Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/KF8itGoY1xLI5AYmY-m8xyJCd-M.roa
File: KF8itGoY1xLI5AYmY-m8xyJCd-M.roa (raw, json)
Hash identifier: 3x8CCjFbHcFE+DJK2zQRD0PbpgAm7tcfoBUcCbuoWVU=
Subject key identifier: 28:5F:22:B4:6A:18:D7:12:C8:E4:06:26:63:E9:BC:C7:22:42:77:E3
Certificate issuer: /CN=307f5fe2740a2b6de4c3709d2964115b3c967da1
Certificate serial: 0194244564D9D62E736615469D0FC6031F24
Authority key identifier: 30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/KF8itGoY1xLI5AYmY-m8xyJCd-M.roa
Signing time: Wed 01 Jan 2025 23:48:34 +0000
ROA not before: Wed 01 Jan 2025 23:48:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57117
IP address blocks: 195.53.82.0/24 maxlen: 24
195.235.162.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:64:d9:d6:2e:73:66:15:46:9d:0f:c6:03:1f:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=307f5fe2740a2b6de4c3709d2964115b3c967da1
Validity
Not Before: Jan 1 23:48:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=285f22b46a18d712c8e4062663e9bcc7224277e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:59:88:43:02:38:2b:ae:6b:fb:ae:a7:1f:0d:
4e:09:03:ad:2d:69:6e:eb:7a:97:61:4b:b5:7a:55:
60:cf:81:30:73:f2:c9:88:e9:08:5f:77:26:25:c3:
71:37:17:5b:92:7b:27:a5:58:9c:81:de:d7:d2:f9:
6e:d4:d0:90:bd:b3:2f:a5:e6:37:dd:1b:3a:82:6d:
18:00:dd:7d:7a:cd:16:9f:05:73:26:86:2f:f8:d4:
20:27:2b:85:20:dd:76:88:cc:6e:ba:cb:dc:4d:2e:
84:0d:ae:fd:c0:8b:9b:79:c0:e2:3e:d2:e7:d3:07:
64:2d:0f:39:85:6e:87:3f:8c:9d:33:7f:a1:f0:f3:
7d:4d:9c:78:77:75:a6:dc:54:79:ea:2b:99:41:ad:
fa:2f:2f:8d:43:e7:32:af:52:11:b2:83:47:f2:55:
41:02:b4:53:44:bb:7a:e3:38:11:2e:fd:a8:4c:ee:
6f:55:d4:46:1b:9c:f0:72:63:53:b9:1b:74:c5:b9:
37:84:f2:e1:0c:c3:b2:ba:b9:16:ef:5b:30:a8:f3:
54:6a:1f:57:a5:8c:13:e7:5d:48:66:3e:d1:ba:1a:
d6:7c:c9:16:61:a0:5c:dc:8c:ec:eb:83:b2:f8:e9:
11:47:02:ed:49:39:44:5e:e9:86:a2:1c:ec:8c:40:
5e:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:5F:22:B4:6A:18:D7:12:C8:E4:06:26:63:E9:BC:C7:22:42:77:E3
X509v3 Authority Key Identifier:
keyid:30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/KF8itGoY1xLI5AYmY-m8xyJCd-M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.53.82.0/24
195.235.162.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:3f:29:e1:d3:f9:d2:19:83:dd:e6:b6:60:0e:45:f0:7d:a2:
31:8c:a3:94:3a:70:ad:94:92:c6:44:47:a7:dd:55:35:3e:dd:
e0:d2:55:a8:fd:99:a3:e2:45:8b:da:03:2c:32:e7:4f:d0:7c:
a2:f6:21:2b:24:d0:a3:2b:fa:1c:11:e1:7d:88:ee:d1:96:5f:
8d:c8:c1:26:43:8c:c1:b9:9c:c6:63:be:bc:16:fa:71:48:b4:
2d:f5:7b:32:7e:c2:34:f5:ff:c4:97:9e:7c:d8:0f:08:06:12:
34:ad:cb:0c:7f:8d:67:ef:fb:55:f3:93:d6:a6:1e:3d:94:34:
cd:34:7d:3a:11:57:67:ab:95:05:b0:74:f3:91:41:9e:45:a3:
d4:54:58:e1:56:1c:6c:a9:ee:08:0e:91:3a:9a:57:92:75:da:
64:4d:65:ae:9b:1f:d2:95:dd:09:5b:54:9c:f7:a7:41:b8:0d:
1a:58:5b:51:0e:c0:5e:3c:5f:69:fa:e8:4d:72:e0:b9:9a:5b:
d1:dc:e3:2b:68:0d:78:b1:ac:79:6a:11:69:68:64:33:ec:7c:
7e:35:b7:fc:92:4f:4f:9b:49:fa:c6:b7:d5:81:a1:96:3f:3b:
88:f7:1c:07:38:d7:58:7c:1c:35:5e:0b:02:45:13:98:f4:dc:
4e:0e:71:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 14:47:47 2025 by rpki-client