Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/48f99e-1a10-45c3-aa34-4cd15cbc501b/1/EYwLNQ0R_Ied-v-mXvUH_vf6GVA.roa
File: EYwLNQ0R_Ied-v-mXvUH_vf6GVA.roa (raw, json)
Hash identifier: TajJUilMmDGZNmoTd4v8tDuWl6eHYmByCynqf999DBU=
Subject key identifier: 11:8C:0B:35:0D:11:FC:87:9D:FA:FF:A6:5E:F5:07:FE:F7:FA:19:50
Certificate issuer: /CN=95a904ac6093e1e229a074c50506ffecda010ccf
Certificate serial: 01942368E919A524E508B6CB7D31CF10E725
Authority key identifier: 95:A9:04:AC:60:93:E1:E2:29:A0:74:C5:05:06:FF:EC:DA:01:0C:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lakErGCT4eIpoHTFBQb_7NoBDM8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/48f99e-1a10-45c3-aa34-4cd15cbc501b/1/EYwLNQ0R_Ied-v-mXvUH_vf6GVA.roa
Signing time: Wed 01 Jan 2025 19:47:45 +0000
ROA not before: Wed 01 Jan 2025 19:47:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50689
IP address blocks: 195.210.0.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:68:e9:19:a5:24:e5:08:b6:cb:7d:31:cf:10:e7:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95a904ac6093e1e229a074c50506ffecda010ccf
Validity
Not Before: Jan 1 19:47:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=118c0b350d11fc879dfaffa65ef507fef7fa1950
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:36:17:fb:67:53:ed:dc:6c:5c:cb:a9:c3:2d:
7d:f7:91:26:71:1f:e3:53:be:96:57:fa:c1:4c:26:
04:ae:54:ba:73:e3:94:2c:1a:c4:c1:c4:22:dc:6b:
eb:bc:94:cd:10:eb:7f:e9:81:34:c3:cc:0c:bc:26:
11:71:0e:7f:2b:0c:76:31:01:d3:26:07:49:34:15:
49:2a:a3:eb:57:91:fa:8b:73:b2:ed:af:7c:4a:13:
af:13:d1:94:7c:79:96:4e:bc:6b:04:e0:87:25:c7:
2e:32:89:f0:7f:15:ac:af:eb:25:d4:e1:22:04:6e:
63:25:ed:e9:e2:1a:b1:5b:8c:e3:3b:1f:49:cf:77:
17:46:e6:8b:a3:55:a6:fb:96:a6:f5:15:e6:b9:09:
6e:be:86:d0:f6:bc:41:54:55:22:09:84:0f:b1:3c:
85:c9:bb:74:b1:87:8d:05:88:6d:24:41:d3:b3:34:
f9:0b:94:11:1f:20:38:ec:45:f8:d6:f8:a8:c6:67:
dd:c1:b0:0e:ec:ce:71:93:8e:eb:0f:95:c9:76:b6:
1c:b5:5f:19:42:fc:79:ba:9c:b4:fc:fa:0c:cc:4e:
16:c4:8d:31:a6:55:01:4f:64:70:3b:a6:35:ef:ce:
5b:72:fb:65:6b:0a:93:cc:46:db:df:98:d5:b0:43:
57:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:8C:0B:35:0D:11:FC:87:9D:FA:FF:A6:5E:F5:07:FE:F7:FA:19:50
X509v3 Authority Key Identifier:
keyid:95:A9:04:AC:60:93:E1:E2:29:A0:74:C5:05:06:FF:EC:DA:01:0C:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lakErGCT4eIpoHTFBQb_7NoBDM8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/48f99e-1a10-45c3-aa34-4cd15cbc501b/1/EYwLNQ0R_Ied-v-mXvUH_vf6GVA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/48f99e-1a10-45c3-aa34-4cd15cbc501b/1/lakErGCT4eIpoHTFBQb_7NoBDM8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.210.0.0/23
Signature Algorithm: sha256WithRSAEncryption
0b:59:66:80:78:a1:1c:e3:90:aa:a1:60:91:ab:ec:3d:e4:ab:
12:62:de:7c:eb:90:62:94:1b:d8:88:8b:63:1b:fc:cc:7f:b3:
5b:1c:89:3d:74:17:e1:b5:37:27:a8:48:23:82:ea:76:90:bc:
f0:03:1e:91:7a:29:83:c2:8b:67:8f:40:94:82:28:07:f8:be:
d2:86:49:f6:69:7b:71:d6:fe:a8:2e:7d:9c:31:81:ff:8e:62:
26:94:87:97:1d:e8:07:3e:db:59:f4:a9:95:ca:6b:cc:49:71:
ad:91:b3:c8:2c:9f:84:2c:1c:25:72:08:c3:dc:02:fb:81:8d:
c5:c6:73:b1:6a:41:67:d6:14:5e:5a:5c:50:4d:67:1b:58:12:
82:40:bc:f3:f3:d1:2a:c2:e4:e2:d9:0e:d2:67:f0:3d:0f:a6:
46:14:af:55:15:be:b5:ee:4a:f8:bc:81:b4:2c:69:fe:d3:02:
8d:93:04:de:41:86:b1:de:00:e5:f6:ea:94:98:41:5a:f5:cd:
ad:85:a0:22:d3:12:14:9c:db:f4:92:7c:be:4a:19:8d:43:21:
0a:6c:23:3d:af:eb:1b:a9:ae:61:40:78:51:15:38:1c:72:43:
c6:29:01:98:5f:30:f4:84:62:56:11:1f:58:65:7b:1d:f3:66:
48:08:47:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:38:22 2025 by rpki-client