Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/c301fb-3174-45c3-a447-a7fcfb529dc7/1/xVzCoBRTedY1vT9C7xN3NLO-WeY.roa
File: xVzCoBRTedY1vT9C7xN3NLO-WeY.roa (raw, json)
Hash identifier: ystLlP8JPbF13VOw8QCBVAQ5cldgA4v4fXVvBu8BWIc=
Subject key identifier: C5:5C:C2:A0:14:53:79:D6:35:BD:3F:42:EF:13:77:34:B3:BE:59:E6
Certificate issuer: /CN=80c7b3de96b91edc6e9c85d9d5a668419203b5f5
Certificate serial: 01941F8C4FA0E84A508F4035E31C9ADB3260
Authority key identifier: 80:C7:B3:DE:96:B9:1E:DC:6E:9C:85:D9:D5:A6:68:41:92:03:B5:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gMez3pa5HtxunIXZ1aZoQZIDtfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/c301fb-3174-45c3-a447-a7fcfb529dc7/1/xVzCoBRTedY1vT9C7xN3NLO-WeY.roa
Signing time: Wed 01 Jan 2025 01:47:56 +0000
ROA not before: Wed 01 Jan 2025 01:47:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215419
IP address blocks: 195.200.76.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:4f:a0:e8:4a:50:8f:40:35:e3:1c:9a:db:32:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80c7b3de96b91edc6e9c85d9d5a668419203b5f5
Validity
Not Before: Jan 1 01:47:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c55cc2a0145379d635bd3f42ef137734b3be59e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ad:05:73:34:64:52:75:74:76:7f:6b:d2:f3:
65:ab:0c:18:d6:62:c7:6f:a4:93:bd:4d:65:29:5b:
93:72:41:ad:8e:da:48:3b:03:ec:fc:3f:5f:b2:ec:
22:23:e8:d6:1b:cf:bd:74:e3:ce:9e:27:fd:5a:f0:
35:86:61:67:8d:60:28:ad:04:47:cf:fe:72:75:50:
03:d9:db:fc:74:7d:c3:4a:29:e9:ce:06:f5:3d:3b:
9e:70:9d:ef:c2:4d:9d:9f:71:5e:9f:c2:e9:e0:4b:
81:99:b5:82:47:99:f7:c3:5c:cd:ab:28:23:24:20:
51:8a:b8:8b:e3:cb:78:43:3b:aa:eb:8a:b0:34:79:
7a:1c:aa:77:9a:02:61:35:a7:d1:f4:6e:fd:52:f4:
6c:0d:33:11:0a:b5:2b:7a:4f:85:4f:86:56:a1:80:
30:04:04:7f:e2:83:81:e9:ff:9b:55:98:31:db:7e:
1d:e7:c1:72:06:78:5a:b6:22:8a:3c:96:72:bd:f1:
14:61:94:cf:51:35:ab:60:6e:52:8f:cb:c7:3c:bf:
db:c8:b5:34:a1:e9:e1:7f:5b:d2:cc:15:66:b3:3e:
83:a9:7e:01:8a:26:cf:e5:e4:c3:f5:f8:d1:d9:21:
23:7d:28:f2:76:66:2c:80:40:1c:3b:e4:a7:b4:91:
74:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:5C:C2:A0:14:53:79:D6:35:BD:3F:42:EF:13:77:34:B3:BE:59:E6
X509v3 Authority Key Identifier:
keyid:80:C7:B3:DE:96:B9:1E:DC:6E:9C:85:D9:D5:A6:68:41:92:03:B5:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gMez3pa5HtxunIXZ1aZoQZIDtfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/c301fb-3174-45c3-a447-a7fcfb529dc7/1/xVzCoBRTedY1vT9C7xN3NLO-WeY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/c301fb-3174-45c3-a447-a7fcfb529dc7/1/gMez3pa5HtxunIXZ1aZoQZIDtfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.200.76.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:2f:d4:1d:16:1b:c7:bd:3f:ae:b7:73:f6:9f:b1:7f:2c:c0:
6c:12:30:ac:54:ec:33:7f:6c:24:6f:ad:1b:53:ad:ce:f0:15:
21:d0:d8:d0:05:c8:82:44:54:92:c3:6f:71:f7:dd:f9:18:d0:
ff:ae:9f:44:9a:32:ec:a7:a2:30:f9:2a:4b:9d:e4:51:b1:2c:
79:81:9a:8e:0b:de:48:4d:0b:9b:f3:82:05:9d:09:42:c9:65:
8d:3d:50:7b:26:ba:df:b1:4f:7c:a5:30:65:2f:ba:2f:c9:1e:
c2:fa:a4:f4:ec:1f:aa:6a:e6:d7:65:21:53:14:1f:fa:bd:ff:
2b:a0:f5:e1:c7:1d:cb:b7:dd:a2:f1:69:b1:93:09:4f:f4:59:
51:21:ed:46:6f:ea:1d:06:f7:b5:a0:d4:93:dc:d0:98:2d:10:
87:ac:f6:55:1b:86:0c:65:aa:25:a5:b1:11:5c:f0:ce:88:ea:
13:4d:be:2b:b9:92:7e:27:fa:f7:f0:d6:2b:bc:3e:0a:95:64:
45:89:f8:75:a7:dc:f4:fe:6a:14:33:24:78:91:0c:fc:37:ce:
97:1f:0b:8c:0b:e1:47:55:6f:ae:6c:12:1e:8c:83:58:c2:f6:
27:ec:b5:c8:d0:1b:75:e3:b3:f7:b9:23:d4:89:52:1b:17:84:
cc:be:2a:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 15:47:26 2025 by rpki-client