Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/af18c4-c044-4485-8ef0-d7812a338183/1/7ASNkD6Hgbsnqd8_wWp-_aAYGqE.roa
File: 7ASNkD6Hgbsnqd8_wWp-_aAYGqE.roa (raw, json)
Hash identifier: LJjg55n4xVGP9vBgMbP2ScHffsmfqIcNY661vZ01XEY=
Subject key identifier: EC:04:8D:90:3E:87:81:BB:27:A9:DF:3F:C1:6A:7E:FD:A0:18:1A:A1
Certificate issuer: /CN=aa6745519323d8c2d93c1b107bf85f61933c71ca
Certificate serial: 019428252C04A98A5E0C9441F11812E6DD45
Authority key identifier: AA:67:45:51:93:23:D8:C2:D9:3C:1B:10:7B:F8:5F:61:93:3C:71:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qmdFUZMj2MLZPBsQe_hfYZM8cco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/af18c4-c044-4485-8ef0-d7812a338183/1/7ASNkD6Hgbsnqd8_wWp-_aAYGqE.roa
Signing time: Thu 02 Jan 2025 17:51:52 +0000
ROA not before: Thu 02 Jan 2025 17:51:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 137517
IP address blocks: 195.95.144.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:25:2c:04:a9:8a:5e:0c:94:41:f1:18:12:e6:dd:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa6745519323d8c2d93c1b107bf85f61933c71ca
Validity
Not Before: Jan 2 17:51:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ec048d903e8781bb27a9df3fc16a7efda0181aa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:fb:44:8d:ac:49:85:08:64:0b:b7:ad:b6:f1:
73:40:8a:15:c1:3d:3e:97:b9:1f:21:63:0a:00:0c:
46:3c:2f:47:a3:92:51:e8:40:94:1c:de:3d:23:70:
6f:fb:a5:a3:5e:ef:06:a9:e6:60:69:a6:61:50:eb:
75:b4:ea:e7:16:2b:29:14:61:21:29:10:75:53:04:
20:6e:77:85:d3:9c:36:d3:28:ad:60:a9:ef:9a:12:
c3:f3:dd:91:3d:19:05:4a:6a:25:ec:1a:5b:d3:62:
8f:8a:66:7f:5b:7c:4c:35:1e:f5:b8:46:9b:72:ba:
cb:5f:e5:5f:45:dd:c8:c2:67:d2:37:2c:f5:54:c9:
21:ef:81:78:42:b2:cb:ef:57:bf:7d:29:48:4d:7d:
4d:c0:2a:62:7d:ef:6f:93:29:f1:4c:54:cb:9f:a4:
81:ea:95:48:c9:25:c9:9c:ee:77:93:42:22:53:7a:
0a:4c:e9:4d:37:5f:23:7f:8a:b3:e2:fa:8c:eb:40:
1d:61:bb:c1:59:db:e8:e6:be:be:6f:90:9f:9b:0c:
4d:36:11:59:c5:4e:4b:be:e5:0d:99:56:9d:6c:e5:
03:e0:cc:89:96:a0:a6:1e:60:37:2b:62:12:56:d1:
df:66:09:a1:b2:44:62:32:0e:cf:f3:fc:2e:5c:e5:
35:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:04:8D:90:3E:87:81:BB:27:A9:DF:3F:C1:6A:7E:FD:A0:18:1A:A1
X509v3 Authority Key Identifier:
keyid:AA:67:45:51:93:23:D8:C2:D9:3C:1B:10:7B:F8:5F:61:93:3C:71:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qmdFUZMj2MLZPBsQe_hfYZM8cco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/af18c4-c044-4485-8ef0-d7812a338183/1/7ASNkD6Hgbsnqd8_wWp-_aAYGqE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/af18c4-c044-4485-8ef0-d7812a338183/1/qmdFUZMj2MLZPBsQe_hfYZM8cco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.95.144.0/24
Signature Algorithm: sha256WithRSAEncryption
21:c4:56:81:7c:8e:b6:cd:44:35:80:73:aa:2e:b4:70:a7:b4:
10:97:26:5c:61:b2:0d:de:a0:f6:62:d3:41:61:d0:13:0a:ff:
f3:8b:f0:69:19:95:55:4a:e8:85:d8:78:1d:3a:35:a4:79:8f:
68:0a:04:4a:ea:ac:58:1b:d4:a7:24:d6:8b:e1:6c:dd:bc:00:
e4:27:cd:7e:fe:3e:1c:58:91:83:dd:8e:54:5f:31:9e:95:7a:
01:d9:0d:02:fc:5a:3c:20:91:76:9c:45:43:56:92:b2:92:aa:
c5:13:89:7a:71:b9:ba:54:52:5d:c7:ca:2f:eb:f6:75:a1:98:
65:c4:be:85:7f:b7:da:c6:d7:74:30:77:c3:49:9c:6e:a6:01:
74:1a:43:7a:f8:0e:e7:14:59:92:10:01:ea:45:5d:8b:58:7f:
78:ff:c1:8c:10:88:35:f9:29:1e:f1:c9:d8:35:7a:a5:08:1d:
03:9b:84:e6:90:1d:5f:c6:d7:fe:0a:36:f3:79:0e:d5:f9:d0:
fe:b4:b4:48:ce:09:36:c5:d3:11:51:ff:21:39:da:66:48:12:
8b:1d:cf:a7:6a:a0:d1:2c:b9:ba:19:7e:5d:03:2e:02:60:87:
19:ee:66:21:82:8d:0b:03:b0:f6:ac:ca:e0:cf:d8:8d:79:fa:
ce:07:fc:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 23:05:36 2025 by rpki-client