Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/3e5c96-7e95-4797-aa6a-a8978e3aae98/1/fKqCvV2H60_x150GJIr8SOki8EQ.roa
File: fKqCvV2H60_x150GJIr8SOki8EQ.roa (raw, json)
Hash identifier: 98Ec8/KhgOPbJ2tyXNrhxum2eZJOHwRc2ckcftcm0no=
Subject key identifier: 7C:AA:82:BD:5D:87:EB:4F:F1:D7:9D:06:24:8A:FC:48:E9:22:F0:44
Certificate issuer: /CN=4eeb86abd5374e553098209075b9afecabef333a
Certificate serial: 0194AD6A845B9A6F07EE3EB22E91161CD7E9
Authority key identifier: 4E:EB:86:AB:D5:37:4E:55:30:98:20:90:75:B9:AF:EC:AB:EF:33:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TuuGq9U3TlUwmCCQdbmv7KvvMzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/3e5c96-7e95-4797-aa6a-a8978e3aae98/1/fKqCvV2H60_x150GJIr8SOki8EQ.roa
Signing time: Tue 28 Jan 2025 14:57:06 +0000
ROA not before: Tue 28 Jan 2025 14:57:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13009
IP address blocks: 195.191.164.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ad:6a:84:5b:9a:6f:07:ee:3e:b2:2e:91:16:1c:d7:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4eeb86abd5374e553098209075b9afecabef333a
Validity
Not Before: Jan 28 14:57:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7caa82bd5d87eb4ff1d79d06248afc48e922f044
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:cd:6f:27:f5:b5:7c:1d:16:44:5f:d8:db:3d:
81:d8:7a:c5:80:dd:17:c2:98:3f:d9:28:f0:e7:72:
c5:2e:f6:16:cb:05:58:3e:64:11:fc:6d:84:d2:c1:
41:41:0b:1c:ce:bc:00:07:b4:54:b1:a3:b3:e0:53:
5d:23:b7:2d:fb:4b:10:db:e4:21:5d:39:6e:f6:b5:
5a:5a:e4:1c:41:0b:1f:fb:06:5a:8c:19:28:50:e5:
bd:a8:ef:f5:ae:a0:6d:32:e2:f1:7f:e5:cf:c2:58:
7b:ce:f0:b7:bd:4b:a8:94:73:ff:c2:d4:c5:e5:60:
fb:83:5c:ab:de:23:38:00:d6:79:f1:a2:b5:b0:57:
e7:16:42:0c:e1:ff:af:17:7e:0f:d0:11:e4:fd:aa:
de:73:ee:76:f7:eb:91:31:8b:7c:b5:8d:3b:d2:1c:
40:89:87:da:1b:e7:d1:66:05:c7:4d:bc:05:89:bd:
9c:a3:5c:9c:a7:d0:53:c7:ce:b6:fb:37:5e:6e:30:
ab:98:14:a0:1e:77:e4:86:4c:5e:80:ee:3d:b6:01:
2a:c3:93:ab:ae:51:49:d0:d7:8e:fa:60:50:45:13:
41:cd:2b:8e:43:c4:68:b3:5c:bc:ed:d1:60:05:52:
be:08:cf:fd:d8:cd:a3:64:45:52:ae:db:42:f8:95:
81:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:AA:82:BD:5D:87:EB:4F:F1:D7:9D:06:24:8A:FC:48:E9:22:F0:44
X509v3 Authority Key Identifier:
keyid:4E:EB:86:AB:D5:37:4E:55:30:98:20:90:75:B9:AF:EC:AB:EF:33:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TuuGq9U3TlUwmCCQdbmv7KvvMzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/3e5c96-7e95-4797-aa6a-a8978e3aae98/1/fKqCvV2H60_x150GJIr8SOki8EQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/3e5c96-7e95-4797-aa6a-a8978e3aae98/1/TuuGq9U3TlUwmCCQdbmv7KvvMzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.191.164.0/24
Signature Algorithm: sha256WithRSAEncryption
54:1a:b4:1c:3d:3b:97:1a:f0:bc:d8:c3:6b:d0:33:00:44:75:
d5:c2:12:48:62:24:09:09:90:5f:26:45:0d:51:e9:0f:14:08:
7c:03:14:e5:10:fa:5a:98:25:df:57:86:a9:85:3a:72:86:69:
ab:b3:3e:ec:57:c5:1e:8b:d1:06:18:3e:07:31:36:f4:30:68:
fd:b3:4c:c3:a5:17:20:6e:dc:29:1a:5a:2d:13:7d:2d:1d:32:
95:3a:2a:2c:40:3c:bf:8d:d0:bc:e4:80:7c:83:f2:0b:9f:18:
71:01:22:d0:d8:1b:2a:ad:71:58:fe:86:ab:df:27:2d:e2:a9:
91:e8:1f:44:fc:36:37:03:72:aa:bb:1e:c3:d0:5e:f4:ef:61:
bb:e5:d8:94:91:91:35:a6:d9:6e:cb:ab:43:3d:9c:12:6e:09:
fd:24:7c:c5:8e:09:5e:40:1f:18:ed:57:b9:52:08:6b:d3:3c:
6b:c7:2b:85:5f:51:8b:dc:53:e2:8b:fc:10:fd:e1:62:6d:29:
46:1a:80:a1:c8:20:30:3e:0c:97:b7:8a:ca:32:1d:d6:b3:fe:
fc:b0:d3:af:46:f0:1f:e9:b6:7b:cf:8f:6b:9c:6a:cc:25:16:
0d:96:94:c8:91:be:04:31:15:44:b3:62:0c:d2:d5:b6:d4:41:
d8:67:6a:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 15:51:24 2025 by rpki-client