Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/1f3322-6af7-47ab-8dc5-99a11f6385ab/1/tsJwFZrDXIRwjLakU6dbnqENzD0.roa
File: tsJwFZrDXIRwjLakU6dbnqENzD0.roa (raw, json)
Hash identifier: wlsUyedxgDvePxXhoMuofoRM97SDv+ta+Oc6E/8MG7k=
Subject key identifier: B6:C2:70:15:9A:C3:5C:84:70:8C:B6:A4:53:A7:5B:9E:A1:0D:CC:3D
Certificate issuer: /CN=0bebcee4d23379aed81aecffc7a742b35acdddb3
Certificate serial: 019510D9C6F60FA4D9E67EDE1E084F601AFE
Authority key identifier: 0B:EB:CE:E4:D2:33:79:AE:D8:1A:EC:FF:C7:A7:42:B3:5A:CD:DD:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C-vO5NIzea7YGuz_x6dCs1rN3bM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/1f3322-6af7-47ab-8dc5-99a11f6385ab/1/tsJwFZrDXIRwjLakU6dbnqENzD0.roa
Signing time: Sun 16 Feb 2025 22:21:02 +0000
ROA not before: Sun 16 Feb 2025 22:21:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207921
IP address blocks: 195.39.246.0/23 maxlen: 24
2a0f:4ac0::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:d9:c6:f6:0f:a4:d9:e6:7e:de:1e:08:4f:60:1a:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bebcee4d23379aed81aecffc7a742b35acdddb3
Validity
Not Before: Feb 16 22:21:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b6c270159ac35c84708cb6a453a75b9ea10dcc3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:3a:c2:73:e7:8d:6c:cc:db:f7:f6:40:25:fe:
fc:2c:30:f7:19:3e:96:f0:05:ad:7f:63:80:71:bd:
6b:9d:28:72:01:d3:94:5e:9a:d9:fa:49:c9:0f:39:
42:73:62:7e:ca:64:61:52:6e:64:3b:89:b5:42:41:
cc:b9:c4:10:85:65:36:80:6b:8f:98:bd:37:25:74:
ba:c3:d8:1c:19:82:ab:26:b8:92:ad:3d:39:cf:6a:
78:23:7c:04:36:63:f9:f5:86:c5:0f:fe:87:51:1c:
78:90:f9:f8:9d:57:03:16:0b:09:84:dd:49:0c:6c:
2c:a9:ca:b2:04:61:74:68:06:dc:d6:44:47:cc:83:
e6:b1:e8:96:0e:16:11:70:c5:66:cc:bb:df:ed:28:
84:88:ba:02:cd:63:2f:eb:05:91:da:7e:aa:95:79:
60:db:78:81:d8:bf:5c:0a:30:e0:7f:8f:6f:a2:8c:
8c:af:de:b2:c6:57:bf:d4:e5:f8:12:4f:8b:74:f4:
13:75:1f:2a:e6:36:69:35:67:e8:07:ca:ff:bf:29:
d0:20:a7:f0:c9:dd:37:05:13:e6:f9:56:2c:58:a5:
b5:77:2b:9e:10:98:4f:16:39:c5:38:c6:35:cd:a2:
e7:ca:ea:55:10:2b:ee:3a:9f:f6:a0:88:d9:b8:dd:
81:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:C2:70:15:9A:C3:5C:84:70:8C:B6:A4:53:A7:5B:9E:A1:0D:CC:3D
X509v3 Authority Key Identifier:
keyid:0B:EB:CE:E4:D2:33:79:AE:D8:1A:EC:FF:C7:A7:42:B3:5A:CD:DD:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C-vO5NIzea7YGuz_x6dCs1rN3bM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/1f3322-6af7-47ab-8dc5-99a11f6385ab/1/tsJwFZrDXIRwjLakU6dbnqENzD0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/1f3322-6af7-47ab-8dc5-99a11f6385ab/1/C-vO5NIzea7YGuz_x6dCs1rN3bM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.39.246.0/23
IPv6:
2a0f:4ac0::/29
Signature Algorithm: sha256WithRSAEncryption
62:24:6e:c1:d8:8b:75:ca:04:b1:3b:49:8e:cc:d0:1a:5b:9e:
64:4d:4c:3a:8a:87:44:f5:46:7f:9f:e3:ec:81:45:02:f2:1c:
4e:e8:93:92:31:01:90:01:83:b9:4b:90:92:e2:e9:79:d3:1c:
56:55:5d:e5:5a:36:37:4a:56:98:35:05:db:52:09:4e:17:9d:
4f:7d:fc:1c:e6:4b:d2:f1:77:5d:4e:4d:82:21:b4:84:75:e4:
81:24:fd:71:9b:05:16:07:1d:03:6d:7b:a3:79:2f:18:27:ac:
0e:c1:ff:7c:14:f0:c8:8c:f3:5b:f4:be:f5:08:5e:8e:6f:1e:
9c:9e:e4:1e:62:9c:bb:67:44:4e:a0:27:df:29:36:25:36:92:
af:f1:78:70:7d:06:77:b4:96:77:f3:32:a1:ea:dc:7d:86:46:
09:41:cb:ff:18:e4:96:56:09:ce:87:ee:7f:29:b2:a8:00:91:
b8:68:53:3d:29:5b:9d:fd:65:49:05:47:2b:32:13:0f:de:58:
55:7c:07:56:ac:00:16:e1:36:86:be:6f:86:29:13:1a:67:84:
ae:ff:ae:11:89:a1:55:70:64:c0:ac:72:18:68:2c:b3:34:70:
0d:1d:62:39:06:62:8f:e9:9d:11:27:03:3a:ff:e1:d5:a3:5a:
fe:ec:06:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:50:15 2025 by rpki-client