Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/12274e-316b-4f3c-8e6c-dcfeb3f10c86/1/IrngZwNeCRKtAoxB4sjafysXZOU.roa
File: IrngZwNeCRKtAoxB4sjafysXZOU.roa (raw, json)
Hash identifier: F88BOJPqoOgD37Dontv64Q9dEIIVW8ruH+Ll3zUdJ5A=
Subject key identifier: 22:B9:E0:67:03:5E:09:12:AD:02:8C:41:E2:C8:DA:7F:2B:17:64:E5
Certificate issuer: /CN=292edce09f112ab2d3ffaf4cb2a38eaf1c1af92e
Certificate serial: 019422FB8F6CF793D835D3BBD947795A81A1
Authority key identifier: 29:2E:DC:E0:9F:11:2A:B2:D3:FF:AF:4C:B2:A3:8E:AF:1C:1A:F9:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KS7c4J8RKrLT_69MsqOOrxwa-S4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/12274e-316b-4f3c-8e6c-dcfeb3f10c86/1/IrngZwNeCRKtAoxB4sjafysXZOU.roa
Signing time: Wed 01 Jan 2025 17:48:19 +0000
ROA not before: Wed 01 Jan 2025 17:48:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 195.60.86.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:8f:6c:f7:93:d8:35:d3:bb:d9:47:79:5a:81:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=292edce09f112ab2d3ffaf4cb2a38eaf1c1af92e
Validity
Not Before: Jan 1 17:48:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=22b9e067035e0912ad028c41e2c8da7f2b1764e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:37:79:12:a5:1e:60:fc:eb:30:15:31:75:33:
41:bf:e0:33:7e:17:5c:92:26:0a:75:8b:12:0d:bd:
44:9d:2a:61:17:ff:52:2e:cf:1a:97:35:1e:94:09:
ee:bb:aa:31:fb:83:e8:79:4c:41:7d:ef:56:96:65:
fb:08:c0:ef:0b:61:7f:a9:7b:96:a9:00:d3:45:7f:
95:90:ef:d4:60:e0:ff:25:37:3e:49:be:f6:13:a0:
3d:15:b2:50:c1:a9:71:ed:79:64:d9:ee:41:19:c4:
4b:01:ed:e3:01:1b:4e:22:23:5a:5b:88:a2:c6:15:
8e:a6:d0:1a:8f:0e:35:47:5a:ed:15:94:9d:de:4c:
8d:12:b8:9b:a7:a7:77:7d:73:52:ed:05:43:2b:6a:
67:46:fe:3e:4f:bb:b2:09:b8:c6:87:d0:88:84:9e:
ff:02:23:ba:89:08:50:18:28:bf:86:5d:a0:e8:47:
89:fc:4d:82:2d:5a:34:3e:99:62:d0:2e:e0:25:d7:
47:08:e3:80:a9:0f:00:03:8f:c3:eb:f1:b5:a1:ff:
a4:e7:0f:14:dd:7c:10:d4:a6:f0:4b:80:a6:cf:27:
12:9f:14:8b:39:91:b9:5b:91:2d:20:0f:84:02:94:
be:4d:f6:c6:b7:54:50:f8:00:07:6e:b8:58:da:ac:
01:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:B9:E0:67:03:5E:09:12:AD:02:8C:41:E2:C8:DA:7F:2B:17:64:E5
X509v3 Authority Key Identifier:
keyid:29:2E:DC:E0:9F:11:2A:B2:D3:FF:AF:4C:B2:A3:8E:AF:1C:1A:F9:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KS7c4J8RKrLT_69MsqOOrxwa-S4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/12274e-316b-4f3c-8e6c-dcfeb3f10c86/1/IrngZwNeCRKtAoxB4sjafysXZOU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/12274e-316b-4f3c-8e6c-dcfeb3f10c86/1/KS7c4J8RKrLT_69MsqOOrxwa-S4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.60.86.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:7d:2a:99:5a:21:12:9c:5d:27:a9:76:1e:b3:a4:eb:0a:12:
94:c7:8a:85:a1:fe:e3:49:0c:84:d8:af:09:a2:6c:ee:da:e9:
72:c0:4f:68:76:fc:a8:3f:aa:fd:a6:2b:0c:e6:58:d3:a9:d2:
37:2a:e0:19:fa:79:03:20:2a:68:25:d4:92:ee:c1:f2:da:82:
5f:c7:a1:62:ac:ce:1a:bf:69:16:e7:f2:6e:60:45:aa:26:c9:
a5:1e:7f:53:ae:9b:3d:bb:03:10:f9:7c:bc:1b:cc:f0:77:3a:
e5:90:c7:6f:98:b9:1e:1d:f3:1b:c7:d4:9a:30:37:55:e7:ef:
61:9b:7e:aa:2e:59:4f:88:d6:46:64:08:f1:19:bb:67:37:6f:
9d:fb:e8:b2:96:4c:4b:c9:05:77:6b:be:65:5a:a5:d4:89:da:
88:01:0b:93:bb:f9:e4:fa:d4:0e:61:33:06:da:54:c0:4b:6f:
23:ff:9a:6a:88:c9:c6:c0:2d:e7:8c:7a:a3:97:d2:6a:a7:b5:
eb:fc:1c:03:ab:b2:97:0a:02:c0:10:db:a6:17:85:03:d3:5c:
7a:6c:2b:ed:ee:43:73:34:c7:33:6b:c8:03:aa:1c:c3:2c:05:
e0:f8:a9:5d:58:cd:04:d8:58:e2:cf:ef:3b:d3:13:eb:c7:96:
4b:2e:72:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:47:55 2025 by rpki-client