Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/0ec7a7-0abc-4ff9-9958-5867ca77897e/1/evpxyC_xQr6-9_i5vhF3SSD60QY.roa
File: evpxyC_xQr6-9_i5vhF3SSD60QY.roa (raw, json)
Hash identifier: F+Lkz2iLknBGekmgWZevszL+qAh6hnFUDMady9RqMNg=
Subject key identifier: 7A:FA:71:C8:2F:F1:42:BE:BE:F7:F8:B9:BE:11:77:49:20:FA:D1:06
Certificate issuer: /CN=ab6da834b32cb12c4bdae33f672f348d983f3176
Certificate serial: 01941FFA7DA0788BD38FDCCE1446BD071D0E
Authority key identifier: AB:6D:A8:34:B3:2C:B1:2C:4B:DA:E3:3F:67:2F:34:8D:98:3F:31:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q22oNLMssSxL2uM_Zy80jZg_MXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/0ec7a7-0abc-4ff9-9958-5867ca77897e/1/evpxyC_xQr6-9_i5vhF3SSD60QY.roa
Signing time: Wed 01 Jan 2025 03:48:17 +0000
ROA not before: Wed 01 Jan 2025 03:48:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 28967
IP address blocks: 195.39.224.0/24 maxlen: 24
195.39.225.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:7d:a0:78:8b:d3:8f:dc:ce:14:46:bd:07:1d:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab6da834b32cb12c4bdae33f672f348d983f3176
Validity
Not Before: Jan 1 03:48:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7afa71c82ff142bebef7f8b9be11774920fad106
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:cd:a1:05:1a:ab:4e:15:a8:92:4b:f2:be:40:
d4:18:af:41:25:f6:4b:d6:09:d3:35:23:c7:66:ab:
72:4a:a1:2b:be:29:a4:c3:d5:e5:bc:ee:6b:db:52:
34:48:38:99:66:7a:eb:bd:63:2c:a3:a2:97:a3:bc:
71:75:18:d8:66:1c:3f:94:f9:d4:66:09:5a:72:97:
90:2f:83:d1:e4:35:d8:a0:92:e1:55:c9:8d:ba:52:
49:39:d1:89:72:e4:94:08:fa:58:57:d7:50:7c:5e:
1f:0b:d4:78:3a:0a:44:37:68:0a:2d:82:da:e5:1a:
ad:3f:ba:11:ee:f1:88:91:a1:05:39:c5:98:64:4b:
e8:62:11:76:8b:9d:da:9a:ec:b4:77:23:2c:42:d0:
47:ab:35:3b:9d:4b:39:c0:98:f2:5f:84:e5:d4:71:
5c:cb:5a:b5:8a:27:96:c6:a3:70:a6:69:4c:29:9b:
eb:6e:31:c5:ef:c8:3c:ef:32:93:ea:4f:b7:7b:30:
f5:e8:10:4f:91:39:49:8e:f3:83:69:f3:1b:41:96:
e1:4e:07:20:96:fd:ee:59:05:8b:2e:4f:70:b2:71:
08:0e:1c:d0:c9:c9:2e:ba:57:f7:4f:db:7c:34:35:
3b:02:16:03:10:9e:2d:65:cc:26:38:da:5d:22:f3:
91:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:FA:71:C8:2F:F1:42:BE:BE:F7:F8:B9:BE:11:77:49:20:FA:D1:06
X509v3 Authority Key Identifier:
keyid:AB:6D:A8:34:B3:2C:B1:2C:4B:DA:E3:3F:67:2F:34:8D:98:3F:31:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q22oNLMssSxL2uM_Zy80jZg_MXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0ec7a7-0abc-4ff9-9958-5867ca77897e/1/evpxyC_xQr6-9_i5vhF3SSD60QY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0ec7a7-0abc-4ff9-9958-5867ca77897e/1/q22oNLMssSxL2uM_Zy80jZg_MXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.39.224.0/23
Signature Algorithm: sha256WithRSAEncryption
24:7c:59:f4:c5:1e:59:f8:04:47:04:7a:16:8c:6b:2e:53:70:
02:c0:49:c1:1e:35:34:2f:af:77:25:90:44:54:d5:7f:38:bd:
56:49:64:3d:3f:eb:c7:e2:f2:09:b0:f3:45:1a:fd:ee:8d:73:
4a:4a:b6:68:da:37:fc:4f:d1:4b:40:99:a1:c6:99:ec:50:ed:
b2:1f:77:bc:67:80:d3:09:29:59:09:dd:e0:d0:23:cc:41:74:
6e:c5:cb:c5:55:bc:dc:2e:b6:7b:ac:08:93:45:eb:df:26:03:
cb:54:02:1d:25:ac:bd:15:15:eb:f0:ed:f9:64:17:84:2e:93:
a8:72:19:e6:84:64:2d:ec:96:0b:fd:30:72:49:31:08:87:99:
14:7b:80:78:a6:6c:c1:40:48:08:77:e2:a0:6a:b2:b2:34:21:
b7:f0:ea:3c:ca:4b:15:2a:7d:58:c5:07:87:59:5c:26:44:cc:
f8:43:9a:38:af:eb:ab:90:89:e6:99:7b:c4:4e:5c:20:90:19:
6b:f7:ea:7f:ad:55:7a:99:8b:ec:1d:2f:fb:2e:b9:bd:e1:50:
fa:12:55:d7:ff:d9:cf:cc:c2:cd:ec:34:f2:cc:c3:da:5c:ed:
a7:01:7d:70:61:e5:1e:ea:79:6c:d3:43:f3:a5:6d:d6:5f:99:
db:35:b1:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:27:08 2025 by rpki-client