Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/8b01c2-ecbe-4f88-ae37-504c8fc220ea/1/jCB9u3qv4BG9cI-rqtdTgsQeqrs.roa
File: jCB9u3qv4BG9cI-rqtdTgsQeqrs.roa (raw, json)
Hash identifier: 1+L43+VxrVB/KEJhsF1U3J4F2Ua4lSa+maBf4O2HDZ4=
Subject key identifier: 8C:20:7D:BB:7A:AF:E0:11:BD:70:8F:AB:AA:D7:53:82:C4:1E:AA:BB
Certificate issuer: /CN=0562d5a67b7a20f865e753163a6ed0e5f347e839
Certificate serial: 019426D97CF5E1C831F9B8D6D9D0FC9FDAB0
Authority key identifier: 05:62:D5:A6:7B:7A:20:F8:65:E7:53:16:3A:6E:D0:E5:F3:47:E8:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BWLVpnt6IPhl51MWOm7Q5fNH6Dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/8b01c2-ecbe-4f88-ae37-504c8fc220ea/1/jCB9u3qv4BG9cI-rqtdTgsQeqrs.roa
Signing time: Thu 02 Jan 2025 11:49:35 +0000
ROA not before: Thu 02 Jan 2025 11:49:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6663
IP address blocks: 195.146.0.0/20 maxlen: 20
195.146.8.0/24 maxlen: 24
195.146.11.0/24 maxlen: 24
195.146.12.0/24 maxlen: 24
195.146.16.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:7c:f5:e1:c8:31:f9:b8:d6:d9:d0:fc:9f:da:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0562d5a67b7a20f865e753163a6ed0e5f347e839
Validity
Not Before: Jan 2 11:49:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8c207dbb7aafe011bd708fabaad75382c41eaabb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ff:95:fd:32:f0:d4:8d:84:ca:f8:aa:93:60:
40:7f:4c:da:cb:76:6a:42:b5:eb:7c:90:eb:04:79:
00:2b:9a:7e:ad:1d:08:f2:3b:13:ba:a1:6a:b4:85:
c9:e9:1b:fd:7d:63:a7:03:58:44:13:4d:25:35:13:
c6:ab:10:11:99:17:57:f6:58:79:4f:44:7e:3a:dd:
41:59:d0:2e:f0:13:c1:98:5c:82:d5:3b:28:65:ca:
84:97:56:b6:0e:87:d7:0e:58:44:19:ff:8a:3a:c1:
d5:9b:5a:db:59:43:3e:70:24:64:2f:16:e9:29:95:
c4:6c:53:23:db:df:76:40:85:7e:d3:88:c6:7c:f5:
1f:95:00:08:51:77:2b:e5:8e:c1:1a:75:be:4d:d0:
4d:46:65:6d:21:f8:87:69:d0:a0:8e:57:4f:3c:26:
77:33:38:fa:2e:f9:cc:75:13:4c:9d:a2:cb:a3:33:
a9:0d:00:7b:67:a8:9d:56:74:da:19:61:44:22:82:
30:c6:a4:50:48:a2:dc:0e:a2:21:35:9c:44:5f:3c:
72:8d:dd:6e:32:a1:98:83:8a:c7:03:00:bc:39:95:
c6:39:a6:fa:da:de:e5:0c:23:aa:75:58:3e:f1:21:
be:07:c1:35:88:ad:e3:cb:c5:36:10:2e:44:08:0f:
cd:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:20:7D:BB:7A:AF:E0:11:BD:70:8F:AB:AA:D7:53:82:C4:1E:AA:BB
X509v3 Authority Key Identifier:
keyid:05:62:D5:A6:7B:7A:20:F8:65:E7:53:16:3A:6E:D0:E5:F3:47:E8:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BWLVpnt6IPhl51MWOm7Q5fNH6Dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/8b01c2-ecbe-4f88-ae37-504c8fc220ea/1/jCB9u3qv4BG9cI-rqtdTgsQeqrs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/8b01c2-ecbe-4f88-ae37-504c8fc220ea/1/BWLVpnt6IPhl51MWOm7Q5fNH6Dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.146.0.0/19
Signature Algorithm: sha256WithRSAEncryption
64:fe:a8:eb:12:57:66:85:ed:20:da:f5:40:89:f4:a5:f5:b7:
9f:5f:63:b9:5a:fc:cc:f5:5b:b0:4d:5c:e0:7a:94:68:0a:92:
9e:38:05:b0:bc:84:84:81:f1:1b:fc:e3:6a:7b:d1:5d:a4:f8:
21:f7:22:26:cf:72:db:03:df:36:30:d7:c7:18:15:34:eb:64:
01:ac:c6:21:08:c9:bc:69:63:b9:54:e3:a8:0a:1b:31:2e:5f:
2a:b4:1d:49:7d:1c:cd:41:b2:1b:72:f9:f6:e5:ec:e5:35:ab:
a4:33:b7:5d:c4:86:56:8e:cb:52:3b:b2:74:44:f9:43:fc:0b:
e9:6a:ed:ea:db:62:35:de:11:88:51:66:e4:35:cf:b1:51:94:
56:57:80:34:1f:84:63:0f:55:57:38:3a:87:af:44:f3:ff:9a:
ca:99:cf:16:ff:d0:97:6e:00:f3:4f:ae:b8:09:b8:69:b4:7e:
b6:53:3a:61:a8:a6:bd:72:b1:b6:0f:57:b6:5d:50:f4:ad:ea:
f4:5f:53:e5:11:54:13:32:01:51:84:84:47:51:07:52:27:0a:
d3:c1:e7:e3:4e:15:ad:52:8a:48:c6:e7:07:26:94:90:85:da:
4a:16:37:ba:33:ea:28:0b:07:02:a6:1e:4a:73:b4:03:63:6b:
dd:57:62:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 12:19:42 2025 by rpki-client