Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/cm8GtcTHwoYStisNyga9gSVGLUU.roa
File: cm8GtcTHwoYStisNyga9gSVGLUU.roa (raw, json)
Hash identifier: v40FCmdUz2OM9eR6s3YOOpZt+uxDnzYy59kW+69A10A=
Subject key identifier: 72:6F:06:B5:C4:C7:C2:86:12:B6:2B:0D:CA:06:BD:81:25:46:2D:45
Certificate issuer: /CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Certificate serial: 01941F8C916AEC0E0AE72B767819477B55B0
Authority key identifier: 06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/cm8GtcTHwoYStisNyga9gSVGLUU.roa
Signing time: Wed 01 Jan 2025 01:48:13 +0000
ROA not before: Wed 01 Jan 2025 01:48:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9009
IP address blocks: 195.114.204.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:91:6a:ec:0e:0a:e7:2b:76:78:19:47:7b:55:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Validity
Not Before: Jan 1 01:48:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=726f06b5c4c7c28612b62b0dca06bd8125462d45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:48:40:b9:f6:d2:7c:82:51:7b:80:63:42:52:
ee:f1:7e:7e:0b:d2:b7:96:0d:96:b1:47:29:4e:80:
5e:b5:e4:93:fa:19:c7:3d:0b:20:19:c6:49:91:a4:
9b:9f:29:a8:7b:1a:87:27:16:7e:ac:d5:d9:c0:5a:
64:04:70:e4:26:cb:7b:8d:bb:ec:a1:da:5e:1e:e5:
bb:e1:17:e0:5a:a6:f9:38:d3:05:2e:4d:3e:16:85:
c6:6b:4b:9f:00:86:75:17:61:12:3f:35:fc:ac:2f:
ce:63:86:3c:5b:ba:47:81:9c:b8:f2:06:dd:38:55:
d7:cf:9f:35:ce:42:b4:61:80:18:a7:c9:9f:ed:bd:
d6:63:8f:f3:f7:3f:53:90:d6:35:cc:f6:7e:6f:dc:
9f:3d:e8:d3:d6:07:0f:ab:11:37:8e:aa:24:94:80:
08:57:2c:08:85:70:4f:5f:3f:b8:7c:eb:f2:bc:11:
6a:d6:26:44:ac:06:22:d7:22:7f:ce:f6:6d:44:91:
00:19:26:d6:0b:5a:29:c2:4d:10:54:70:d4:20:ae:
3f:8f:9e:13:e3:8a:bd:e7:a0:48:0e:53:8a:b1:ae:
a4:e8:b7:62:a7:e6:d4:a1:4d:e0:68:71:37:5e:54:
a4:c2:72:00:13:ee:29:5f:66:56:3d:c6:39:21:a8:
8b:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:6F:06:B5:C4:C7:C2:86:12:B6:2B:0D:CA:06:BD:81:25:46:2D:45
X509v3 Authority Key Identifier:
keyid:06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/cm8GtcTHwoYStisNyga9gSVGLUU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.114.204.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:21:a4:27:b1:eb:1c:0d:b6:ad:13:c0:45:29:bc:e4:74:ed:
ae:66:24:d9:27:7b:e3:3d:35:14:c0:8b:93:ac:73:fd:f3:a7:
36:85:85:51:18:54:da:1b:1e:76:a9:a2:61:40:ae:8e:e5:a4:
5d:3a:53:e4:ba:7c:78:0f:a3:39:1f:0c:bd:af:49:89:ed:86:
21:45:26:f4:27:01:af:6c:55:ec:0b:f0:c9:a0:7a:4d:bb:5c:
90:01:db:fd:05:fd:ec:b8:c4:d7:ba:a3:7b:62:29:07:f9:05:
5f:7e:86:aa:2e:07:71:dc:5f:00:c5:bb:70:f2:da:47:e8:50:
98:37:a4:12:d7:4b:39:71:25:f9:fe:e5:48:c9:e3:4c:37:32:
01:01:b9:ee:af:79:ca:f0:bb:76:a3:28:81:2c:1c:cc:04:1c:
e0:da:a1:a0:29:57:b0:82:19:b6:de:35:f2:a8:c3:83:00:d1:
d3:dd:c8:a8:3a:4e:73:2d:4f:3a:98:9e:b7:20:d8:41:31:5d:
01:c6:84:1a:c6:0a:d9:99:9d:9b:52:44:24:08:e8:a8:70:13:
6c:f4:f3:53:8b:e9:2f:b2:4f:b3:f6:dd:23:d0:65:54:6e:cf:
78:0c:1b:2a:ad:1e:b7:24:6d:8a:00:a7:94:80:ac:e8:69:ad:
e6:33:c9:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:17:48 2025 by rpki-client