e6:c1:
17:01:e5:8f:91:45:d1:ce:55:00:9c:5b:53:c3:c4:
39:0f:c3:4e:9a:9d:ec:e2:79:03:fa:c1:6f:2a:aa:
0b:0a:56:b5:00:17:a7:f6:fb:4a:3b:97:53:3e:f5:
ce:8a:6a:ff:af:62:7d:7e:96:84:cc:3d:a0:cb:0f:
ca:fc:cb:95:e5:e3:1a:45:21:55:c3:7e:67:a6:fa:
9b:ac:31:9f:36:78:34:ea:45:cd:c4:c2:69:b9:74:
e1:e8:2a:66:c1:c5:91:2e:a1:fa:35:65:d4:e3:c1:
0f:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:1A:23:AA:B1:76:BA:97:78:AA:91:85:F6:AC:2E:BC:A9:01:F3:93
X509v3 Authority Key Identifier:
keyid:AB:C8:DB:E5:20:83:AD:33:5C:9F:1F:DE:60:16:EC:8B:49:29:31:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q8jb5SCDrTNcnx_eYBbsi0kpMUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/oRojqrF2upd4qpGF9qwuvKkB85M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.114.140.0/24
Signature Algorithm: sha256WithRSAEncryption
88:71:43:de:7c:0c:a8:1a:10:af:27:46:fe:8c:15:3f:a7:c8:
4d:c7:d7:69:33:7e:1e:f7:5f:19:f8:68:28:96:4f:ca:70:f0:
5e:de:e9:86:32:7e:63:3e:18:a4:e1:09:03:ae:37:2e:fb:2e:
18:3b:5c:9a:33:51:6b:c3:eb:ed:69:1d:5b:b3:75:e4:05:3a:
a8:2e:a8:61:dc:cb:c6:59:81:84:10:81:40:60:1c:2d:02:e1:
7a:77:13:e3:77:51:dc:94:b8:32:5b:bb:03:98:77:64:50:21:
37:10:f3:c4:23:43:6a:7c:20:91:98:0c:b6:f9:7a:89:28:3b:
52:b1:e5:c4:fc:4f:a1:13:85:80:f7:56:0d:fb:75:b9:8b:1c:
0b:48:ab:50:53:2f:a8:57:a2:05:e2:3c:53:19:d8:81:89:de:
5f:97:94:c2:1a:a6:3e:b2:51:56:1e:6b:30:05:4f:3e:55:00:
98:6c:b9:03:87:bf:cc:d4:22:55:43:ee:55:9d:05:bd:02:f7:
49:da:0d:20:e1:26:64:fd:4d:e8:89:49:e9:27:7b:a2:8d:4a:
7a:56:27:10:60:93:6c:e1:47:38:5a:f7:cd:ad:80:e6:73:f5:
61:e0:d7:7c:1d:e9:7d:65:b2:ca:34:0c:52:33:c5:75:c8:82:
71:50:82:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 11:07:24 2025 by rpki-client