Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/d16463-89be-4f5b-b2f2-acc41cacf7e1/1/dLJ0i3DKxKOgLSZU6DT_1_-wzDs.roa
File: dLJ0i3DKxKOgLSZU6DT_1_-wzDs.roa (raw, json)
Hash identifier: R+7BGQyfLFShlywgi4Re33H2XJ0XnH/YSJRVXJB4EDE=
Subject key identifier: 74:B2:74:8B:70:CA:C4:A3:A0:2D:26:54:E8:34:FF:D7:FF:B0:CC:3B
Certificate issuer: /CN=cbd95ead6d2a1daf2ef687acb4c29e76076b2809
Certificate serial: 0194228D783BDEE6B87130924A25BC76637E
Authority key identifier: CB:D9:5E:AD:6D:2A:1D:AF:2E:F6:87:AC:B4:C2:9E:76:07:6B:28:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9lerW0qHa8u9oestMKedgdrKAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/d16463-89be-4f5b-b2f2-acc41cacf7e1/1/dLJ0i3DKxKOgLSZU6DT_1_-wzDs.roa
Signing time: Wed 01 Jan 2025 15:48:04 +0000
ROA not before: Wed 01 Jan 2025 15:48:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200259
IP address blocks: 195.189.176.0/24 maxlen: 24
2001:67c:2ebc::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:78:3b:de:e6:b8:71:30:92:4a:25:bc:76:63:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbd95ead6d2a1daf2ef687acb4c29e76076b2809
Validity
Not Before: Jan 1 15:48:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=74b2748b70cac4a3a02d2654e834ffd7ffb0cc3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:cc:12:8e:44:49:42:0a:e9:e5:c1:54:17:f7:
96:24:d7:13:8d:a4:aa:a4:dd:0f:94:62:86:d5:ed:
88:32:28:1f:95:8f:c8:90:88:5e:50:74:f0:fe:30:
0b:a4:90:37:5b:f6:81:3e:9d:44:fc:29:14:d6:ae:
7c:c3:b0:dd:28:be:71:ec:03:41:6b:16:f2:ae:61:
47:fe:d8:31:91:d8:58:83:91:55:31:8a:00:81:3c:
1e:e9:1c:e2:5a:8c:c8:ed:92:74:8d:7d:87:3f:72:
de:2b:06:96:d0:2c:7e:2f:ff:9f:db:14:ea:70:ea:
72:ee:c7:b3:4d:1f:2e:6f:4f:e2:46:e9:78:5c:fa:
28:00:4b:c4:03:d7:4d:61:c8:5c:22:a1:5f:b3:c5:
c6:8b:26:e9:10:51:80:e6:d9:ee:c7:c6:ba:e5:e5:
26:89:b9:15:2c:e3:f6:1f:e2:30:07:23:78:64:da:
37:3c:3f:ac:c9:44:77:a8:53:02:7c:66:94:e9:d6:
4f:be:c3:77:59:5d:cd:31:b3:44:cb:e8:a8:1a:07:
a9:84:87:8c:2a:ff:12:d4:79:8a:53:e5:54:41:36:
3c:a4:2f:92:ee:4f:ff:19:1e:0e:81:12:58:83:4e:
be:05:f9:65:74:77:41:90:6a:45:86:cf:dc:01:3d:
06:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:B2:74:8B:70:CA:C4:A3:A0:2D:26:54:E8:34:FF:D7:FF:B0:CC:3B
X509v3 Authority Key Identifier:
keyid:CB:D9:5E:AD:6D:2A:1D:AF:2E:F6:87:AC:B4:C2:9E:76:07:6B:28:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9lerW0qHa8u9oestMKedgdrKAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/d16463-89be-4f5b-b2f2-acc41cacf7e1/1/dLJ0i3DKxKOgLSZU6DT_1_-wzDs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/d16463-89be-4f5b-b2f2-acc41cacf7e1/1/y9lerW0qHa8u9oestMKedgdrKAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.189.176.0/24
IPv6:
2001:67c:2ebc::/48
Signature Algorithm: sha256WithRSAEncryption
05:e6:9f:11:3d:48:dd:54:bb:ca:2f:c9:6e:a1:92:83:9e:9a:
af:81:ca:18:67:78:72:35:0b:09:cf:4b:0d:86:1e:4b:9b:a2:
f1:c7:b4:02:ca:00:30:90:eb:ce:27:75:80:9e:5f:31:51:e4:
61:ac:e2:23:24:2b:76:92:c8:de:bc:35:d7:9a:33:d6:c1:ba:
cb:8a:ec:0d:72:ed:15:17:64:55:72:37:0c:73:4b:6b:d6:eb:
5f:89:c8:2e:b2:29:8e:ef:1f:42:dc:dd:ca:68:00:f0:2d:1b:
32:56:7e:9f:b7:d1:a9:c5:82:1c:e1:b7:25:eb:2f:ae:40:71:
22:c4:b7:24:70:80:19:1e:7a:e1:ff:52:24:14:fc:08:f0:49:
86:9c:75:b5:e6:83:d2:41:7d:1b:d6:e6:4a:5d:8a:03:28:b7:
ed:96:3f:f4:8e:6a:f2:74:0d:db:43:4b:98:6c:18:fa:00:43:
6a:8d:bf:be:bc:32:5c:26:7c:07:cd:0b:fa:68:81:14:e4:45:
51:06:16:fc:57:5f:b3:aa:e5:30:25:50:df:1d:a1:6d:5b:90:
c7:e5:9b:76:8b:be:43:4e:74:46:0c:9d:00:a7:2c:cb:93:82:
8c:c0:8d:73:2e:23:fe:1f:95:98:a5:44:7d:50:ff:6e:98:7a:
76:30:a8:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:10:34 2025 by rpki-client