Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/288bcc-3603-4fc0-810a-6f15a6ead3cc/1/3_7ZjcR7qXcUgzrUv_gjLsdFhdA.roa
File: 3_7ZjcR7qXcUgzrUv_gjLsdFhdA.roa (raw, json)
Hash identifier: NJmABczjuAOTLl0h6DBnrPjIGOR8/qxj1OB7hIhj4j0=
Subject key identifier: DF:FE:D9:8D:C4:7B:A9:77:14:83:3A:D4:BF:F8:23:2E:C7:45:85:D0
Certificate issuer: /CN=1e81990a8a8ccd7e8a4f48bb768f35d2699b78b2
Certificate serial: 019425FC6B39F1C4A0F015CF9429717B5F34
Authority key identifier: 1E:81:99:0A:8A:8C:CD:7E:8A:4F:48:BB:76:8F:35:D2:69:9B:78:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HoGZCoqMzX6KT0i7do810mmbeLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/288bcc-3603-4fc0-810a-6f15a6ead3cc/1/3_7ZjcR7qXcUgzrUv_gjLsdFhdA.roa
Signing time: Thu 02 Jan 2025 07:48:06 +0000
ROA not before: Thu 02 Jan 2025 07:48:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51325
IP address blocks: 195.226.214.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:6b:39:f1:c4:a0:f0:15:cf:94:29:71:7b:5f:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e81990a8a8ccd7e8a4f48bb768f35d2699b78b2
Validity
Not Before: Jan 2 07:48:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dffed98dc47ba97714833ad4bff8232ec74585d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:97:92:7c:4e:57:a4:46:6c:6f:c2:8a:bd:89:
6b:77:57:05:30:4b:7e:bf:4d:71:6d:31:12:94:42:
db:0d:e5:7b:73:d5:53:f7:25:89:2f:7d:7d:88:b7:
30:7b:1e:7b:36:b8:85:86:3b:86:eb:66:ab:31:51:
eb:bc:cc:6d:7f:6a:ba:ef:67:8c:a1:f5:24:0c:4c:
87:0d:05:da:85:55:f9:30:71:bf:5e:2e:b2:61:41:
67:4d:64:b4:2d:ac:8c:78:e4:c3:2a:85:31:d6:79:
c0:72:3e:27:42:ee:d4:74:47:b5:cf:b5:26:c0:c9:
32:65:4d:1e:51:47:b6:17:c9:c4:96:f7:5a:93:9e:
a9:80:5b:ba:db:d3:52:5e:ce:38:1d:44:53:1d:0c:
e0:09:0e:65:9e:c0:da:9e:94:7e:f9:c5:5a:0f:49:
18:90:9d:11:d5:6e:2e:b9:da:87:4a:c6:9c:90:f0:
bf:dd:e2:ac:8b:41:ab:70:2f:94:1b:6d:86:27:6d:
9a:5a:76:43:66:fa:23:a5:6e:5e:c6:bb:47:27:48:
05:25:0b:3c:bd:04:df:c5:c0:b8:cd:72:d4:04:8c:
3f:a0:7d:a0:86:58:fe:d4:e6:dc:63:1e:89:86:ba:
e3:f4:35:8f:14:2d:ad:dd:f8:a0:45:8b:17:f3:7e:
de:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:FE:D9:8D:C4:7B:A9:77:14:83:3A:D4:BF:F8:23:2E:C7:45:85:D0
X509v3 Authority Key Identifier:
keyid:1E:81:99:0A:8A:8C:CD:7E:8A:4F:48:BB:76:8F:35:D2:69:9B:78:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HoGZCoqMzX6KT0i7do810mmbeLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/288bcc-3603-4fc0-810a-6f15a6ead3cc/1/3_7ZjcR7qXcUgzrUv_gjLsdFhdA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/288bcc-3603-4fc0-810a-6f15a6ead3cc/1/HoGZCoqMzX6KT0i7do810mmbeLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.226.214.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:5c:39:c3:ef:6d:5b:b8:85:36:45:3a:e7:be:b4:41:18:a9:
7b:e8:83:d6:10:29:e9:ac:2d:1b:3b:08:55:9f:ec:a1:e4:e5:
8f:64:9a:eb:20:f7:dd:c1:7f:c7:4a:e5:76:21:26:59:72:37:
99:23:5c:83:ec:0b:56:e7:cb:15:94:76:31:48:3e:50:b1:dc:
8a:02:07:26:bf:6b:4a:05:0d:b7:38:ea:86:bc:ca:ac:84:06:
d1:d3:35:d7:28:9e:27:94:09:20:5c:f7:24:76:1d:6c:20:e9:
1c:bb:1f:2d:d0:e1:81:9b:91:e4:48:eb:10:5e:6e:e2:b3:67:
43:95:6f:78:01:da:20:dc:2a:d4:88:5d:55:0b:1b:cf:83:ce:
f7:6b:60:b4:22:7b:80:6d:f5:ce:2a:83:28:33:ac:3e:a2:db:
b6:a4:d8:25:0a:fb:bc:45:74:f6:66:fa:5d:f5:09:c7:12:0a:
25:b0:56:bb:61:6c:bb:7a:0e:c0:1c:8d:fd:19:67:15:41:f3:
49:e7:cf:a3:9a:17:ee:2a:b3:da:f4:95:9b:71:8f:14:d8:fc:
5e:ec:9f:bd:e3:4b:e0:b2:36:2c:15:57:5e:8b:6b:5e:6f:30:
85:c7:47:f2:ee:2f:db:f4:35:82:f1:0f:42:7e:3a:d7:db:b4:
2c:cb:75:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 13:03:52 2025 by rpki-client