Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/rXpni-4ALcocOhcZ1QqAO1mIJGA.roa
File: rXpni-4ALcocOhcZ1QqAO1mIJGA.roa (raw, json)
Hash identifier: FRAHJFSzOsHBC4a0opWl+1Gehcqt2UuiLhry14uVIHQ=
Subject key identifier: AD:7A:67:8B:EE:00:2D:CA:1C:3A:17:19:D5:0A:80:3B:59:88:24:60
Certificate issuer: /CN=307f5fe2740a2b6de4c3709d2964115b3c967da1
Certificate serial: 019424456278B0D3248CA296D0172847E3B2
Authority key identifier: 30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/rXpni-4ALcocOhcZ1QqAO1mIJGA.roa
Signing time: Wed 01 Jan 2025 23:48:34 +0000
ROA not before: Wed 01 Jan 2025 23:48:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31627
IP address blocks: 195.76.9.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:62:78:b0:d3:24:8c:a2:96:d0:17:28:47:e3:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=307f5fe2740a2b6de4c3709d2964115b3c967da1
Validity
Not Before: Jan 1 23:48:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ad7a678bee002dca1c3a1719d50a803b59882460
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:28:45:40:fe:7d:63:bd:8f:3e:51:aa:f5:fc:
45:85:70:c2:6a:c7:68:1a:44:85:2a:49:a8:e5:01:
fe:32:e8:98:7f:31:47:96:5d:77:74:c0:e6:b9:77:
9f:09:83:4e:51:f3:45:db:b6:d3:8f:69:b3:00:2f:
02:09:65:1b:30:fc:c0:c6:5c:0d:57:50:f6:e7:8c:
b9:f5:7f:87:fd:81:69:69:00:0c:bd:3b:9c:4a:72:
b2:87:36:12:50:1f:f5:9d:f4:05:4f:34:91:4b:2b:
0e:94:15:bd:f4:a9:3f:e5:6b:80:34:eb:ac:a3:d2:
32:c2:6e:84:4d:1e:5c:b4:b3:06:0a:25:a7:98:86:
b5:43:06:47:fe:b4:c5:b0:18:36:bb:53:d9:e7:99:
0e:b1:7e:cc:3c:f0:72:99:3c:3b:06:89:39:07:20:
4f:5d:92:e3:68:5e:44:07:46:27:a8:f6:42:5f:80:
7f:62:5a:ad:83:74:8c:03:48:f7:80:86:48:de:5b:
fd:70:3a:31:9a:89:0c:0f:9a:e9:ec:d0:b7:e2:d3:
a3:93:25:e0:d1:9c:60:1c:e6:66:f4:e2:ca:7a:d8:
be:fc:0d:f4:7c:40:a6:f2:88:b2:7f:3a:3a:64:87:
88:12:f7:72:f3:85:ba:63:9d:ae:9b:f4:87:52:f7:
79:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:7A:67:8B:EE:00:2D:CA:1C:3A:17:19:D5:0A:80:3B:59:88:24:60
X509v3 Authority Key Identifier:
keyid:30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/rXpni-4ALcocOhcZ1QqAO1mIJGA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.76.9.0/24
Signature Algorithm: sha256WithRSAEncryption
d6:4b:0c:9e:8a:d4:9d:4b:b4:b8:a5:42:62:39:e3:8b:9e:42:
63:da:ba:0c:39:c7:3f:6f:58:2f:48:d3:3f:78:00:c4:dd:73:
ee:22:0e:ff:9a:98:b6:37:8b:9f:72:3d:d5:12:63:d7:57:fd:
06:ec:35:f3:a8:1f:44:ec:c3:e3:c3:0a:c8:d5:23:a2:db:25:
97:8c:77:65:75:8a:93:01:9d:8f:13:cd:aa:4b:95:25:63:43:
98:46:66:16:c2:03:21:ee:0d:74:35:8f:4c:07:66:26:c6:43:
d4:6b:71:20:23:bd:d8:9d:cc:f9:0f:a5:8b:b5:40:d6:0e:1a:
5c:48:31:45:45:79:f3:11:a2:59:4a:91:c5:08:ac:93:e3:a4:
f7:5e:55:86:ba:8a:79:43:16:c3:83:fd:74:8a:38:81:ca:9a:
21:77:26:77:9e:ff:75:c7:10:65:f9:fc:6d:2b:d4:7a:e1:c8:
51:eb:07:c1:ab:98:c3:b0:14:76:0f:8e:f1:02:e4:74:39:05:
60:26:03:58:c4:81:af:fb:7e:f2:16:89:87:49:5b:3f:31:ef:
73:90:71:c6:ff:d3:a7:fc:9c:75:77:7f:22:ba:21:ed:cb:08:
a3:9b:cf:99:95:b5:b6:26:f5:cd:72:cb:da:a7:f0:7b:35:cf:
d4:17:2e:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 14:47:46 2025 by rpki-client