Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/8c3a8b-9171-4620-b1e0-77fca7a30b9f/1/A_Ig0V6t3ntCxD7PTccbnIguTs8.roa
File: A_Ig0V6t3ntCxD7PTccbnIguTs8.roa (raw, json)
Hash identifier: x63polo4t0dGd0M1xxigrw4CFjSi7R4AExIbYtwQIRY=
Subject key identifier: 03:F2:20:D1:5E:AD:DE:7B:42:C4:3E:CF:4D:C7:1B:9C:88:2E:4E:CF
Certificate issuer: /CN=0c6859feba7834c9322b7c6f6bd81bd3bef5ce51
Certificate serial: 0194228D73C914E3CAAB8E65C0E59A380A88
Authority key identifier: 0C:68:59:FE:BA:78:34:C9:32:2B:7C:6F:6B:D8:1B:D3:BE:F5:CE:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DGhZ_rp4NMkyK3xva9gb0771zlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/8c3a8b-9171-4620-b1e0-77fca7a30b9f/1/A_Ig0V6t3ntCxD7PTccbnIguTs8.roa
Signing time: Wed 01 Jan 2025 15:48:03 +0000
ROA not before: Wed 01 Jan 2025 15:48:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215371
IP address blocks: 195.140.196.0/24 maxlen: 24
195.140.197.0/24 maxlen: 24
195.140.198.0/24 maxlen: 24
195.140.199.0/24 maxlen: 24
195.149.116.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:73:c9:14:e3:ca:ab:8e:65:c0:e5:9a:38:0a:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c6859feba7834c9322b7c6f6bd81bd3bef5ce51
Validity
Not Before: Jan 1 15:48:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=03f220d15eadde7b42c43ecf4dc71b9c882e4ecf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:44:fa:65:3d:84:69:33:82:21:56:d3:cf:39:
a1:64:74:e0:76:01:34:4f:ac:cb:41:8c:b9:58:a3:
8c:d9:6e:5b:cb:01:14:6a:9e:11:8f:aa:dd:1b:71:
0c:37:c7:fe:74:0d:2a:40:4c:48:45:b3:62:af:6c:
dc:90:ea:0e:16:6e:79:27:7b:0c:16:05:3d:5d:83:
5c:47:55:29:75:c8:dd:97:89:3b:b1:9d:99:70:61:
0b:58:2b:a9:7d:0f:79:10:c4:d5:4f:e6:6d:b6:5e:
40:84:e6:a5:f3:58:a1:d9:93:bd:32:d3:2a:91:fe:
6a:3a:9b:54:72:e0:ef:8c:1b:9c:db:b3:5d:db:09:
02:42:50:d2:8f:b8:c9:13:11:50:76:3d:d6:35:f0:
07:52:58:2f:4a:51:a8:d6:75:59:ab:4c:e2:3b:b7:
b9:c6:70:f5:e4:2f:e4:6e:4e:83:a0:f8:17:39:17:
82:48:3f:34:f2:4b:58:90:88:a1:69:87:ef:36:45:
09:0c:89:7a:d9:83:47:73:9b:32:3c:d5:9f:11:07:
c9:c2:83:57:34:3d:4f:3a:3a:61:b8:b2:7f:f1:24:
c2:76:ec:5f:80:5f:da:1b:06:b4:65:a6:3c:62:c1:
93:10:31:16:ad:26:bb:ff:86:ff:5a:6d:6d:9b:ec:
f3:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:F2:20:D1:5E:AD:DE:7B:42:C4:3E:CF:4D:C7:1B:9C:88:2E:4E:CF
X509v3 Authority Key Identifier:
keyid:0C:68:59:FE:BA:78:34:C9:32:2B:7C:6F:6B:D8:1B:D3:BE:F5:CE:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DGhZ_rp4NMkyK3xva9gb0771zlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/8c3a8b-9171-4620-b1e0-77fca7a30b9f/1/A_Ig0V6t3ntCxD7PTccbnIguTs8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/8c3a8b-9171-4620-b1e0-77fca7a30b9f/1/DGhZ_rp4NMkyK3xva9gb0771zlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.140.196.0/22
195.149.116.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:73:23:38:aa:23:c2:db:fa:3c:cf:39:11:b0:18:05:85:cc:
db:b0:73:9c:af:e4:38:a3:7c:81:35:7f:51:21:39:84:b1:12:
d0:b0:37:ec:d0:15:ea:66:84:22:33:76:b4:1d:10:df:6b:2e:
98:67:09:64:d4:ed:1b:38:55:c8:3e:54:da:78:70:9f:57:b7:
81:05:45:6e:34:1b:55:99:69:0d:bf:59:93:e5:5a:5f:a0:68:
d3:57:0f:4a:fd:85:6a:87:a0:48:a7:ab:f4:bd:27:87:66:9f:
02:0a:64:6c:1e:5f:2c:89:ce:57:b8:14:0d:c6:f9:3e:81:79:
ff:a2:98:7c:91:05:99:77:08:87:54:b9:d4:8a:e5:0a:f7:67:
3c:83:10:b0:18:96:14:38:a9:2c:89:ac:66:26:89:93:d6:24:
31:35:93:b4:c4:a4:41:d4:0b:1f:54:3d:fa:f0:78:a2:95:b5:
89:d3:da:dc:8c:df:58:72:51:93:a3:b1:18:3e:36:87:16:71:
3a:64:6d:a9:60:e9:57:48:9b:a2:36:fa:f6:33:b5:d4:e6:29:
ba:46:be:e5:f8:bc:50:e8:d4:09:83:1d:3a:87:01:4f:f7:cf:
3a:63:d5:77:1e:84:eb:20:5c:11:fd:64:e8:37:6c:d1:90:8e:
21:7c:83:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:40:17 2025 by rpki-client