Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/11bf2e-b58a-4a31-89c0-155f42dcaa73/1/tYCsQPIyFJmQyf9thG5Is7jI5NY.roa
File: tYCsQPIyFJmQyf9thG5Is7jI5NY.roa (raw, json)
Hash identifier: b/PwLfTfSmleVVur7ZKT8j1+gDLO4fZy6WoOsM743EE=
Subject key identifier: B5:80:AC:40:F2:32:14:99:90:C9:FF:6D:84:6E:48:B3:B8:C8:E4:D6
Certificate issuer: /CN=b23eb849e0b6940e4ff547de0b41b003f9e1105c
Certificate serial: 0194221FFF3121F332CBB036275F51E5DCBD
Authority key identifier: B2:3E:B8:49:E0:B6:94:0E:4F:F5:47:DE:0B:41:B0:03:F9:E1:10:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sj64SeC2lA5P9UfeC0GwA_nhEFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/11bf2e-b58a-4a31-89c0-155f42dcaa73/1/tYCsQPIyFJmQyf9thG5Is7jI5NY.roa
Signing time: Wed 01 Jan 2025 13:48:29 +0000
ROA not before: Wed 01 Jan 2025 13:48:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8431
IP address blocks: 195.230.0.0/20 maxlen: 24
195.230.1.0/24 maxlen: 24
195.230.3.0/24 maxlen: 24
195.230.4.0/24 maxlen: 24
195.230.5.0/24 maxlen: 24
195.230.16.0/23 maxlen: 23
195.230.18.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:ff:31:21:f3:32:cb:b0:36:27:5f:51:e5:dc:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b23eb849e0b6940e4ff547de0b41b003f9e1105c
Validity
Not Before: Jan 1 13:48:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b580ac40f232149990c9ff6d846e48b3b8c8e4d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:02:8b:da:16:7f:f1:1f:f8:dc:52:d9:d7:4b:
9f:03:be:d6:70:76:cd:5a:c4:76:11:f4:1c:5d:52:
03:4d:18:88:68:dd:8e:ff:0a:28:68:0e:56:ab:69:
d5:7d:39:50:0e:7c:0b:97:3e:cd:af:19:a5:a4:20:
4a:88:49:27:61:b1:70:ed:f3:b9:95:49:b6:a7:78:
4f:d2:75:a1:f1:19:00:d8:25:52:e9:e4:5b:b1:e0:
41:77:50:3b:b7:70:32:69:b4:5e:95:3a:d6:14:df:
22:4c:5f:1f:26:df:ca:06:56:98:e7:19:03:cd:17:
1a:0b:0f:3b:b8:7f:b1:8a:33:08:66:99:99:9c:4c:
4d:45:91:89:d5:98:89:39:ce:88:47:96:ef:f5:e9:
ef:83:37:9e:4e:c2:28:65:f4:82:75:48:d9:63:0f:
f7:b2:45:3e:db:2a:f6:90:dd:5f:8e:35:a4:72:3e:
32:87:60:4d:f1:3c:d9:a0:18:d5:00:a4:c6:7c:47:
17:d8:76:5a:09:4c:93:4d:ed:5c:1f:bf:bb:44:ad:
0b:ce:81:94:8d:ef:d3:dd:3c:f0:d0:db:f4:ea:a4:
4b:9d:c8:94:47:35:db:3f:8e:50:83:be:69:40:e8:
35:e8:8e:10:a4:e5:6c:a3:87:f3:aa:f9:8d:d6:12:
71:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:80:AC:40:F2:32:14:99:90:C9:FF:6D:84:6E:48:B3:B8:C8:E4:D6
X509v3 Authority Key Identifier:
keyid:B2:3E:B8:49:E0:B6:94:0E:4F:F5:47:DE:0B:41:B0:03:F9:E1:10:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sj64SeC2lA5P9UfeC0GwA_nhEFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/11bf2e-b58a-4a31-89c0-155f42dcaa73/1/tYCsQPIyFJmQyf9thG5Is7jI5NY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/11bf2e-b58a-4a31-89c0-155f42dcaa73/1/sj64SeC2lA5P9UfeC0GwA_nhEFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.230.0.0-195.230.18.255
Signature Algorithm: sha256WithRSAEncryption
5d:d9:5f:59:cf:44:7d:6f:da:29:b4:65:a2:20:3d:37:5a:de:
cb:e1:6d:08:36:19:23:71:cf:1f:bd:97:03:e7:54:f9:51:b3:
2b:d5:8f:72:ca:14:a5:cc:d8:6d:ce:30:22:f5:9f:a1:71:58:
22:e2:a3:01:25:c6:c9:d7:b4:87:b3:43:f9:2b:fb:b8:0f:f6:
ed:24:eb:e5:8a:73:3e:f1:4e:84:f7:ad:95:d2:01:ea:d2:d5:
bc:df:77:20:4a:e7:94:d5:5f:89:44:f7:95:16:4d:9b:b6:8f:
09:1b:a9:29:d7:3b:bc:9c:97:0a:0b:d1:0f:03:5b:dd:83:c9:
f4:d7:09:f0:14:e5:f2:0b:bd:2e:31:48:cb:c3:87:6d:0a:2c:
65:16:6f:3c:3f:39:00:cc:52:9d:60:22:a0:ef:34:7b:a8:fe:
c9:1e:5f:be:93:98:10:cb:56:66:1b:0c:6d:58:96:17:69:ec:
d9:37:cb:2b:b7:fb:4d:d3:5f:f1:e5:d2:ef:e3:bc:67:29:34:
89:2b:a4:0c:2b:80:2f:d7:69:dd:1c:e1:94:14:48:d0:ca:b4:
ad:f7:da:d6:05:c4:d6:0b:92:e3:a4:bb:74:ac:c3:48:bc:f7:
78:d2:b6:4f:72:aa:ac:20:f5:a1:45:a2:ef:b0:9f:7d:ae:6c:
e9:07:7c:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:56:28 2025 by rpki-client