Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/16d4b5-76bb-4324-9a86-705197507a59/1/5zfU3CLdzJ4_dnw1BhYJzGB5MAE.roa
File: 5zfU3CLdzJ4_dnw1BhYJzGB5MAE.roa (raw, json)
Hash identifier: FF7iz/Png0ollPk0Y1YxpFPUlPc6nBCym+9BzksDmfY=
Subject key identifier: E7:37:D4:DC:22:DD:CC:9E:3F:76:7C:35:06:16:09:CC:60:79:30:01
Certificate issuer: /CN=24b660a611980c68273139e32affb74b454a9d32
Certificate serial: 0194228DF5C03BB3812A960CDD0F661071C6
Authority key identifier: 24:B6:60:A6:11:98:0C:68:27:31:39:E3:2A:FF:B7:4B:45:4A:9D:32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JLZgphGYDGgnMTnjKv-3S0VKnTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/16d4b5-76bb-4324-9a86-705197507a59/1/5zfU3CLdzJ4_dnw1BhYJzGB5MAE.roa
Signing time: Wed 01 Jan 2025 15:48:36 +0000
ROA not before: Wed 01 Jan 2025 15:48:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59979
IP address blocks: 195.43.138.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:f5:c0:3b:b3:81:2a:96:0c:dd:0f:66:10:71:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24b660a611980c68273139e32affb74b454a9d32
Validity
Not Before: Jan 1 15:48:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e737d4dc22ddcc9e3f767c35061609cc60793001
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:70:f4:93:f4:9d:7c:d3:2e:5b:f5:d0:b2:68:
35:66:62:fc:7c:40:9e:bc:a2:f2:48:71:60:13:5e:
51:ee:ab:fb:97:97:e1:cb:16:00:3b:b9:ef:80:d6:
4d:4b:7a:35:bc:b7:22:c4:2e:9d:6d:3a:e7:b8:7f:
2c:6e:6e:80:1b:93:88:02:db:e6:f7:6f:8b:03:c2:
f4:e1:e5:31:ee:eb:27:ae:f9:2c:77:80:36:1c:98:
15:9b:74:41:b6:99:08:0c:ee:29:41:6c:1c:28:1c:
16:d7:ad:60:01:51:48:7b:0f:ff:ba:13:cb:f9:a3:
f1:aa:09:51:8c:e0:bc:15:d3:67:3c:b5:63:bf:21:
5f:1b:70:2a:fe:59:e8:f7:b2:dd:12:31:80:a4:31:
56:27:54:47:e3:a8:cb:0f:28:f8:ea:ec:d5:39:87:
46:da:27:b2:02:42:72:ff:d8:e6:fb:14:f2:43:6f:
fe:96:a1:f6:e6:93:c4:f6:c2:36:55:15:c3:a0:a0:
b0:25:7c:e7:a0:2e:ee:e0:2b:43:17:c3:93:56:7e:
5c:a6:6e:35:9c:86:ec:8d:8b:cd:90:83:23:50:39:
22:c8:ac:3c:c6:bd:2e:58:30:e5:cb:c2:82:f8:cf:
5f:ab:66:54:6a:4f:1b:ed:49:48:ab:e1:4c:61:a9:
f1:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:37:D4:DC:22:DD:CC:9E:3F:76:7C:35:06:16:09:CC:60:79:30:01
X509v3 Authority Key Identifier:
keyid:24:B6:60:A6:11:98:0C:68:27:31:39:E3:2A:FF:B7:4B:45:4A:9D:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JLZgphGYDGgnMTnjKv-3S0VKnTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/16d4b5-76bb-4324-9a86-705197507a59/1/5zfU3CLdzJ4_dnw1BhYJzGB5MAE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/16d4b5-76bb-4324-9a86-705197507a59/1/JLZgphGYDGgnMTnjKv-3S0VKnTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.43.138.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:03:a9:f2:d6:58:4c:3b:bf:30:98:b7:a0:03:d0:1d:1e:87:
8f:de:ef:0a:c3:4d:7e:e3:71:24:59:87:18:b9:9c:9f:0b:1d:
27:ee:af:68:1c:1f:5d:49:13:15:ec:be:22:6d:8e:75:13:63:
84:44:ce:8f:a5:ae:f6:bd:f6:b1:88:19:e9:93:ab:8f:20:11:
ab:67:a6:c8:76:0c:c0:3b:f9:e4:1c:25:44:4a:9a:8d:5b:d2:
f1:22:8a:ba:a0:14:9d:dc:dc:35:cc:58:fd:2e:f5:cc:53:f3:
49:ac:3e:55:12:5a:bc:70:b3:e5:c5:9a:6d:d7:c4:12:7b:96:
85:3d:14:e0:23:da:02:cd:dc:8f:a5:e2:0c:a3:10:44:2d:8f:
87:1d:62:4a:a2:dd:18:77:a1:ab:db:84:59:fb:43:c6:8c:25:
b9:f5:64:e7:81:a4:dc:0f:35:f8:1e:92:8f:d6:ec:3f:2f:b3:
ab:4e:4f:92:2e:6e:ad:8b:29:62:e7:b9:05:aa:e6:e6:89:7e:
10:a5:1e:b2:0b:8e:68:13:16:cd:8e:01:1d:c2:fc:2c:fc:a8:
0b:06:cf:e5:4d:35:50:3c:21:1c:5f:a8:c0:36:0a:7b:33:68:
91:d1:9c:24:c6:73:49:dc:c2:4c:8d:53:82:74:c4:a1:95:0e:
63:bf:80:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 16:14:21 2025 by rpki-client