Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/465556-70d1-4152-a65a-6c63e152242d/1/RLT9vWKmEAqKt6hEtNsyMWI1h0c.roa
File: RLT9vWKmEAqKt6hEtNsyMWI1h0c.roa (raw, json)
Hash identifier: xBu31AarPg6SaGrJFYKlAHmm3Mw8LW1iAP2FYDxCvXE=
Subject key identifier: 44:B4:FD:BD:62:A6:10:0A:8A:B7:A8:44:B4:DB:32:31:62:35:87:47
Certificate issuer: /CN=d0d6e65505b4f4e4f4f31d90b8b21a3a7cfb0ebf
Certificate serial: 0194252224DDB85CF3FBC5E2A7CE67AEE095
Authority key identifier: D0:D6:E6:55:05:B4:F4:E4:F4:F3:1D:90:B8:B2:1A:3A:7C:FB:0E:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0NbmVQW09OT08x2QuLIaOnz7Dr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/465556-70d1-4152-a65a-6c63e152242d/1/RLT9vWKmEAqKt6hEtNsyMWI1h0c.roa
Signing time: Thu 02 Jan 2025 03:49:42 +0000
ROA not before: Thu 02 Jan 2025 03:49:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197511
IP address blocks: 195.20.142.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:24:dd:b8:5c:f3:fb:c5:e2:a7:ce:67:ae:e0:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0d6e65505b4f4e4f4f31d90b8b21a3a7cfb0ebf
Validity
Not Before: Jan 2 03:49:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=44b4fdbd62a6100a8ab7a844b4db323162358747
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:96:ab:7c:46:3b:8d:8f:fb:9b:50:51:4e:40:
59:75:d9:23:b4:11:7a:13:f2:7a:33:82:80:82:6c:
fa:ad:be:37:d8:ef:58:b7:54:0a:19:ec:91:f0:fe:
7e:68:b5:b1:63:ad:44:13:b3:69:73:6e:e0:58:35:
fc:78:6d:40:4f:ff:3a:b1:7b:af:fd:0f:e4:fe:3b:
0e:87:13:c9:a2:60:dd:9a:7a:b6:02:5e:5f:5a:d1:
77:f1:c7:d2:19:27:eb:42:6a:d0:dd:0e:2e:40:b0:
c4:d0:36:af:bd:73:86:6e:e0:45:4b:3f:1d:56:63:
7b:03:ec:31:fc:69:26:74:ac:cd:4c:b0:95:56:60:
1d:1a:30:99:19:78:d6:07:ca:d3:ac:c9:65:13:c4:
47:73:bb:8a:b7:02:de:92:8a:d0:f7:9f:aa:54:5c:
61:d4:e5:47:31:8b:0d:dd:9d:32:73:5e:7a:d1:3f:
73:55:93:09:9c:d7:e5:73:02:8b:f4:55:1e:ab:d0:
13:56:a4:a7:bf:86:c4:8e:70:84:c0:19:71:e6:51:
5b:a6:a7:49:2e:1e:69:12:e9:9b:ed:5b:11:79:c4:
b6:bf:93:68:6c:5d:65:6e:c3:73:aa:5d:69:b3:eb:
24:1d:0c:f2:c1:e9:73:a2:99:e4:87:43:79:3e:10:
c8:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:B4:FD:BD:62:A6:10:0A:8A:B7:A8:44:B4:DB:32:31:62:35:87:47
X509v3 Authority Key Identifier:
keyid:D0:D6:E6:55:05:B4:F4:E4:F4:F3:1D:90:B8:B2:1A:3A:7C:FB:0E:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0NbmVQW09OT08x2QuLIaOnz7Dr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/465556-70d1-4152-a65a-6c63e152242d/1/RLT9vWKmEAqKt6hEtNsyMWI1h0c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/465556-70d1-4152-a65a-6c63e152242d/1/0NbmVQW09OT08x2QuLIaOnz7Dr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.20.142.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:01:cd:e1:41:5c:49:57:a8:95:e4:e6:a2:3e:89:b8:e9:00:
70:a6:59:64:88:e3:53:ba:99:14:38:d4:fe:12:d1:22:27:14:
2d:30:ab:24:e8:10:ea:8d:2d:5c:be:ea:82:f0:ee:5f:42:94:
43:7b:0d:24:b4:47:3b:30:04:ba:3a:ef:22:e4:d7:cd:a9:74:
ed:8b:f5:68:0d:d5:92:07:c9:c4:c4:5a:2a:65:11:30:61:32:
f8:62:67:3b:16:ab:11:f4:54:87:c6:70:1f:f6:33:d5:3d:d2:
81:1c:8a:f9:0f:aa:4b:eb:da:34:50:39:ef:1e:ef:0e:fc:c5:
c8:07:96:94:2b:6b:22:46:c1:c6:4a:18:7c:76:c9:87:52:13:
7b:0a:70:a0:4d:36:9c:59:f6:fa:4a:6a:7d:3b:61:83:0e:88:
d9:18:f6:e4:c4:59:2a:9c:01:8e:30:65:46:f9:aa:22:68:d0:
3e:e1:4f:0f:04:2a:d6:1b:17:a0:7b:ac:98:f9:fd:df:7b:23:
e0:d4:a8:2a:5a:52:60:49:0f:d1:fb:f4:f9:a5:70:6b:a7:96:
78:8e:8e:6a:99:e2:c0:d3:6d:a6:a1:bb:8f:c5:4a:63:b7:72:
db:a1:8b:d0:4c:78:aa:0f:78:d9:13:af:4d:fc:0a:b6:ea:e3:
2f:d6:f2:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:58:20 2025 by rpki-client