Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/94f642-55f7-4c1c-81d4-9e59c111aa38/1/gSiRx4os8QFHcIb_8HNB1oNvcB4.roa
File: gSiRx4os8QFHcIb_8HNB1oNvcB4.roa (raw, json)
Hash identifier: xKETz16WqJ7ei2SjBEUSJgDLxyYrlv9+GX/GJKUW2iM=
Subject key identifier: 81:28:91:C7:8A:2C:F1:01:47:70:86:FF:F0:73:41:D6:83:6F:70:1E
Certificate issuer: /CN=5e7c13f5ff169afed825b75d8fc077afca50d6a1
Certificate serial: 019420D5D1CB16A15DBFE7BD2DF0DB5173A8
Authority key identifier: 5E:7C:13:F5:FF:16:9A:FE:D8:25:B7:5D:8F:C0:77:AF:CA:50:D6:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/94f642-55f7-4c1c-81d4-9e59c111aa38/1/gSiRx4os8QFHcIb_8HNB1oNvcB4.roa
Signing time: Wed 01 Jan 2025 07:47:51 +0000
ROA not before: Wed 01 Jan 2025 07:47:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6730
IP address blocks: 195.230.117.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:d1:cb:16:a1:5d:bf:e7:bd:2d:f0:db:51:73:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e7c13f5ff169afed825b75d8fc077afca50d6a1
Validity
Not Before: Jan 1 07:47:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=812891c78a2cf101477086fff07341d6836f701e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:03:bf:4b:c1:94:36:cb:37:c3:c2:12:b6:b6:
05:e6:b0:48:c9:d0:25:3d:8c:35:83:1a:46:7b:a2:
14:59:f8:1b:39:6c:cc:04:f7:8d:07:2c:26:35:74:
41:1d:63:0b:b2:cf:a6:c4:d3:d4:5d:99:39:18:a8:
bc:22:d6:a7:c4:40:15:16:e1:30:3d:fc:b1:5a:48:
5a:57:84:c1:b7:10:d7:2d:d4:c1:93:9a:7d:4f:d4:
58:58:00:f0:1b:8a:34:39:e4:bb:f1:88:5a:69:5e:
02:27:dc:ae:11:00:55:6e:d0:b4:0e:3a:d9:69:eb:
f0:6c:3d:bc:3a:7d:a1:6d:6f:b7:ca:59:07:2d:2a:
31:34:be:9a:39:80:31:dd:a9:59:14:55:f6:d8:d4:
a3:77:9b:70:19:02:55:68:e4:2c:19:01:d1:b8:57:
95:7d:65:a4:33:7e:5e:a5:07:bc:ba:b8:b6:d0:07:
1e:3c:75:85:dc:2f:9c:20:38:53:61:05:7f:eb:b8:
0f:93:69:b2:53:92:a5:4a:b7:06:5f:8a:dc:57:f0:
5f:94:9b:15:91:87:f4:61:5b:65:ea:ce:17:d6:96:
0d:7e:e5:b5:e7:fd:8f:af:6f:f1:b7:f5:d8:15:6e:
d3:89:8b:fc:ca:41:d1:c2:22:31:7b:9d:66:30:65:
72:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:28:91:C7:8A:2C:F1:01:47:70:86:FF:F0:73:41:D6:83:6F:70:1E
X509v3 Authority Key Identifier:
keyid:5E:7C:13:F5:FF:16:9A:FE:D8:25:B7:5D:8F:C0:77:AF:CA:50:D6:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/94f642-55f7-4c1c-81d4-9e59c111aa38/1/gSiRx4os8QFHcIb_8HNB1oNvcB4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/94f642-55f7-4c1c-81d4-9e59c111aa38/1/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.230.117.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:b9:96:63:4f:7e:03:90:e1:4b:92:b5:ce:e1:47:3e:24:94:
15:82:58:19:83:40:bf:5e:f4:03:d4:5e:0f:ef:ac:60:cd:24:
9a:8b:3e:69:17:c3:e1:83:d0:cf:0a:7e:15:aa:12:33:20:f5:
ac:20:e0:4c:5c:3a:a3:12:03:6b:a9:18:c6:57:be:a0:2e:02:
b5:a0:4f:22:7f:16:fb:bb:51:d6:08:77:7e:2a:0c:7e:d8:68:
89:ac:9d:33:64:22:86:b8:a3:83:3a:7e:ce:c4:4d:e0:b2:3e:
c2:2e:a9:37:bc:47:d5:3e:35:54:15:7b:76:db:a6:1c:e5:0b:
5b:02:2f:4d:44:b7:3c:1f:b2:b4:60:d3:1c:d3:c8:5a:9e:ee:
49:1f:de:d5:6f:fd:3a:f7:93:e6:3b:ed:73:95:8e:60:2c:83:
97:0e:83:c3:4f:ba:8c:14:2f:24:af:fd:ae:d6:e5:5c:af:a3:
55:e7:70:7b:91:4c:5f:dd:cb:d1:0c:fc:6c:85:ee:5e:d6:c7:
05:b1:b7:19:aa:db:79:6e:1f:67:04:aa:2a:69:cd:db:d5:c0:
b7:6f:83:04:49:8b:96:c1:eb:48:f4:16:41:b3:7c:c7:4e:06:
75:d8:72:fd:74:10:55:14:ed:41:93:53:41:3e:79:52:e4:7a:
b6:85:4e:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:58:14 2025 by rpki-client