Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/f4e03e-27b2-494b-8c0f-6f7009bee915/1/k6IT53wky2OyxFkQBPrbNFj6TNQ.roa
File: k6IT53wky2OyxFkQBPrbNFj6TNQ.roa (raw, json)
Hash identifier: brdxpAD59FYZoJp1BAGf2U6f2BoN13pBWQRPGF1mMCg=
Subject key identifier: 93:A2:13:E7:7C:24:CB:63:B2:C4:59:10:04:FA:DB:34:58:FA:4C:D4
Certificate issuer: /CN=089c8c7f334053c8a90a3408009ef3d3b7a82e3d
Certificate serial: 019425FCCCFCE15278636435E64DC7485C16
Authority key identifier: 08:9C:8C:7F:33:40:53:C8:A9:0A:34:08:00:9E:F3:D3:B7:A8:2E:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CJyMfzNAU8ipCjQIAJ7z07eoLj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/f4e03e-27b2-494b-8c0f-6f7009bee915/1/k6IT53wky2OyxFkQBPrbNFj6TNQ.roa
Signing time: Thu 02 Jan 2025 07:48:32 +0000
ROA not before: Thu 02 Jan 2025 07:48:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201507
IP address blocks: 195.137.221.0/24 maxlen: 24
2a13:2440:a0::/44 maxlen: 44
2a13:2440:b0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:cc:fc:e1:52:78:63:64:35:e6:4d:c7:48:5c:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=089c8c7f334053c8a90a3408009ef3d3b7a82e3d
Validity
Not Before: Jan 2 07:48:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=93a213e77c24cb63b2c4591004fadb3458fa4cd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:47:20:84:b9:36:97:19:3b:d3:b0:db:e2:dc:
fc:2b:b5:ef:99:0e:d5:a0:64:ef:ab:a2:89:82:4d:
e2:fc:b8:bb:c1:75:a9:08:c1:94:0c:ca:9d:c8:fa:
15:c2:c3:c2:ba:a7:f6:2a:e9:b9:5a:21:f7:c2:4b:
55:57:2b:72:44:05:a2:b7:2b:a5:b6:6c:62:15:78:
46:e8:d7:33:3b:85:94:d2:d3:f8:3c:b8:d5:ff:0b:
82:22:f4:fc:43:52:a7:ae:b2:f5:38:8b:62:f4:1e:
f1:b3:5b:da:5e:b7:21:d5:f1:5d:2d:36:9a:17:c7:
32:d2:18:ce:62:d9:91:1f:ee:90:84:f7:62:f9:b2:
d1:67:63:9f:85:f4:39:57:4f:99:2f:cc:ba:6e:1d:
8d:61:1b:41:1d:2b:7d:58:33:35:a2:1a:94:0d:2c:
70:a0:e1:34:7a:65:2e:28:33:0e:14:60:4c:82:c7:
eb:9b:29:14:6a:62:0d:78:4f:cb:3d:eb:7e:5c:55:
33:97:a4:d4:8c:e6:c9:37:52:44:69:1f:ee:6a:b6:
1a:93:b7:ab:65:b9:d5:cc:26:6a:81:2e:9c:7c:49:
08:f7:20:62:12:72:bc:dc:05:29:7a:37:bc:30:b7:
d6:c7:53:bd:67:19:f4:52:60:4a:d0:03:ef:9c:48:
6b:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:A2:13:E7:7C:24:CB:63:B2:C4:59:10:04:FA:DB:34:58:FA:4C:D4
X509v3 Authority Key Identifier:
keyid:08:9C:8C:7F:33:40:53:C8:A9:0A:34:08:00:9E:F3:D3:B7:A8:2E:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CJyMfzNAU8ipCjQIAJ7z07eoLj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f4e03e-27b2-494b-8c0f-6f7009bee915/1/k6IT53wky2OyxFkQBPrbNFj6TNQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f4e03e-27b2-494b-8c0f-6f7009bee915/1/CJyMfzNAU8ipCjQIAJ7z07eoLj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.137.221.0/24
IPv6:
2a13:2440:a0::-2a13:2440:b0:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
74:8b:25:96:5b:2e:75:9c:51:12:78:76:3b:80:36:9e:d2:45:
da:11:0a:a2:5d:88:17:2b:83:01:a1:f8:1f:f4:87:7b:30:8a:
47:03:0f:cf:d4:fb:5b:b6:04:ba:43:5d:aa:ce:be:f5:6f:e4:
13:dc:13:6f:be:12:42:06:0e:a9:f5:1d:64:3f:0c:3f:47:b3:
23:57:25:98:8c:00:b5:92:a6:cd:fb:7e:9e:e8:06:6c:40:50:
48:7b:03:fa:ff:c7:de:f2:cf:76:ec:b7:52:75:13:14:c0:29:
0a:a4:3d:b3:82:fd:d9:6f:77:d7:62:6f:4c:db:b2:3c:5d:40:
4f:f9:40:02:2c:35:9f:ae:1d:e2:3d:9d:78:c9:bd:de:6b:7c:
95:36:4a:69:a0:8a:fa:9d:aa:a6:b5:a7:d3:7a:d9:9a:70:1b:
f9:2e:29:05:2e:3b:ec:d3:79:7d:41:fb:39:8b:41:14:ba:87:
42:50:e9:08:11:71:e9:9f:77:f7:58:33:32:29:26:1d:2e:7f:
5d:14:c8:a2:ba:45:c9:25:09:66:5c:f8:20:ee:03:19:03:69:
51:53:8b:9e:68:5b:23:e0:7b:2f:62:23:e6:c2:a5:14:3d:1b:
39:46:28:03:e9:72:cb:88:e6:db:8b:88:74:cf:85:c7:f6:f4:
7e:5e:94:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 17:54:08 2025 by rpki-client