Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/XZVtjWmGJy5TJN5gkclvuaDTx08.roa
File: XZVtjWmGJy5TJN5gkclvuaDTx08.roa (raw, json)
Hash identifier: +A3dF//QsJfJLVvgoQOwQfNBd3HuH3X5Enj0ICpyoDU=
Subject key identifier: 5D:95:6D:8D:69:86:27:2E:53:24:DE:60:91:C9:6F:B9:A0:D3:C7:4F
Certificate issuer: /CN=307f5fe2740a2b6de4c3709d2964115b3c967da1
Certificate serial: 019424456338F8D525D7AE71190FEAD70528
Authority key identifier: 30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/XZVtjWmGJy5TJN5gkclvuaDTx08.roa
Signing time: Wed 01 Jan 2025 23:48:34 +0000
ROA not before: Wed 01 Jan 2025 23:48:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44585
IP address blocks: 195.55.174.0/24 maxlen: 24
195.55.205.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:63:38:f8:d5:25:d7:ae:71:19:0f:ea:d7:05:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=307f5fe2740a2b6de4c3709d2964115b3c967da1
Validity
Not Before: Jan 1 23:48:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5d956d8d6986272e5324de6091c96fb9a0d3c74f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:1a:cb:38:ea:45:6e:23:3b:ba:d2:3e:ee:db:
2c:ab:5b:92:51:6a:6c:66:db:74:44:dd:1d:d3:6a:
2c:ee:42:16:c6:74:10:11:97:12:5e:1b:1b:e2:25:
8f:82:18:89:a8:11:e6:24:d7:20:b3:17:a6:17:e9:
9f:b1:6c:41:ed:1d:bc:72:49:83:c9:6f:c7:e2:44:
47:72:21:5c:97:26:48:21:1e:d5:80:12:c6:f0:57:
49:37:84:03:49:13:63:f5:d6:8d:01:ad:f6:e4:af:
79:c7:33:b5:c8:35:63:b7:c0:52:03:7d:69:40:86:
a8:37:09:25:df:b7:fa:8d:1f:8b:af:b7:27:99:77:
3d:2b:0a:27:9f:46:92:66:0d:e6:14:42:d4:ab:87:
e8:b3:51:e1:46:5e:35:c4:ee:c9:67:db:fd:2a:85:
2a:33:ca:36:bb:88:30:1d:7b:cb:c1:12:ee:2a:c9:
d6:9b:67:b6:35:b9:e0:9a:4b:fe:6c:55:98:13:7f:
69:92:0d:81:ef:72:c0:6a:49:48:c3:7d:11:7c:37:
b7:04:6d:47:12:a7:07:e0:33:8a:8e:7f:8c:a1:3e:
39:90:01:e7:90:db:7f:42:52:af:6b:53:33:11:46:
d8:51:14:83:62:15:82:bd:64:06:cd:59:5d:31:cd:
ba:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:95:6D:8D:69:86:27:2E:53:24:DE:60:91:C9:6F:B9:A0:D3:C7:4F
X509v3 Authority Key Identifier:
keyid:30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/XZVtjWmGJy5TJN5gkclvuaDTx08.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.55.174.0/24
195.55.205.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:67:67:40:06:9c:4f:71:41:97:bd:e2:cb:27:d3:55:87:eb:
03:5a:54:3b:ac:ae:b6:3c:56:d1:d1:d9:fc:6c:d8:05:e4:bd:
c8:71:4c:29:20:23:03:7f:38:57:d2:5f:b5:7b:a8:d6:a1:31:
66:b5:13:9b:9c:02:fe:57:df:cd:24:ed:06:ef:ad:c7:4a:fb:
8a:5c:1f:ca:e3:60:57:79:89:a5:26:08:e6:65:85:05:29:10:
f7:34:45:59:92:7a:d7:c0:26:a3:96:c1:12:76:d5:53:07:fb:
04:10:2a:3e:fc:12:3f:4c:a9:b3:5e:2d:50:a8:17:79:bb:15:
07:1b:5e:46:e4:d8:a9:c0:bd:cf:b9:33:71:ee:a3:18:ed:47:
2f:70:de:c9:b4:83:43:0e:8e:25:5e:c7:39:87:79:fc:2e:95:
81:14:a8:8c:f9:09:52:b4:4f:a4:14:86:bd:16:82:bf:6b:0d:
96:db:0c:fe:15:b7:fb:94:50:c6:37:05:03:c4:b9:4a:63:5a:
6c:9b:d5:71:0b:4c:4d:47:b5:92:8d:4c:13:11:0f:0e:74:5c:
8a:13:77:63:27:69:cb:99:3f:26:3d:d0:a0:3c:34:3c:d7:1a:
5d:2a:86:f2:85:80:54:0d:6d:2e:64:aa:e5:96:49:6f:0a:24:
d3:9b:d2:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 12:40:54 2025 by rpki-client