Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/B4xuVBeDw_ZFdgBfYNzvFE9Xdoo.roa
File: B4xuVBeDw_ZFdgBfYNzvFE9Xdoo.roa (raw, json)
Hash identifier: uEBgOj1wL/lZxabuAzXGGt9tXkgNmy0WBweEZQ8DMa4=
Subject key identifier: 07:8C:6E:54:17:83:C3:F6:45:76:00:5F:60:DC:EF:14:4F:57:76:8A
Certificate issuer: /CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Certificate serial: 01941F8C968CDDACE4D49AE648DCB6D6DD29
Authority key identifier: 06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/B4xuVBeDw_ZFdgBfYNzvFE9Xdoo.roa
Signing time: Wed 01 Jan 2025 01:48:14 +0000
ROA not before: Wed 01 Jan 2025 01:48:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211440
IP address blocks: 195.114.194.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:96:8c:dd:ac:e4:d4:9a:e6:48:dc:b6:d6:dd:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Validity
Not Before: Jan 1 01:48:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=078c6e541783c3f64576005f60dcef144f57768a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:fb:7b:d6:b5:53:36:aa:b4:b1:77:62:5c:ae:
93:ad:05:e0:94:9c:b2:3f:52:a8:6f:dc:c8:d8:a7:
cf:a2:05:63:a0:38:ac:03:1f:f7:19:ff:25:8b:1b:
02:2b:a4:61:ed:72:7d:dc:c9:ae:bc:2f:86:39:e3:
08:94:37:24:44:fd:a0:ab:9a:9b:f8:78:4f:87:08:
e8:4e:3f:00:b8:e2:00:ae:4e:0b:93:a3:b2:0e:8f:
29:74:3d:28:3a:de:77:84:6e:6a:13:87:c8:f4:c6:
a6:f7:8e:a3:2d:7e:ac:e9:8e:70:26:bf:9d:15:9e:
72:f0:a4:91:e4:a5:4c:fd:4b:36:34:80:df:9f:75:
0a:f4:17:0b:10:0a:73:e0:de:2d:3d:54:36:a4:15:
7d:be:28:1f:c8:f8:42:7b:a5:14:d9:ac:33:44:24:
d6:d6:cc:89:cd:26:80:d6:ea:b1:3f:e6:96:85:4e:
19:f0:f0:c8:b3:88:45:5b:1a:08:b7:78:03:0e:1a:
f8:b8:c6:0d:00:5a:9a:10:02:84:5b:43:6a:df:38:
65:aa:80:97:ff:c3:a9:4b:d6:4c:09:df:f4:97:fc:
ea:27:3a:4d:71:c5:f7:e7:71:20:a9:79:44:64:df:
57:c9:1f:d1:b6:45:2c:93:ff:fd:46:22:ca:78:71:
b8:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:8C:6E:54:17:83:C3:F6:45:76:00:5F:60:DC:EF:14:4F:57:76:8A
X509v3 Authority Key Identifier:
keyid:06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/B4xuVBeDw_ZFdgBfYNzvFE9Xdoo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.114.194.0/24
Signature Algorithm: sha256WithRSAEncryption
74:87:0c:9a:2f:38:8b:f7:08:0b:c3:9a:1a:8f:42:9d:7a:1b:
55:ec:9f:1d:62:28:1f:34:5d:e0:b9:ec:ed:57:cf:bf:3a:29:
22:62:8c:6c:5f:88:76:ad:89:62:f7:5f:bb:b4:c2:ed:f0:f7:
3a:49:8e:49:d3:92:6a:05:c5:ff:79:16:52:8c:53:e1:02:0e:
03:7d:3d:3a:91:8a:08:41:30:45:b6:1f:3f:c8:b1:c2:8a:90:
c5:fa:c0:98:50:02:1c:d4:20:b5:ee:67:44:2b:d9:e4:cd:2f:
0e:1f:d0:89:56:2b:5a:0c:72:6d:36:d7:d9:5e:f7:7a:4f:a7:
bc:08:d6:c0:68:6a:f8:b1:b3:eb:ea:d4:99:20:aa:f0:a2:59:
cb:af:ce:11:c8:8b:41:15:27:4c:7b:57:7f:72:95:a7:f8:ac:
77:e1:ae:c1:dc:07:9d:99:5d:47:e1:7a:19:49:d2:a4:bc:91:
7d:e1:ba:0d:a4:b0:e7:c3:c6:7e:bf:7f:da:84:63:f4:54:e9:
dd:2b:3f:1b:e0:ed:55:a9:7c:34:29:bd:83:01:0e:30:46:bd:
de:f4:a0:ac:26:39:fe:1a:9b:13:07:79:6d:98:aa:0d:19:e7:
0b:13:9c:0e:11:91:98:26:3d:c9:82:eb:06:f2:ae:92:c2:8d:
20:73:83:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 14:37:08 2025 by rpki-client