Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/8b01c2-ecbe-4f88-ae37-504c8fc220ea/1/E8BXFCmMPxiHqsBIE2fe1Q-VAJ0.roa
File: E8BXFCmMPxiHqsBIE2fe1Q-VAJ0.roa (raw, json)
Hash identifier: bCNkqefIqMAzox7Azz8+ddEpEANUZYA+NYa3IR7PwR4=
Subject key identifier: 13:C0:57:14:29:8C:3F:18:87:AA:C0:48:13:67:DE:D5:0F:95:00:9D
Certificate issuer: /CN=0562d5a67b7a20f865e753163a6ed0e5f347e839
Certificate serial: 019426D97DAB23A1D9C9541AADF217C8604C
Authority key identifier: 05:62:D5:A6:7B:7A:20:F8:65:E7:53:16:3A:6E:D0:E5:F3:47:E8:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BWLVpnt6IPhl51MWOm7Q5fNH6Dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/8b01c2-ecbe-4f88-ae37-504c8fc220ea/1/E8BXFCmMPxiHqsBIE2fe1Q-VAJ0.roa
Signing time: Thu 02 Jan 2025 11:49:35 +0000
ROA not before: Thu 02 Jan 2025 11:49:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34820
IP address blocks: 195.146.10.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:7d:ab:23:a1:d9:c9:54:1a:ad:f2:17:c8:60:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0562d5a67b7a20f865e753163a6ed0e5f347e839
Validity
Not Before: Jan 2 11:49:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=13c05714298c3f1887aac0481367ded50f95009d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:99:51:1b:e8:bc:6d:b8:71:d8:11:c1:62:84:
e9:31:3c:22:59:b9:a2:de:8b:28:cf:8b:f8:f2:52:
fc:a0:31:7c:1b:f5:62:43:06:a3:4b:1a:da:96:e9:
44:b3:cf:77:e7:0f:fc:a6:4e:b8:f4:1e:b0:44:a0:
a8:d7:29:27:70:b9:e7:ea:83:38:7b:62:73:55:a5:
fe:90:d5:82:f7:3b:77:b0:e4:12:57:e2:26:03:8b:
12:d1:2f:43:61:82:18:f6:a1:47:08:cb:84:0b:57:
2a:92:f6:d6:e9:19:6d:57:a3:bf:96:ce:b0:15:2d:
f2:7a:fd:d5:62:a9:2d:b7:16:4d:43:51:28:49:40:
28:61:10:5f:67:72:be:27:81:b4:31:b9:8b:0c:5e:
4c:67:a2:50:b8:86:4b:0e:60:aa:c1:1d:1f:3c:43:
f4:a4:5e:44:48:e4:ea:42:04:e4:a0:96:28:6d:88:
09:23:11:89:a9:e2:3a:c4:bc:d3:94:de:49:92:81:
32:73:03:10:03:44:02:aa:35:0f:c6:e8:58:bc:26:
97:4f:a0:7a:f9:63:18:90:83:be:4d:e7:30:f1:68:
05:20:dd:5c:d2:33:26:68:9f:23:ce:49:74:d7:b6:
21:4b:3e:00:2e:59:ec:46:6c:8b:e3:b7:23:fb:ee:
20:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:C0:57:14:29:8C:3F:18:87:AA:C0:48:13:67:DE:D5:0F:95:00:9D
X509v3 Authority Key Identifier:
keyid:05:62:D5:A6:7B:7A:20:F8:65:E7:53:16:3A:6E:D0:E5:F3:47:E8:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BWLVpnt6IPhl51MWOm7Q5fNH6Dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/8b01c2-ecbe-4f88-ae37-504c8fc220ea/1/E8BXFCmMPxiHqsBIE2fe1Q-VAJ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/8b01c2-ecbe-4f88-ae37-504c8fc220ea/1/BWLVpnt6IPhl51MWOm7Q5fNH6Dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.146.10.0/24
Signature Algorithm: sha256WithRSAEncryption
63:d1:55:8f:ac:63:53:81:05:0c:88:8a:bb:eb:36:ed:68:89:
a4:bd:b2:f1:91:95:3e:f2:64:f2:a0:f5:15:07:a5:ed:58:bd:
01:bb:5a:24:df:30:21:95:aa:80:3f:3c:c7:ad:d4:f5:f3:e6:
30:e5:63:32:73:03:9d:43:6a:67:78:a3:b5:72:26:16:df:3e:
7c:74:62:e4:f8:21:26:64:ed:8c:a3:ae:6c:e9:da:93:94:04:
9b:31:48:c4:cd:b6:fa:68:46:de:09:d3:d0:87:17:f0:a9:f2:
24:14:63:a8:4f:a5:43:06:57:6e:b2:6a:77:e5:94:f1:1b:a6:
28:db:f3:54:74:3a:61:9a:f2:ec:99:7f:89:16:aa:1f:b6:8d:
7d:c8:f2:66:d0:06:69:39:cc:67:2d:44:22:02:ca:e8:39:a0:
86:dd:c1:9a:a1:f1:98:14:56:bc:77:49:8a:35:6f:fb:65:f3:
f3:3a:d2:5b:e9:fd:77:40:c5:1c:51:ab:30:45:57:27:a0:21:
96:a8:ed:76:5a:76:d4:6e:3d:09:0d:d5:7e:3d:9f:85:cf:f7:
6a:89:d1:57:d7:21:e2:f4:45:13:a0:f7:eb:05:2f:8e:23:96:
c8:19:0b:99:3f:27:17:4e:6a:a8:89:41:2f:03:9a:6d:45:61:
a2:e9:2a:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 00:27:51 2025 by rpki-client