Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/K_EJriKArevlzfQZbolNDBtx8oo.roa
File: K_EJriKArevlzfQZbolNDBtx8oo.roa (raw, json)
Hash identifier: 6w0sGv73nByWKd1Uamo+uAderKU68u5gHX69ydcFrwY=
Subject key identifier: 2B:F1:09:AE:22:80:AD:EB:E5:CD:F4:19:6E:89:4D:0C:1B:71:F2:8A
Certificate issuer: /CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Certificate serial: 01953DCFCA16699C73D8AD36E1E00796016A
Authority key identifier: 06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/K_EJriKArevlzfQZbolNDBtx8oo.roa
Signing time: Tue 25 Feb 2025 15:53:02 +0000
ROA not before: Tue 25 Feb 2025 15:53:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215224
IP address blocks: 195.114.201.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:3d:cf:ca:16:69:9c:73:d8:ad:36:e1:e0:07:96:01:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Validity
Not Before: Feb 25 15:53:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2bf109ae2280adebe5cdf4196e894d0c1b71f28a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:eb:dc:16:68:a7:cf:aa:64:eb:71:d4:97:0e:
54:41:94:2f:f2:10:73:79:75:b2:59:48:e4:eb:28:
7c:7f:9a:23:10:f8:eb:21:a3:7b:f0:11:79:fd:ef:
3d:22:e2:d6:3e:de:6e:5d:38:b7:66:2c:21:80:80:
14:9e:b0:8c:7c:19:98:a7:ea:31:4c:9a:2e:8d:b6:
de:df:c9:4d:70:d9:6f:39:32:77:7d:00:77:db:0d:
c8:23:fa:a9:15:00:28:05:03:df:73:a6:48:d9:0b:
ae:56:07:4d:f7:7d:b9:d1:7f:24:2b:9e:29:29:7d:
21:84:0e:c1:a4:31:23:ff:ae:18:be:c1:14:60:0f:
93:fe:67:e6:93:70:33:07:0d:af:20:ae:c2:43:5a:
b8:78:c4:4e:3e:10:dd:e9:bc:9f:9d:a4:f1:d0:f1:
58:a1:27:38:8f:c8:bf:79:ad:77:d9:a9:f1:60:91:
2e:b7:2b:57:79:64:71:e0:2a:52:58:c0:89:1f:ef:
0a:a0:f4:9b:5b:25:da:08:b0:be:69:e0:84:9a:c8:
d9:66:6c:66:45:69:5e:44:5a:a7:8d:e9:0a:5e:f4:
1e:48:7b:ae:30:19:bc:84:03:ec:6b:99:67:df:e0:
6c:c8:4b:6a:1a:c4:cb:81:88:2a:12:3e:c8:1e:5d:
93:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:F1:09:AE:22:80:AD:EB:E5:CD:F4:19:6E:89:4D:0C:1B:71:F2:8A
X509v3 Authority Key Identifier:
keyid:06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/K_EJriKArevlzfQZbolNDBtx8oo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.114.201.0/24
Signature Algorithm: sha256WithRSAEncryption
21:55:c2:b6:77:19:54:9d:5a:a6:e4:ed:01:c3:b8:a5:68:a8:
65:2a:27:b7:fb:41:db:26:9d:ca:4f:bb:25:50:dc:31:2f:fc:
71:a6:ac:3d:e1:16:02:28:aa:e2:f0:e9:1b:f3:1a:e7:91:fd:
74:3b:2c:d6:28:79:93:c3:13:87:8e:ee:78:f6:99:19:9e:17:
d4:64:62:11:d1:60:2f:de:40:95:92:4f:29:0e:f1:59:8f:1c:
d7:35:f3:67:c1:c3:28:c9:8d:db:43:3c:3c:cc:71:35:60:32:
ea:31:50:35:56:a2:a6:6c:0a:2b:60:30:74:58:f0:8f:9d:6e:
94:a1:00:3e:ef:b9:05:b3:eb:cc:c0:52:a0:14:ac:ae:b2:73:
a2:31:06:81:e0:7c:96:3f:b0:71:25:df:5a:d3:2f:3e:78:ca:
74:8b:a2:84:db:19:8f:18:d1:c1:77:05:10:75:c6:de:dc:0d:
60:68:32:f8:48:e5:48:35:5f:9c:d3:14:cd:97:5a:aa:d9:78:
fb:90:d7:b7:85:49:e2:bf:26:db:b5:22:27:92:ce:cc:c3:de:
99:c2:76:4d:4c:fa:0c:c5:24:40:83:44:e0:90:28:a1:07:b8:
c9:38:1a:4e:09:87:c1:e2:10:c1:c6:97:eb:03:aa:94:e5:93:
8f:81:bd:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:34:01 2025 by rpki-client