Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/cb9d7f-afdf-4487-9e08-bd5043c0d1fb/1/X51JyRQsbiO-dRzpiM0BYac4vr0.roa
File: X51JyRQsbiO-dRzpiM0BYac4vr0.roa (raw, json)
Hash identifier: F7UTgwSfHWU8Fp+YRwGuybMagFBxqwkgosOGLinxRxs=
Subject key identifier: 5F:9D:49:C9:14:2C:6E:23:BE:75:1C:E9:88:CD:01:61:A7:38:BE:BD
Certificate issuer: /CN=4b01b0851b7f89ea4bb132a7f5395b9d2aca1c02
Certificate serial: 01941FFA5D12550F59DEEDF3F2D8AD7A4ADF
Authority key identifier: 4B:01:B0:85:1B:7F:89:EA:4B:B1:32:A7:F5:39:5B:9D:2A:CA:1C:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SwGwhRt_iepLsTKn9TlbnSrKHAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/cb9d7f-afdf-4487-9e08-bd5043c0d1fb/1/X51JyRQsbiO-dRzpiM0BYac4vr0.roa
Signing time: Wed 01 Jan 2025 03:48:09 +0000
ROA not before: Wed 01 Jan 2025 03:48:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12400
IP address blocks: 195.225.46.0/24 maxlen: 24
195.225.47.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:5d:12:55:0f:59:de:ed:f3:f2:d8:ad:7a:4a:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b01b0851b7f89ea4bb132a7f5395b9d2aca1c02
Validity
Not Before: Jan 1 03:48:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5f9d49c9142c6e23be751ce988cd0161a738bebd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:07:cf:8b:51:a6:6a:5b:43:77:75:83:13:80:
0e:ff:91:45:b0:26:84:ca:9d:12:10:24:ec:ca:1a:
b3:a8:77:00:01:a6:42:1c:b4:1a:34:d3:61:43:48:
44:d7:20:b3:05:0d:53:22:26:f0:f0:8c:c1:0c:3d:
57:e0:70:20:db:4e:c4:bb:fd:72:f9:fa:c1:fd:19:
7a:6c:a8:a2:74:59:a2:7d:ae:7e:39:12:8d:0a:1c:
0c:fe:c1:3e:0e:51:39:f0:42:c4:19:1f:6f:3f:91:
91:80:45:cf:ba:7f:92:70:ca:46:3a:b0:05:8d:14:
94:52:66:0d:ce:e9:87:80:c7:a3:a6:31:e9:b2:8b:
9a:ba:23:7f:1c:4d:32:8b:66:12:ca:3e:13:2a:10:
e2:e7:fb:f8:35:1b:fa:90:6f:ef:ea:42:29:f8:85:
c7:0f:3f:db:04:df:f0:a4:06:cf:71:47:7f:ab:d6:
62:48:a8:fb:04:f1:d1:cf:f9:95:f4:0a:7f:46:b1:
f9:13:7d:65:ef:34:ea:17:7b:aa:3c:96:80:31:b9:
3f:e5:7f:8d:bb:5d:40:50:34:e4:ea:f2:56:a3:b8:
61:d1:84:dc:49:8b:33:0b:ed:24:df:eb:22:36:d9:
f4:de:38:2b:0a:d2:88:77:22:e5:7d:81:84:30:5a:
0a:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:9D:49:C9:14:2C:6E:23:BE:75:1C:E9:88:CD:01:61:A7:38:BE:BD
X509v3 Authority Key Identifier:
keyid:4B:01:B0:85:1B:7F:89:EA:4B:B1:32:A7:F5:39:5B:9D:2A:CA:1C:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SwGwhRt_iepLsTKn9TlbnSrKHAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/cb9d7f-afdf-4487-9e08-bd5043c0d1fb/1/X51JyRQsbiO-dRzpiM0BYac4vr0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/cb9d7f-afdf-4487-9e08-bd5043c0d1fb/1/SwGwhRt_iepLsTKn9TlbnSrKHAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.225.46.0/23
Signature Algorithm: sha256WithRSAEncryption
ac:92:80:c7:7c:90:63:7d:c3:86:f7:71:aa:ce:d7:96:b8:f6:
2f:cc:b9:79:31:cd:d6:81:e9:e7:c7:c6:29:ac:53:36:69:99:
8b:d8:36:bd:2d:83:9a:af:28:80:f0:9e:13:57:f0:86:49:06:
2c:aa:ca:8e:65:ba:c6:01:cd:84:10:c8:45:0b:af:55:19:a2:
b0:ba:bd:f7:c4:a8:bf:52:30:c9:ad:77:92:a0:e5:07:60:47:
0d:5d:0d:3f:3e:bf:d1:4f:07:3d:3e:62:e3:63:82:78:52:0a:
9f:99:18:ab:8f:42:28:0c:67:dd:c6:3c:97:75:ae:8f:4e:9e:
e9:6c:27:2e:c0:e3:3a:01:5f:6f:be:5a:55:b1:66:d1:34:18:
5d:c0:da:aa:c1:63:77:ff:40:cf:30:0b:36:a6:c0:11:db:57:
a5:08:9f:10:79:c2:92:8a:f0:49:2b:93:d0:74:3d:1e:fb:4d:
4e:76:4a:9e:0a:dd:43:6e:34:db:96:63:51:00:8a:28:8e:5b:
2c:1a:98:35:15:54:52:1d:bb:56:f5:89:a5:8f:9e:72:3f:44:
fc:63:dd:59:62:c2:fe:ea:00:c0:5d:67:5b:b1:4e:24:42:66:
a4:0a:84:12:1c:75:fb:1d:60:be:a7:55:34:0b:a5:9f:75:5d:
6f:5c:98:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:22:08 2025 by rpki-client