Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/5nWvohwCHORmoTVfbcYEK_V_9dE.roa
File: 5nWvohwCHORmoTVfbcYEK_V_9dE.roa (raw, json)
Hash identifier: 1Sev0d5kMbKbc6VdXiKhzPYsS3EF31JUEjphYARSAIc=
Subject key identifier: E6:75:AF:A2:1C:02:1C:E4:66:A1:35:5F:6D:C6:04:2B:F5:7F:F5:D1
Certificate issuer: /CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7
Certificate serial: 01958AF299BB83715EC4B5D2C9B7E26B024B
Authority key identifier: 65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/5nWvohwCHORmoTVfbcYEK_V_9dE.roa
Signing time: Wed 12 Mar 2025 15:21:49 +0000
ROA not before: Wed 12 Mar 2025 15:21:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204902
IP address blocks: 195.216.182.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8a:f2:99:bb:83:71:5e:c4:b5:d2:c9:b7:e2:6b:02:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7
Validity
Not Before: Mar 12 15:21:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e675afa21c021ce466a1355f6dc6042bf57ff5d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:78:92:6f:89:61:00:8b:c7:58:65:ca:08:72:
a9:37:72:14:04:ed:2d:19:80:64:6f:6b:27:09:c0:
10:fc:76:02:a6:44:fc:65:5b:d9:57:36:f0:9b:7a:
df:88:c4:13:49:59:79:6e:58:fe:6b:cb:7e:51:21:
f7:90:36:29:45:75:b9:be:11:8c:3c:86:34:49:10:
90:92:b7:75:4a:bd:11:de:d7:8a:24:e9:a3:6f:d4:
40:c3:04:2a:f8:cf:22:29:74:f9:c7:a1:bb:75:c5:
af:4b:a9:1b:83:40:da:44:72:c2:30:cf:c1:31:9f:
a8:ac:d6:be:42:88:93:11:ae:5f:20:9f:c2:ca:ab:
d9:11:03:2d:ca:ad:0f:4f:a4:51:27:51:e9:1d:ee:
af:74:26:80:e6:b1:a1:ea:0e:ec:5a:a8:91:f9:f1:
c0:da:2d:07:a0:89:61:33:bb:2e:6a:2b:8a:a9:be:
87:7c:93:27:53:e1:f8:a7:06:6d:cc:e6:d0:0e:58:
63:12:9f:d5:36:c8:d9:5b:23:79:06:77:eb:aa:64:
22:a4:03:b8:7c:c2:63:24:2c:e2:dc:1d:a4:84:bd:
9c:0e:a3:4b:ce:43:f8:e0:3b:f2:7e:9b:5f:63:90:
6a:cc:c5:db:35:63:eb:ee:e7:42:aa:ef:b6:9b:ed:
ee:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:75:AF:A2:1C:02:1C:E4:66:A1:35:5F:6D:C6:04:2B:F5:7F:F5:D1
X509v3 Authority Key Identifier:
keyid:65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/5nWvohwCHORmoTVfbcYEK_V_9dE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.216.182.0/24
Signature Algorithm: sha256WithRSAEncryption
03:ff:4a:40:88:a1:82:6e:74:bc:c0:f0:16:ba:a3:9b:d8:c1:
59:eb:90:9c:7e:71:1c:13:d5:44:34:a6:45:97:82:ed:61:be:
58:1d:aa:dc:47:a5:41:dd:36:03:4d:bb:64:cf:ac:31:82:f1:
3a:88:2d:42:21:02:a0:33:af:57:ac:69:e3:36:e5:40:1a:58:
35:b9:be:de:74:5a:d8:63:6b:88:e6:e4:6d:a7:3d:d1:52:18:
b2:bc:2d:47:b3:c6:a7:ca:db:54:14:1d:ab:6a:09:2b:11:10:
e9:0d:b8:db:9a:ea:b2:77:73:78:d2:3e:4a:21:d3:5f:ad:ba:
ce:7a:48:d5:a9:70:c8:3d:92:84:45:1b:99:8a:78:21:9c:93:
45:f3:1b:8d:ca:1f:69:69:7e:43:ae:ab:f0:e0:2b:3e:30:d8:
52:f1:19:ec:d4:dd:ef:e1:f6:4d:90:05:0b:41:dd:fd:48:3d:
ae:d2:78:6d:81:f7:d8:65:d1:3f:88:84:ed:90:b7:12:18:6f:
f0:4d:73:4d:98:91:17:f6:b5:28:52:51:98:e9:f6:ce:f2:a5:
93:5b:38:a0:9a:18:4e:33:6b:19:8d:ae:c2:c1:3e:8a:d5:42:
55:4b:70:16:ae:9f:a6:de:5f:46:ae:01:ac:0f:69:d2:64:cd:
ab:68:38:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 02:41:59 2025 by rpki-client