Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/PhHehIbhpG9xmORWjAKzgaIK2w0.roa
File: PhHehIbhpG9xmORWjAKzgaIK2w0.roa (raw, json)
Hash identifier: gade92XrrBFFR23A+mvtY8SegKtoCcLxuRtfr0KV/SU=
Subject key identifier: 3E:11:DE:84:86:E1:A4:6F:71:98:E4:56:8C:02:B3:81:A2:0A:DB:0D
Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial: 0194258FA047299B89A39F474F39F9E6E4E1
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/PhHehIbhpG9xmORWjAKzgaIK2w0.roa
Signing time: Thu 02 Jan 2025 05:49:17 +0000
ROA not before: Thu 02 Jan 2025 05:49:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 64433
IP address blocks: 195.14.118.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:a0:47:29:9b:89:a3:9f:47:4f:39:f9:e6:e4:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
Validity
Not Before: Jan 2 05:49:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3e11de8486e1a46f7198e4568c02b381a20adb0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:a9:3c:f4:06:8d:e0:72:01:5e:3c:0e:32:4e:
7b:bb:88:4d:32:c8:9f:bf:d7:c2:92:76:c3:69:47:
a6:f8:60:a6:ec:68:15:2d:3a:a7:32:15:5e:6c:80:
19:b2:8b:4b:71:de:42:1b:97:2e:cc:be:be:cd:d8:
31:e0:c0:76:2e:9b:02:5f:c7:53:af:89:7b:58:b3:
4f:e5:ab:33:ab:7a:3c:98:44:d4:c6:13:8a:f2:a0:
f5:1b:c0:d4:8f:5a:45:1c:70:92:4d:e9:1e:c7:66:
a0:0e:e8:f1:08:cc:f7:59:d2:ca:39:cf:85:bf:1c:
c2:eb:82:b3:5f:d6:f1:b5:a7:20:04:b3:df:1e:14:
10:42:d0:52:fe:0b:2c:86:59:71:c5:ad:14:35:88:
23:b0:41:e4:19:4b:e7:65:50:fc:2b:34:63:01:7b:
dd:47:d3:ac:be:44:45:72:7c:45:c1:0c:61:69:45:
19:dd:f8:f8:3f:ca:5f:a1:c6:a5:8b:06:32:00:e4:
26:6c:5a:cc:de:77:b2:9c:1e:a4:c8:09:07:a1:ba:
16:30:5a:de:41:8c:30:ef:35:29:65:4c:6a:54:81:
cb:dd:24:2e:1d:5b:58:d0:8d:25:db:51:9d:4d:4f:
79:81:79:b2:8c:38:d4:6c:e9:2b:f8:8e:71:7d:d3:
0c:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:11:DE:84:86:E1:A4:6F:71:98:E4:56:8C:02:B3:81:A2:0A:DB:0D
X509v3 Authority Key Identifier:
keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/PhHehIbhpG9xmORWjAKzgaIK2w0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.14.118.0/24
Signature Algorithm: sha256WithRSAEncryption
38:85:29:e9:eb:24:d2:8a:40:4d:fe:59:61:28:aa:f2:50:92:
7d:90:34:96:83:25:86:f7:d8:a9:ac:ce:f0:81:d0:9a:1a:d2:
a5:49:87:8e:19:65:43:e7:1c:fd:8d:3c:65:9a:cb:9f:37:33:
14:70:7a:7b:cc:27:95:bc:73:42:06:b2:ca:c6:0c:a2:82:70:
e5:b5:d1:95:38:86:06:6c:f9:bc:4e:78:c9:ff:46:21:7a:b0:
6b:65:7d:20:a4:a2:28:e2:b3:56:9a:b8:0a:a8:fb:20:24:dc:
25:25:77:8c:a9:24:08:df:eb:68:b5:d8:85:a1:29:98:6f:1c:
b2:a3:d6:fc:75:d6:13:b1:40:2e:83:16:1a:8a:76:2b:27:bd:
f7:41:af:fb:6a:20:30:4e:d4:64:61:45:9c:29:d6:c3:29:2b:
b3:a4:25:dd:06:84:93:1b:f2:f4:c2:3d:84:10:f4:fb:f7:2e:
2b:59:38:98:b6:2e:ec:0b:20:9c:6c:44:ff:91:ac:cb:48:3b:
fa:8f:53:24:5e:af:86:91:9e:4f:10:b2:ff:74:cc:08:8f:fa:
67:50:90:fd:39:b9:4e:b8:9e:1c:48:84:c1:83:bd:d3:1e:e2:
86:0f:b7:3d:04:1d:68:40:34:f8:62:c1:87:46:58:9e:99:4b:
42:05:a5:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:34:48 2025 by rpki-client