Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/28rk6vVEaThskl5Oz8cUwJzvyPE.roa
File: 28rk6vVEaThskl5Oz8cUwJzvyPE.roa (raw, json)
Hash identifier: YmQ0Kx60sH8MZc89x92SrjX+sCOw13xB0G1V7AXRvnw=
Subject key identifier: DB:CA:E4:EA:F5:44:69:38:6C:92:5E:4E:CF:C7:14:C0:9C:EF:C8:F1
Certificate issuer: /CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Certificate serial: 01955178B48DA2E476A29E45736BFD061BC5
Authority key identifier: 06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/28rk6vVEaThskl5Oz8cUwJzvyPE.roa
Signing time: Sat 01 Mar 2025 11:30:19 +0000
ROA not before: Sat 01 Mar 2025 11:30:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213918
IP address blocks: 195.114.201.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:51:78:b4:8d:a2:e4:76:a2:9e:45:73:6b:fd:06:1b:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Validity
Not Before: Mar 1 11:30:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dbcae4eaf54469386c925e4ecfc714c09cefc8f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:3a:16:08:8b:fe:e7:b7:dc:21:88:68:b5:5f:
83:9b:bb:19:fd:76:dd:4c:19:66:27:8d:04:09:46:
e9:8f:21:db:e7:10:e9:ca:c1:0f:d5:a7:12:90:15:
44:a7:d3:13:13:74:bc:67:9d:49:47:1c:1e:29:e6:
47:f3:87:0e:9d:3c:b2:ec:ca:10:32:ab:77:a0:1b:
f8:8d:d8:ed:bb:9a:d0:f7:5d:42:85:65:63:e6:50:
49:37:50:69:b8:9b:14:8f:e5:31:15:6c:e1:dd:f7:
5e:0a:e5:fa:73:c0:8c:b2:01:50:e8:a4:3d:6a:22:
74:dc:51:ad:0d:e0:10:d0:b0:98:66:46:cc:ce:31:
ac:a5:98:13:d0:c9:74:25:6c:48:a1:86:46:73:f5:
38:c5:6b:d6:2d:eb:5d:f8:b6:1d:f4:8f:08:68:b6:
ab:e8:b3:50:1f:af:70:95:bc:79:8f:9c:64:8a:a9:
6a:bf:83:98:3c:87:1d:28:f0:d2:7b:5b:2f:9e:aa:
22:95:98:ce:a4:6a:e0:66:c9:53:eb:78:57:ad:2a:
4a:11:b0:27:89:fc:c4:df:39:a4:07:9d:08:9c:0d:
96:2b:e9:04:9f:31:c9:dc:7b:81:4f:6e:c9:34:a1:
2e:7f:be:ce:2b:82:1e:91:cc:88:3a:ca:bf:f1:af:
6b:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:CA:E4:EA:F5:44:69:38:6C:92:5E:4E:CF:C7:14:C0:9C:EF:C8:F1
X509v3 Authority Key Identifier:
keyid:06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/28rk6vVEaThskl5Oz8cUwJzvyPE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.114.201.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:f0:4e:c7:0b:d3:a6:db:a5:9b:7a:d2:0b:76:6e:5b:48:23:
ee:f6:01:93:42:ca:1f:04:c4:4c:50:fc:91:13:23:80:74:9a:
83:47:18:5e:f8:42:60:ae:03:0c:15:f3:6f:9a:27:b4:9d:ba:
dc:50:bf:14:21:e5:9c:3f:83:13:89:14:cb:5b:31:10:40:98:
88:f7:02:e4:32:51:f0:5e:72:a4:67:3e:80:88:41:4e:ae:ee:
b3:52:a4:b0:61:61:ba:bd:06:c6:23:54:da:77:04:79:6e:0c:
25:d1:04:cf:cc:34:93:b8:ba:62:41:6d:3c:bd:a9:ff:48:9e:
24:8f:22:89:3c:3a:27:68:fa:63:98:a5:f5:ef:9b:70:53:51:
a3:53:9b:71:29:a9:9b:d3:b0:71:93:29:ff:70:a6:c0:cb:ed:
b4:57:3b:3f:e3:a0:9e:8c:94:bd:dd:7f:fd:43:6a:2d:8f:c4:
8a:68:07:da:14:41:cb:1b:90:45:03:65:cc:cd:9a:11:78:30:
82:69:25:13:29:37:0f:70:4c:36:73:cf:34:ce:6e:6b:4d:d8:
81:51:34:8f:ad:1e:d3:87:a5:6a:77:f9:7a:ca:3f:f5:3e:96:
6e:ad:cc:9a:66:d6:31:27:d3:6d:70:be:a8:0c:42:3b:39:5d:
58:32:41:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:29:27 2025 by rpki-client