Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/296a78-01e2-496d-ba59-2200b3cc57e6/1/mQpMWpHSW8mLXdF7JLFhG86dlgc.roa
File: mQpMWpHSW8mLXdF7JLFhG86dlgc.roa (raw, json)
Hash identifier: 80ueeGHyeWt9gBYHZJ2jneu4PvU2lVJeZTz6TyvX5pM=
Subject key identifier: 99:0A:4C:5A:91:D2:5B:C9:8B:5D:D1:7B:24:B1:61:1B:CE:9D:96:07
Certificate issuer: /CN=07f0ba59b1c76cf20dc4382e5a2854d7142c26ba
Certificate serial: 019567278BBEE2E08F6B7D5CEC6EBFF253B8
Authority key identifier: 07:F0:BA:59:B1:C7:6C:F2:0D:C4:38:2E:5A:28:54:D7:14:2C:26:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B_C6WbHHbPINxDguWihU1xQsJro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/296a78-01e2-496d-ba59-2200b3cc57e6/1/mQpMWpHSW8mLXdF7JLFhG86dlgc.roa
Signing time: Wed 05 Mar 2025 16:33:19 +0000
ROA not before: Wed 05 Mar 2025 16:33:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216176
IP address blocks: 195.246.195.0/24 maxlen: 24
2a14::/32 maxlen: 32
2a14:1::/48 maxlen: 48
2a14:7::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:67:27:8b:be:e2:e0:8f:6b:7d:5c:ec:6e:bf:f2:53:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07f0ba59b1c76cf20dc4382e5a2854d7142c26ba
Validity
Not Before: Mar 5 16:33:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=990a4c5a91d25bc98b5dd17b24b1611bce9d9607
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:62:8f:51:ad:b5:fd:0b:f4:6b:ff:08:74:1a:
9e:7c:ef:f4:7b:3c:bd:2d:d7:dc:be:1b:21:df:9f:
b1:8f:d8:fc:29:17:e2:5c:23:86:9a:4a:61:26:29:
0c:f3:33:39:fb:69:d0:96:bc:e8:82:f5:8e:cc:6f:
44:f2:a3:75:13:2d:17:a6:eb:0e:c7:9e:68:33:48:
c8:a6:09:b4:85:c4:78:09:0f:3a:82:ba:01:0d:bf:
d5:1e:9b:ef:1e:24:2e:4d:01:16:ce:2f:cc:77:79:
12:e2:a5:cb:a6:1f:99:c6:70:17:2d:26:c7:5c:af:
b3:3b:ea:84:61:d3:41:1f:79:26:bd:ed:93:cc:a1:
bf:23:ae:05:c8:4b:bc:cc:b3:f1:ff:3d:b7:09:28:
fe:5e:9d:70:88:a5:fa:69:52:38:5a:8a:90:22:f5:
56:e3:7a:63:81:bf:b5:9a:80:15:e2:d6:4f:0b:0e:
5e:b3:ad:82:42:71:5c:e1:59:ef:8b:ab:e4:a8:b1:
e6:fc:af:a8:46:c3:fd:b9:c3:a3:ac:84:dc:92:5a:
d3:8e:ff:b2:4b:d5:74:7d:cf:de:5b:f1:62:ee:37:
95:cc:0e:94:c3:93:ce:39:a4:18:ad:c7:b6:7c:1c:
74:77:86:52:7a:e3:cd:62:f5:fa:ae:ff:b0:1f:63:
7d:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:0A:4C:5A:91:D2:5B:C9:8B:5D:D1:7B:24:B1:61:1B:CE:9D:96:07
X509v3 Authority Key Identifier:
keyid:07:F0:BA:59:B1:C7:6C:F2:0D:C4:38:2E:5A:28:54:D7:14:2C:26:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B_C6WbHHbPINxDguWihU1xQsJro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/296a78-01e2-496d-ba59-2200b3cc57e6/1/mQpMWpHSW8mLXdF7JLFhG86dlgc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/296a78-01e2-496d-ba59-2200b3cc57e6/1/B_C6WbHHbPINxDguWihU1xQsJro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.246.195.0/24
IPv6:
2a14::-2a14:1:0:ffff:ffff:ffff:ffff:ffff
2a14:7::/32
Signature Algorithm: sha256WithRSAEncryption
75:f4:ce:46:3d:4e:3b:66:4a:48:6e:4e:43:8a:99:1c:3f:ae:
f9:ee:25:ce:af:61:18:a9:2d:ff:a4:cd:6a:71:63:ec:41:34:
eb:a4:3a:f5:6d:32:01:15:11:7a:58:6e:33:69:7e:8e:66:f1:
ac:88:7d:0f:96:9f:65:92:96:03:51:81:da:78:70:f6:de:8d:
53:fa:84:62:f2:7b:81:61:e1:e4:7d:fe:85:39:c3:1d:8e:5b:
2d:ca:49:72:50:4b:98:8a:e5:f2:cf:a1:96:f8:d6:3f:d7:9a:
7e:91:3a:c6:a6:26:69:76:4d:22:43:8c:11:87:b1:76:a1:40:
d9:63:fa:68:0a:aa:96:f6:fe:8e:bc:99:47:bf:64:d1:d0:51:
04:df:17:10:83:e1:4b:d5:4d:8c:76:b1:22:89:07:b5:e5:31:
79:85:df:38:15:a5:a8:86:01:87:7c:b2:e6:ab:92:79:5e:66:
ef:98:9d:7c:ca:dd:ca:eb:8d:88:56:aa:a6:7b:b7:c3:c5:6d:
d9:6f:17:67:67:0a:68:cb:40:05:1e:9f:0d:85:1d:1b:40:36:
7e:97:59:eb:52:74:c5:ee:5d:e9:33:59:61:7a:d0:a7:b4:c3:
06:7c:9a:54:cc:0f:b0:97:8b:56:7f:c1:6d:06:4e:36:6b:fc:
09:a6:98:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 14:49:27 2025 by rpki-client