Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/gLTyoT53I5lI2-lkOJJIfUKtbTI.roa
File: gLTyoT53I5lI2-lkOJJIfUKtbTI.roa (raw, json)
Hash identifier: 12uR9b0I8gzTcAnLqYhZOre02X+/fR86aQPixtWQtWI=
Subject key identifier: 80:B4:F2:A1:3E:77:23:99:48:DB:E9:64:38:92:48:7D:42:AD:6D:32
Certificate issuer: /CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Certificate serial: 01941F8C977E77D07D6F9CE13D07721AEC7E
Authority key identifier: 06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/gLTyoT53I5lI2-lkOJJIfUKtbTI.roa
Signing time: Wed 01 Jan 2025 01:48:14 +0000
ROA not before: Wed 01 Jan 2025 01:48:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215415
IP address blocks: 195.114.201.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:97:7e:77:d0:7d:6f:9c:e1:3d:07:72:1a:ec:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Validity
Not Before: Jan 1 01:48:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=80b4f2a13e77239948dbe9643892487d42ad6d32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c1:97:6d:60:30:52:44:ed:0a:df:52:0f:36:
06:9a:9c:18:99:65:db:0b:c0:f8:50:24:38:32:07:
18:2b:42:40:49:bc:1a:5f:a1:35:cb:ba:cf:e4:2d:
4e:39:75:1d:aa:6e:58:62:5a:7d:0c:6a:fd:e8:d1:
55:f7:4c:b1:a4:71:37:96:61:b3:e0:4d:ee:1d:d6:
f6:65:2d:1a:78:99:7a:68:c5:61:f9:c3:00:a1:49:
39:c8:83:d2:d8:3b:bb:9c:84:6d:56:00:85:d8:21:
36:6b:40:79:a5:6e:61:e7:46:d0:a5:7d:d6:9b:a7:
42:18:cf:0c:dd:7f:ab:55:83:94:99:83:2d:95:5f:
a4:77:ad:1d:60:42:40:45:4e:70:c2:c4:c5:26:f2:
1e:6b:6b:83:51:e3:50:9f:1b:d4:55:40:16:31:63:
b2:c8:09:78:61:46:7b:f5:17:89:cb:ab:73:62:e6:
35:87:f7:3b:8a:b9:fd:71:43:fe:88:92:51:d1:fe:
69:1e:a1:43:5b:60:db:f9:23:bd:b0:eb:2b:4b:b0:
d0:49:cb:89:bf:1a:02:41:4e:f7:80:43:54:2a:9f:
5e:c1:09:c5:53:07:23:e2:55:21:02:66:2d:19:18:
e7:94:ad:13:0b:c6:56:3d:66:e6:01:63:48:69:73:
ab:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:B4:F2:A1:3E:77:23:99:48:DB:E9:64:38:92:48:7D:42:AD:6D:32
X509v3 Authority Key Identifier:
keyid:06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/gLTyoT53I5lI2-lkOJJIfUKtbTI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.114.201.0/24
Signature Algorithm: sha256WithRSAEncryption
12:29:1c:8b:00:b0:a7:da:c0:7a:f1:4f:d5:1e:80:f7:8b:f3:
b4:71:c4:b4:14:c0:7d:53:07:2f:80:97:ca:f3:6a:d7:fe:48:
06:39:92:73:f5:a5:0e:45:f8:02:a6:d6:9f:af:02:d7:09:5f:
3e:c9:a3:45:bd:81:06:d3:d0:24:7d:b4:07:6d:27:fa:c5:d7:
c4:ef:fe:00:84:07:27:59:37:dc:bd:ae:e6:7f:14:3b:b0:b6:
1c:28:1a:97:98:47:5f:d2:29:b0:55:a5:6a:27:19:d7:03:20:
89:5e:fa:44:ae:61:e2:b0:9d:ba:92:b0:97:7f:a6:eb:06:6e:
0a:b2:89:2f:c5:fb:3d:46:3e:ba:41:dc:05:be:69:e4:9d:a3:
1b:d3:ce:b3:36:67:b8:2a:b1:ca:25:a6:9b:e9:6a:5e:89:21:
b6:5b:e6:51:e5:d3:45:99:50:54:5c:4c:c8:3e:c4:cb:a7:f4:
c3:38:8d:80:7a:b1:90:93:3c:6a:f7:2e:9e:ed:e2:3a:40:a2:
91:84:61:06:5b:05:c8:66:fc:c3:b5:f4:7b:a8:a3:2d:aa:8a:
b1:3c:22:c1:c0:d6:8d:70:7f:a1:df:7f:15:e2:d2:60:ac:ab:
76:2a:c8:fb:60:0d:9d:b1:26:2f:1a:af:b4:65:91:af:f0:00:
03:c8:45:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 11:43:48 2025 by rpki-client