Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/9398b0-2fbb-4bd3-b9bc-1e89f9695d1b/1/_kct8kIbVboNtXmwY3sBZtxcNtM.roa
File: _kct8kIbVboNtXmwY3sBZtxcNtM.roa (raw, json)
Hash identifier: T6JpWQH7nutNbYZnSGugyuq7ObfBwtPlbYrmzm3m20w=
Subject key identifier: FE:47:2D:F2:42:1B:55:BA:0D:B5:79:B0:63:7B:01:66:DC:5C:36:D3
Certificate issuer: /CN=54041941b1450d6b95b58ca3f077ce208dfdfb4b
Certificate serial: 019427B54D14C4EE6A54924C00C7916401DD
Authority key identifier: 54:04:19:41:B1:45:0D:6B:95:B5:8C:A3:F0:77:CE:20:8D:FD:FB:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VAQZQbFFDWuVtYyj8HfOII39-0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/9398b0-2fbb-4bd3-b9bc-1e89f9695d1b/1/_kct8kIbVboNtXmwY3sBZtxcNtM.roa
Signing time: Thu 02 Jan 2025 15:49:40 +0000
ROA not before: Thu 02 Jan 2025 15:49:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20853
IP address blocks: 195.20.115.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:4d:14:c4:ee:6a:54:92:4c:00:c7:91:64:01:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54041941b1450d6b95b58ca3f077ce208dfdfb4b
Validity
Not Before: Jan 2 15:49:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fe472df2421b55ba0db579b0637b0166dc5c36d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ee:01:71:6e:8f:9a:43:76:bb:ef:31:f8:5b:
47:3a:89:21:44:c5:2f:19:4f:20:d7:cd:a1:eb:57:
50:39:93:c9:9b:d2:df:2b:aa:de:39:99:42:6d:fb:
c4:25:d0:3c:17:75:b3:91:cc:59:b5:b8:88:d0:a6:
95:07:b8:49:43:27:d1:6e:cf:7d:86:16:8a:a5:2b:
ad:4f:be:4d:8a:bc:98:4d:3a:ca:d8:fc:4c:81:21:
08:bc:7b:83:04:7c:26:0b:ec:31:5a:25:bb:24:07:
a0:c1:bd:f6:f3:76:8d:8b:04:57:77:2d:94:ba:7f:
cd:fd:bf:e9:9a:ff:42:9d:63:4c:45:bb:7b:5b:91:
a8:cb:46:b1:98:69:3a:6e:06:4e:df:7e:89:fd:42:
41:59:60:4f:8a:26:11:13:52:33:54:9b:ef:36:a4:
9b:9d:85:a7:5d:be:24:ca:95:35:ea:b0:75:45:7e:
b5:4a:60:8c:2e:ce:07:3d:bd:10:17:6e:eb:97:82:
fa:d3:06:d5:c2:e3:1b:5f:b6:2d:fa:94:2d:0c:22:
f0:0f:e9:ae:f0:f7:53:a1:3f:8a:89:b9:5b:41:65:
7f:b8:0c:2a:15:cf:01:9e:3d:35:80:dd:94:68:49:
6a:fb:83:e7:9c:ae:f5:7f:be:7d:42:3b:0e:d1:f4:
c7:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:47:2D:F2:42:1B:55:BA:0D:B5:79:B0:63:7B:01:66:DC:5C:36:D3
X509v3 Authority Key Identifier:
keyid:54:04:19:41:B1:45:0D:6B:95:B5:8C:A3:F0:77:CE:20:8D:FD:FB:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VAQZQbFFDWuVtYyj8HfOII39-0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/9398b0-2fbb-4bd3-b9bc-1e89f9695d1b/1/_kct8kIbVboNtXmwY3sBZtxcNtM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/9398b0-2fbb-4bd3-b9bc-1e89f9695d1b/1/VAQZQbFFDWuVtYyj8HfOII39-0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.20.115.0/24
Signature Algorithm: sha256WithRSAEncryption
76:02:5e:82:76:ba:2e:22:9f:cb:43:d7:fd:df:7c:e1:c4:ef:
48:58:bd:dd:80:0d:89:bc:8c:8e:dd:de:64:8a:5f:98:5e:1d:
4b:e6:31:b6:38:b3:dd:8b:24:74:65:5d:02:69:e1:73:7e:33:
5b:48:1a:3d:4d:33:0c:8e:dc:a1:67:cd:4b:99:e1:35:76:83:
a9:d5:64:02:e9:52:47:51:75:6e:7f:f1:ba:cb:a6:68:ce:f5:
2a:20:be:c1:ff:f1:5a:8b:c9:ee:75:85:ad:d1:1a:38:68:9c:
11:9d:41:bc:a2:ac:e2:46:c9:af:f0:f9:2f:93:c0:97:6d:5d:
29:52:8b:ec:b8:63:d3:cd:44:6f:e8:a1:91:6c:41:e1:a8:94:
05:2a:89:79:d2:5f:88:19:49:f4:cc:4a:53:62:cf:3d:4c:25:
c7:5d:94:2a:27:66:82:af:88:de:47:5c:da:59:1e:fc:52:26:
81:81:7a:e9:9d:c4:10:3c:50:80:a1:94:e6:06:c6:2b:37:91:
4e:b3:bd:83:07:80:9c:2b:9b:d5:65:56:b5:1e:97:c6:48:1e:
3c:8f:73:5a:4b:f2:30:3e:06:95:5c:2d:e6:89:b3:4d:b2:b8:
28:4d:68:7b:80:21:95:01:5f:7f:52:03:4f:13:32:70:02:69:
f9:01:e1:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 03:45:47 2025 by rpki-client