Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/CHiHBaBQlVlFW1NOXjsvT0kBxhc.roa
File: CHiHBaBQlVlFW1NOXjsvT0kBxhc.roa (raw, json)
Hash identifier: Gf3u6Y4R0vH1EM3VE/k5l1ej3lwhfCKNX6E3xGsnVwc=
Subject key identifier: 08:78:87:05:A0:50:95:59:45:5B:53:4E:5E:3B:2F:4F:49:01:C6:17
Certificate issuer: /CN=253a3b5f51808168c212c094a2baaff38e16464a
Certificate serial: 01952803A75DFAC4FB3CFFDA5478A8141C74
Authority key identifier: 25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/CHiHBaBQlVlFW1NOXjsvT0kBxhc.roa
Signing time: Fri 21 Feb 2025 10:18:02 +0000
ROA not before: Fri 21 Feb 2025 10:18:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34879
IP address blocks: 195.208.64.0/24 maxlen: 24
195.208.65.0/24 maxlen: 24
195.209.72.0/23 maxlen: 24
195.209.74.0/24 maxlen: 24
195.209.77.0/24 maxlen: 24
195.209.84.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:28:03:a7:5d:fa:c4:fb:3c:ff:da:54:78:a8:14:1c:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=253a3b5f51808168c212c094a2baaff38e16464a
Validity
Not Before: Feb 21 10:18:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=08788705a0509559455b534e5e3b2f4f4901c617
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:d9:9f:8f:8b:eb:2d:63:be:c5:dd:0b:19:c4:
61:af:1a:54:dd:c0:77:03:e1:ab:96:6b:68:8d:59:
73:44:42:6e:8c:b3:a2:58:b4:76:ec:47:4d:87:0a:
e7:31:44:fd:ae:a2:8a:18:19:ee:5f:45:8a:d0:ea:
07:74:e0:3b:a7:fe:5a:1d:3c:8c:16:55:d8:42:30:
8b:3d:c3:ea:dd:02:79:1a:6c:ee:0b:3b:c7:c4:3d:
5e:c7:5f:c0:f9:4a:be:24:9b:98:5c:48:79:df:f0:
2a:0e:41:09:71:5b:47:23:01:70:0d:8a:58:5d:55:
59:d9:6c:0b:70:1d:62:17:eb:bc:f4:f5:eb:d9:10:
42:2b:96:a6:c2:e5:3e:49:a2:9b:01:22:52:32:e0:
65:52:54:81:42:65:bf:6f:fa:10:26:48:ac:2b:19:
d5:dc:c1:af:1f:bc:ed:c3:dd:d6:be:7f:25:6d:62:
76:08:94:f8:0d:97:6b:c5:c8:d4:92:0a:2c:fb:8c:
7c:50:f3:e7:91:c1:65:bd:2e:4d:85:7a:94:8b:0a:
ab:fb:a5:56:79:65:9e:f8:46:e9:c1:8f:8b:f3:33:
17:d4:4d:b2:49:ab:03:ce:55:58:f5:19:67:22:c8:
14:ac:32:ad:6f:3c:59:a6:05:9a:bb:a6:40:21:16:
61:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:78:87:05:A0:50:95:59:45:5B:53:4E:5E:3B:2F:4F:49:01:C6:17
X509v3 Authority Key Identifier:
keyid:25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/CHiHBaBQlVlFW1NOXjsvT0kBxhc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.208.64.0/23
195.209.72.0-195.209.74.255
195.209.77.0/24
195.209.84.0/24
Signature Algorithm: sha256WithRSAEncryption
05:64:28:d2:61:21:9a:ab:ca:39:19:af:f7:0e:a0:dc:e2:cd:
bf:d0:62:3f:f9:ff:53:f1:8d:cf:6d:18:04:4e:c4:79:dc:3c:
53:df:bf:c3:62:d1:ca:98:34:e2:60:86:1e:43:7a:d4:47:1e:
9e:79:92:cf:55:5e:16:84:89:91:2a:4b:f7:d0:ed:1c:67:10:
ed:88:75:1e:9e:12:bf:f1:81:c4:33:f5:90:71:ef:03:f9:35:
e0:ce:ba:2e:0d:1f:db:3f:d6:9c:03:b4:4b:3c:a3:c6:0d:67:
98:f0:44:68:61:94:24:3e:34:e1:a1:5c:4e:9a:49:42:5f:84:
f8:f8:10:ed:e9:64:5e:41:3b:fb:84:c6:fe:36:3c:38:1f:a2:
25:7d:d4:e7:24:99:f6:ad:91:91:7f:c3:d6:4c:a7:bb:5d:57:
06:a3:6b:89:ba:f8:b1:7c:02:78:99:92:4a:c3:3f:fc:4b:ef:
dd:c3:b9:a6:94:07:8b:98:6c:62:a9:a0:50:0d:10:f4:63:bd:
1a:a1:5c:be:de:74:a9:51:6a:1e:04:36:5a:90:79:24:7e:28:
6a:41:b5:f7:36:0e:47:5f:25:ea:cf:bc:1a:b4:47:bd:36:f7:
f9:c7:b0:5b:39:bf:45:a6:aa:50:a5:f7:91:7f:cd:f9:c7:d4:
b1:0e:50:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 10:57:03 2025 by rpki-client