Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/55XpT8JVeIBju-68Fcr8TNvgCpo.roa
File: 55XpT8JVeIBju-68Fcr8TNvgCpo.roa (raw, json)
Hash identifier: 9CRwGbgIPnA9qI/QPIhe8quXTNF+qApSb8yHJkvqMSI=
Subject key identifier: E7:95:E9:4F:C2:55:78:80:63:BB:EE:BC:15:CA:FC:4C:DB:E0:0A:9A
Certificate issuer: /CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Certificate serial: 01941F8C96EB7CEA7642B22E2593EF85C1A8
Authority key identifier: 06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/55XpT8JVeIBju-68Fcr8TNvgCpo.roa
Signing time: Wed 01 Jan 2025 01:48:14 +0000
ROA not before: Wed 01 Jan 2025 01:48:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 195.114.193.0/24 maxlen: 24
195.114.206.0/24 maxlen: 24
195.114.207.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:96:eb:7c:ea:76:42:b2:2e:25:93:ef:85:c1:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Validity
Not Before: Jan 1 01:48:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e795e94fc255788063bbeebc15cafc4cdbe00a9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:bf:ff:0e:c3:b2:31:77:26:bb:d6:73:cf:f7:
ea:24:b5:b1:87:c6:68:a4:7a:d3:b7:56:d1:18:ef:
b9:0d:3b:b7:ad:68:6c:84:80:e4:16:24:9c:c5:5e:
70:b6:2c:be:f4:83:c7:f5:53:6f:56:e0:3b:08:df:
59:43:64:02:56:de:79:a9:a6:1a:90:88:d3:cf:de:
73:16:5d:8b:bf:11:8a:ce:75:de:9a:7e:d0:d6:54:
ef:57:e3:c2:bf:55:b2:cd:45:78:ab:7c:7e:92:98:
00:53:a8:fb:4c:05:7a:b2:a2:51:06:65:79:67:6a:
9c:fe:5d:d1:ee:31:68:9b:93:18:78:e2:39:cc:01:
07:c1:ed:40:f2:d3:b1:b7:ee:3b:0f:cf:07:99:c4:
3e:a1:01:93:0a:ee:fa:cd:c5:37:f5:65:96:21:01:
34:ed:60:a5:9b:05:ad:9a:f5:13:2f:d9:9e:9c:eb:
51:da:4a:5f:f5:ec:b9:66:62:46:32:5b:c3:6f:2c:
37:96:6a:54:7a:3f:95:e0:34:dc:57:af:3a:a4:80:
31:6f:97:11:a6:60:70:24:ea:72:1a:4f:49:86:c1:
fc:7d:7d:f2:69:27:15:0c:96:5a:8e:18:8d:0d:da:
80:f3:16:4c:c3:34:56:a6:ea:84:f8:9e:c4:3d:bd:
c7:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:95:E9:4F:C2:55:78:80:63:BB:EE:BC:15:CA:FC:4C:DB:E0:0A:9A
X509v3 Authority Key Identifier:
keyid:06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/55XpT8JVeIBju-68Fcr8TNvgCpo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.114.193.0/24
195.114.206.0/23
Signature Algorithm: sha256WithRSAEncryption
21:ec:7e:24:5c:db:2d:fa:e3:ce:b4:ff:c1:ef:fe:d7:f4:0f:
a7:8b:9c:68:8f:f2:3d:89:d5:f3:74:55:3f:6f:76:f9:77:6f:
56:f3:69:d5:78:35:d6:99:db:0e:27:e8:bc:0c:6b:5a:a7:fe:
52:48:6e:65:45:ff:60:02:6a:8d:cd:8f:4f:5d:42:a4:65:e2:
e6:37:e5:3e:54:7d:32:56:30:40:c9:f5:42:15:eb:a6:fa:ae:
61:1d:54:b6:2d:39:1b:cc:f7:c6:73:4c:b9:1e:f0:de:42:a3:
e0:92:0d:3e:6e:dd:a1:c5:ef:9a:b7:1a:10:e8:2f:9e:75:12:
f0:34:70:3a:56:3c:31:15:36:e0:f0:41:29:56:8c:61:6c:2d:
f4:3e:7d:4a:f7:bb:2d:2f:aa:c2:85:f9:04:fc:d5:cb:65:d9:
8c:c2:b9:ae:42:3a:60:2e:6d:91:76:55:c3:fd:6a:53:d6:e5:
9d:98:9b:db:dc:a2:07:02:09:94:9a:22:21:a6:1f:2b:71:3d:
9d:30:61:6a:38:e1:c6:2c:1e:ca:9a:99:75:08:81:09:c2:5d:
7a:e9:06:27:73:12:39:16:08:af:dc:df:9c:8e:15:78:15:15:
62:dc:2b:6f:73:7e:df:14:15:ca:dc:fd:c1:ba:e3:4b:6a:a4:
6b:27:2c:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:22:26 2025 by rpki-client