Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/I73UM1nCBWQnJ20aXL_6NYA4pj8.roa
File: I73UM1nCBWQnJ20aXL_6NYA4pj8.roa (raw, json)
Hash identifier: L68T0N8qj7ef7ryDCvyLKmdACJuuoiHt4h0eR0KlZX4=
Subject key identifier: 23:BD:D4:33:59:C2:05:64:27:27:6D:1A:5C:BF:FA:35:80:38:A6:3F
Certificate issuer: /CN=eac2c1afd4bdec980506fa07df7c8662d554fa46
Certificate serial: 01941F8C615E152158F22AE48EDFC09B8D45
Authority key identifier: EA:C2:C1:AF:D4:BD:EC:98:05:06:FA:07:DF:7C:86:62:D5:54:FA:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6sLBr9S97JgFBvoH33yGYtVU-kY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/I73UM1nCBWQnJ20aXL_6NYA4pj8.roa
Signing time: Wed 01 Jan 2025 01:48:01 +0000
ROA not before: Wed 01 Jan 2025 01:48:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58061
IP address blocks: 195.14.105.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:61:5e:15:21:58:f2:2a:e4:8e:df:c0:9b:8d:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eac2c1afd4bdec980506fa07df7c8662d554fa46
Validity
Not Before: Jan 1 01:48:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=23bdd43359c2056427276d1a5cbffa358038a63f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:6a:a4:b3:9c:8e:42:5b:26:45:72:d7:32:21:
5b:d1:c0:d9:45:7c:1d:fb:a1:6e:41:64:60:b4:bf:
f8:af:e7:5c:78:3b:5f:75:ca:d1:2b:9c:82:ba:fc:
6b:4e:cc:5c:2b:8b:1b:e2:11:c7:e1:50:e5:fd:7a:
ba:38:f1:c0:ba:36:8c:cb:c9:f9:de:f8:a3:d5:c5:
62:fa:f5:26:cc:14:77:4a:93:72:81:4f:6a:12:cb:
4d:cb:c9:d0:3a:37:87:d4:81:29:fb:dd:4a:a6:6f:
28:a6:f1:29:f7:99:21:65:4c:74:8d:76:ed:40:34:
fb:fd:9d:0d:54:d7:92:90:5d:41:c6:be:d4:1a:ff:
14:f9:3d:8f:0b:b9:54:86:c8:8f:ba:c8:da:22:12:
b0:38:cd:d1:42:4c:7c:d0:18:7b:71:a9:50:4b:38:
21:27:83:c4:59:13:38:25:f7:4d:58:8c:be:a0:2a:
34:ff:a4:e6:bc:21:be:da:a4:b8:19:5c:26:bf:d7:
f1:20:05:0b:16:d0:44:07:73:b9:ca:cf:1c:71:5a:
59:29:fc:51:27:b6:1e:ea:d1:a0:13:e2:d5:3c:6c:
da:1e:c0:69:22:68:b9:5d:f2:b5:c4:91:aa:7a:35:
93:66:ab:cf:e6:58:05:84:11:9c:b2:72:e7:72:d7:
3a:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:BD:D4:33:59:C2:05:64:27:27:6D:1A:5C:BF:FA:35:80:38:A6:3F
X509v3 Authority Key Identifier:
keyid:EA:C2:C1:AF:D4:BD:EC:98:05:06:FA:07:DF:7C:86:62:D5:54:FA:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6sLBr9S97JgFBvoH33yGYtVU-kY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/I73UM1nCBWQnJ20aXL_6NYA4pj8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/6sLBr9S97JgFBvoH33yGYtVU-kY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.14.105.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:83:63:6a:0c:0b:3f:e2:e3:51:ff:44:d7:b5:9a:ff:17:dd:
45:18:cd:be:89:4b:d7:4d:cc:d2:f1:6c:35:34:a5:46:e8:c6:
3a:3d:f9:3a:6c:84:71:bf:8f:9f:cc:df:9f:11:76:e1:69:37:
f8:c8:25:e9:bd:e8:45:05:10:30:1a:a4:c4:7d:de:28:db:29:
19:70:7a:b0:72:c9:a0:1f:c9:27:6c:a9:20:5d:51:60:14:0d:
e2:27:b7:8a:39:f6:58:0f:f1:96:c5:2f:19:00:5a:31:ea:e1:
a4:d8:41:2a:1a:e6:ec:d3:ad:74:9d:68:51:93:0b:5e:5e:0a:
5f:1b:41:cd:77:41:60:ed:91:a9:4b:af:b1:25:33:4c:ac:bd:
e8:cd:c4:06:31:20:5f:21:b2:6d:55:62:6c:c5:7c:83:34:25:
02:d3:aa:c3:58:5d:c9:ef:ac:1d:a5:98:9a:ca:09:e4:9c:8f:
2d:27:dd:d1:e3:3c:3f:02:2d:45:0c:3d:f6:13:69:b1:0b:44:
04:92:5a:d6:fc:d6:e1:a9:1b:ec:0d:1c:05:75:b2:b5:fe:a0:
b8:6e:d1:8a:fe:7d:18:21:4c:1f:ad:f9:f2:44:91:6a:96:a8:
49:fb:73:fc:6d:7c:f6:c9:ea:37:58:d0:fb:3c:5e:68:59:8f:
79:ce:d3:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:15:01 2025 by rpki-client