Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/faea65-90b4-46db-beef-84b473b9ebcd/1/8Uz8OUotVKCm5p8Tq2H7fr4Yq2A.roa
File: 8Uz8OUotVKCm5p8Tq2H7fr4Yq2A.roa (raw, json)
Hash identifier: CkLP+Za6tFv9nsYDrtlhZxFf/stXtZj73eh6qoJ8h4o=
Subject key identifier: F1:4C:FC:39:4A:2D:54:A0:A6:E6:9F:13:AB:61:FB:7E:BE:18:AB:60
Certificate issuer: /CN=ab8520ec83e30eb7938b8002f470f0d1c505c451
Certificate serial: 018CC3B723380913DC3FD31653420FBF917F
Authority key identifier: AB:85:20:EC:83:E3:0E:B7:93:8B:80:02:F4:70:F0:D1:C5:05:C4:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q4Ug7IPjDreTi4AC9HDw0cUFxFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/faea65-90b4-46db-beef-84b473b9ebcd/1/8Uz8OUotVKCm5p8Tq2H7fr4Yq2A.roa
Signing time: Mon 01 Jan 2024 06:30:08 +0000
ROA not before: Mon 01 Jan 2024 06:30:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49590
IP address blocks: 195.95.161.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:23:38:09:13:dc:3f:d3:16:53:42:0f:bf:91:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab8520ec83e30eb7938b8002f470f0d1c505c451
Validity
Not Before: Jan 1 06:30:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f14cfc394a2d54a0a6e69f13ab61fb7ebe18ab60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:8b:0d:e8:4d:b9:aa:11:cf:35:6c:b5:c6:f9:
06:b6:05:41:9e:02:a5:e3:76:54:d2:12:84:15:38:
6b:3f:ea:f3:27:7e:e4:66:59:7f:2b:1e:2a:a9:04:
3b:cf:c2:00:e7:69:28:6d:c5:46:69:52:bc:0c:bd:
f7:19:57:1f:e0:12:10:44:f7:c8:e1:1b:51:53:e6:
ef:9a:fe:69:03:0c:05:78:fc:97:5a:ef:02:97:41:
86:41:5d:47:b7:9b:fd:e1:77:ed:ff:30:22:a1:8b:
31:19:96:c1:f1:bb:d8:b4:64:c7:79:e2:0c:fa:6c:
8d:50:7b:23:d5:f6:f2:03:17:ee:90:90:80:cd:47:
f5:1f:ae:db:11:52:4f:1c:43:05:fa:bb:70:e4:d2:
c9:c4:a8:ce:e4:c9:54:3a:b6:01:f2:80:7d:73:48:
5f:c5:16:67:20:d5:66:6b:33:c5:2e:55:1e:50:a8:
77:b2:95:b0:a3:c8:eb:01:78:f3:0f:ec:b6:2b:72:
be:03:d7:61:18:e8:2e:ad:90:d1:88:04:91:b1:16:
a7:78:d9:a8:ac:58:3f:a3:47:43:94:03:fe:f5:50:
7d:4b:10:70:1d:60:f0:80:a3:86:6c:9d:96:59:19:
d0:63:7e:43:be:3b:f1:af:dd:9f:54:a9:e3:03:59:
76:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:4C:FC:39:4A:2D:54:A0:A6:E6:9F:13:AB:61:FB:7E:BE:18:AB:60
X509v3 Authority Key Identifier:
keyid:AB:85:20:EC:83:E3:0E:B7:93:8B:80:02:F4:70:F0:D1:C5:05:C4:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q4Ug7IPjDreTi4AC9HDw0cUFxFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/faea65-90b4-46db-beef-84b473b9ebcd/1/8Uz8OUotVKCm5p8Tq2H7fr4Yq2A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/faea65-90b4-46db-beef-84b473b9ebcd/1/q4Ug7IPjDreTi4AC9HDw0cUFxFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.95.161.0/24
Signature Algorithm: sha256WithRSAEncryption
55:37:63:21:ce:06:ac:b4:fe:44:63:3a:6d:20:95:f7:ef:62:
12:51:e3:22:76:9a:09:71:8e:38:88:38:e0:15:d6:b4:5c:39:
69:53:b5:f9:fe:c3:e1:2e:0a:d9:79:23:22:c5:5e:dc:fd:cb:
6e:c0:d8:a0:02:da:76:02:ac:95:19:9d:bf:6e:fa:4f:5c:b5:
33:09:21:7b:81:be:05:57:06:cf:da:97:5b:9e:7e:a5:eb:0c:
68:34:01:88:24:86:00:fb:93:2c:42:5b:41:8c:c4:d0:3a:96:
ae:8c:87:d1:f6:0c:8a:25:f2:2a:f3:33:5b:15:06:42:d9:e2:
d3:ba:80:38:03:6f:20:90:c3:14:4b:f9:3b:ac:23:37:a7:46:
c0:3b:71:43:21:68:c8:57:8a:d7:7d:cf:d3:21:69:92:1a:d2:
5b:b6:9a:ad:86:b3:da:39:16:2a:0b:6d:03:83:d4:d4:06:48:
cb:04:eb:ed:83:a5:f6:cd:6a:2f:53:62:81:3e:73:b7:67:85:
cb:8c:f1:d3:e3:3b:d1:05:f1:d6:2c:37:55:f1:d0:44:16:b5:
74:f4:aa:04:b1:61:6d:b1:04:19:fd:4b:3d:b1:8b:9c:68:d4:
ba:ff:dd:54:9e:72:26:b1:7e:6e:a3:b7:fc:61:e0:58:35:d9:
91:51:a3:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:20:04 2025 by rpki-client