Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/5ebc5d-8683-4c37-a050-20ef42c9bc38/1/dOaeIHruifCT3_Y-NZ9ouvbnhuc.roa
File: dOaeIHruifCT3_Y-NZ9ouvbnhuc.roa (raw, json)
Hash identifier: PG+NsqO34TjeMURDoubqwQXu9F/XY0vJGA8jsdkgloo=
Subject key identifier: 74:E6:9E:20:7A:EE:89:F0:93:DF:F6:3E:35:9F:68:BA:F6:E7:86:E7
Certificate issuer: /CN=6381f72082e312069d83d9af4f319cf0af803647
Certificate serial: 019426D9554B62EC99CA4F9A632A798099BC
Authority key identifier: 63:81:F7:20:82:E3:12:06:9D:83:D9:AF:4F:31:9C:F0:AF:80:36:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y4H3IILjEgadg9mvTzGc8K-ANkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/5ebc5d-8683-4c37-a050-20ef42c9bc38/1/dOaeIHruifCT3_Y-NZ9ouvbnhuc.roa
Signing time: Thu 02 Jan 2025 11:49:24 +0000
ROA not before: Thu 02 Jan 2025 11:49:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13039
IP address blocks: 195.85.240.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:55:4b:62:ec:99:ca:4f:9a:63:2a:79:80:99:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6381f72082e312069d83d9af4f319cf0af803647
Validity
Not Before: Jan 2 11:49:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=74e69e207aee89f093dff63e359f68baf6e786e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ff:c9:22:88:3a:81:e4:a2:78:f4:98:9f:91:
4d:f5:d1:dc:04:1c:24:e5:f4:20:e0:8f:56:b4:2c:
3a:c4:b8:f2:26:f5:17:72:6b:0e:15:44:c9:80:87:
25:40:a6:0f:f3:63:2b:21:75:7c:bc:47:c0:2a:91:
62:98:3c:82:2f:f6:05:b9:b7:06:e4:9d:35:01:b8:
94:e0:81:1b:43:e7:7c:5b:84:31:d8:1f:c2:6d:e4:
45:29:0e:d1:38:6d:dd:72:6d:e6:dd:d9:07:db:c5:
20:d1:ea:29:07:89:14:0f:47:93:97:df:b3:6d:a1:
89:f7:32:a8:a7:9f:47:79:a7:ca:51:0c:0e:af:6e:
f4:a3:7e:b3:43:e3:43:37:26:92:7c:e2:1c:48:11:
04:db:c2:eb:dd:9a:02:68:88:b7:6c:73:3f:fb:1e:
b8:23:c3:de:50:e8:d6:24:71:96:e2:f7:1b:39:e0:
a6:a2:0d:74:f6:4d:82:ec:b5:52:a6:05:de:9e:89:
1b:bd:8d:8a:33:23:97:dd:ec:53:f7:e5:9d:17:0c:
18:25:ad:57:5e:ae:2c:1e:67:f6:a3:bf:38:9a:b2:
ca:55:4c:67:db:85:4c:7c:0b:0f:ec:d4:2a:dd:80:
a3:91:47:a6:72:2a:17:98:aa:fb:9c:39:53:a3:b3:
b3:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:E6:9E:20:7A:EE:89:F0:93:DF:F6:3E:35:9F:68:BA:F6:E7:86:E7
X509v3 Authority Key Identifier:
keyid:63:81:F7:20:82:E3:12:06:9D:83:D9:AF:4F:31:9C:F0:AF:80:36:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y4H3IILjEgadg9mvTzGc8K-ANkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/5ebc5d-8683-4c37-a050-20ef42c9bc38/1/dOaeIHruifCT3_Y-NZ9ouvbnhuc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/5ebc5d-8683-4c37-a050-20ef42c9bc38/1/Y4H3IILjEgadg9mvTzGc8K-ANkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.85.240.0/24
Signature Algorithm: sha256WithRSAEncryption
46:b7:b2:74:af:d3:09:38:c7:f7:75:52:93:55:76:8d:f7:b5:
a1:f5:96:e1:50:8f:7a:9f:f3:42:2c:d6:55:26:04:7a:1e:e1:
6b:4f:1f:04:a3:b8:5a:ed:36:c0:93:eb:d7:63:e5:5f:38:51:
cb:9c:fc:78:2c:27:ff:34:42:f0:8c:0c:8d:c5:f0:2d:60:b2:
66:66:ee:97:c0:8a:50:b9:2e:29:a8:b3:ae:f2:01:a7:1a:88:
0f:b0:54:11:b3:ae:e0:9a:3c:2f:0f:45:8b:c3:1a:1b:1a:79:
95:50:9a:49:7a:c8:8a:07:25:c0:8f:73:d5:83:bb:55:8d:89:
35:4c:82:e3:c5:ac:35:72:b8:9a:76:ef:92:86:80:88:16:a7:
81:6e:3c:79:64:51:6f:56:5c:88:78:5a:16:3a:d5:50:7c:c7:
f2:c6:c3:dd:f2:16:22:1d:46:48:38:61:8e:b8:e3:bd:d0:ae:
20:21:80:cc:3b:8a:9a:73:16:6e:88:23:a0:2e:e3:2b:10:0c:
10:68:67:29:30:8f:7a:74:b4:f4:e7:a0:93:61:40:e9:14:09:
2d:20:e3:8e:68:03:7a:69:6b:a1:81:f4:ca:1d:f2:00:6f:01:
fa:f8:3f:6c:85:b8:4e:a7:e6:38:70:66:6c:d0:b2:22:26:18:
0f:6b:21:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 17:19:11 2025 by rpki-client