Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/YWuiEKZIZfhaIE2X-svgxZ2m3UI.roa
File: YWuiEKZIZfhaIE2X-svgxZ2m3UI.roa (raw, json)
Hash identifier: p5HxdtrVgUE5QXb83+pvtjCQQg/KhtcxvAOUQrVsCjw=
Subject key identifier: 61:6B:A2:10:A6:48:65:F8:5A:20:4D:97:FA:CB:E0:C5:9D:A6:DD:42
Certificate issuer: /CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Certificate serial: 01942827F57658B4302B756971D2FE871FAC
Authority key identifier: 93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/YWuiEKZIZfhaIE2X-svgxZ2m3UI.roa
Signing time: Thu 02 Jan 2025 17:54:54 +0000
ROA not before: Thu 02 Jan 2025 17:54:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214309
IP address blocks: 195.170.163.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:f5:76:58:b4:30:2b:75:69:71:d2:fe:87:1f:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Validity
Not Before: Jan 2 17:54:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=616ba210a64865f85a204d97facbe0c59da6dd42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d5:8b:fe:ca:da:8f:c6:49:7b:1e:bb:d7:6d:
c5:45:9c:71:a2:b3:a4:f0:c9:8d:0d:1d:ed:8d:bd:
34:6f:1a:38:55:2f:5e:8e:43:c0:45:1f:9b:eb:05:
7b:1c:fc:25:ac:0e:f7:bb:c5:06:21:3f:3c:3b:3f:
e4:e9:2c:21:a2:db:3b:98:b9:02:50:fd:ea:14:56:
08:3d:a6:b5:3e:ac:ee:be:c0:09:ea:39:86:1c:f9:
82:e6:24:e0:1d:8b:47:52:54:0e:62:67:32:67:9b:
90:96:c0:a7:f0:7b:30:ca:b6:b6:4a:a4:6f:e8:b6:
7b:ce:f4:f3:b4:80:a1:69:4a:50:64:7f:78:9c:9f:
2d:53:1a:59:34:d8:46:a3:fd:fe:a5:a3:fd:e6:f9:
55:a6:54:1d:8f:6d:11:44:dc:83:f3:50:99:71:39:
b8:e2:96:9e:ba:9f:6b:c8:ee:d5:d8:02:c3:42:98:
8a:4c:e2:52:c3:43:7a:c4:2a:de:08:64:fe:af:d6:
a6:6e:9a:df:ad:85:ab:e6:62:cc:98:4d:5a:c5:d7:
35:04:3a:6d:7d:22:5d:a7:a3:37:cf:b8:c0:24:18:
9f:13:d1:4d:8f:25:45:77:36:7b:88:94:e5:33:7a:
e9:09:33:0d:de:57:5d:f5:dc:e3:1f:75:c7:71:f9:
23:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:6B:A2:10:A6:48:65:F8:5A:20:4D:97:FA:CB:E0:C5:9D:A6:DD:42
X509v3 Authority Key Identifier:
keyid:93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/YWuiEKZIZfhaIE2X-svgxZ2m3UI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.170.163.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:14:60:0c:aa:00:94:b3:93:81:d7:51:12:4b:df:69:d6:36:
07:a9:4c:3e:e1:c9:1e:9e:43:90:ad:24:bf:91:d0:b9:fe:40:
de:e3:55:af:32:9f:23:43:1a:cb:5a:0d:ef:1f:57:88:60:0e:
a9:58:9f:08:ff:d5:7a:75:eb:26:0d:5e:1e:09:7e:0d:2c:e0:
44:ef:9a:c2:7f:7c:29:ae:da:7b:fa:de:cb:a2:7d:c7:c7:28:
c4:25:a3:ae:b0:1b:da:ed:f3:24:c3:c4:e8:8d:ad:f2:69:82:
a1:a1:85:cb:cd:23:47:20:13:6d:e9:81:2d:71:06:ff:cc:99:
db:7f:93:e1:12:f7:3e:2a:93:76:2f:e0:d6:41:12:79:d1:38:
ba:6c:fe:3c:7a:01:78:69:fd:0c:79:e8:9a:57:9f:1b:04:33:
86:b0:d9:2b:fb:b0:07:7e:e8:cf:7c:0c:40:c5:91:eb:b3:b8:
f8:92:26:84:e7:bf:99:1f:2f:c2:c4:d3:37:f6:c3:ad:03:71:
c2:46:a4:8b:53:70:33:81:72:9f:84:cb:cb:70:71:5e:49:5d:
43:cf:4d:39:de:9b:51:4e:14:1b:42:0e:80:6f:2c:df:9e:7f:
22:b3:84:98:21:07:8c:94:95:26:ca:8a:e6:41:d1:72:8c:94:
10:a5:4f:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:23:40 2025 by rpki-client