Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/OCw1udSAReLAsFz_erSWBmdqyM4.roa
File: OCw1udSAReLAsFz_erSWBmdqyM4.roa (raw, json)
Hash identifier: 5eUZkP4P6CTElC5OVGVkkPU8IahekeC5ufPO615Qa9U=
Subject key identifier: 38:2C:35:B9:D4:80:45:E2:C0:B0:5C:FF:7A:B4:96:06:67:6A:C8:CE
Certificate issuer: /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Certificate serial: 019427B5646DA55AC45BCE4EC0DD3F54A641
Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/OCw1udSAReLAsFz_erSWBmdqyM4.roa
Signing time: Thu 02 Jan 2025 15:49:46 +0000
ROA not before: Thu 02 Jan 2025 15:49:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56603
IP address blocks: 195.128.133.0/24 maxlen: 24
2a09:6280:1::/48 maxlen: 48
2a09:6280:4::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:64:6d:a5:5a:c4:5b:ce:4e:c0:dd:3f:54:a6:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Validity
Not Before: Jan 2 15:49:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=382c35b9d48045e2c0b05cff7ab49606676ac8ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:cc:85:5f:54:41:e3:11:9c:e1:f9:a0:78:e3:
72:da:c4:a8:3a:cf:8e:1d:92:7a:b2:48:22:f0:43:
31:71:fa:d6:05:ab:8f:3b:d6:87:8d:f3:17:ed:29:
ed:40:a8:4d:4d:1f:af:ff:38:57:77:bb:22:d0:5c:
ca:f7:f0:f0:08:c9:15:31:32:e3:eb:b3:75:d3:ff:
de:c6:aa:f6:36:d0:b1:d3:e6:ba:d7:e9:8a:45:d2:
2d:cd:cd:1e:df:e6:8c:f1:8d:fb:ae:95:30:84:4d:
94:64:4e:94:15:69:36:8f:58:38:b7:df:9b:40:6e:
08:46:7b:e9:7b:cc:e1:44:49:9d:10:a4:3a:7e:a1:
e8:28:6a:6d:39:57:cd:2e:49:72:4f:f9:ed:3f:f2:
59:0b:c1:00:3f:4c:e4:bf:c1:03:09:6b:bf:14:8a:
1c:57:2a:60:e5:a1:53:f4:98:0b:93:40:d5:60:9f:
7f:a0:7a:36:48:9c:15:e8:e7:d1:67:9b:3d:72:60:
47:af:60:ef:fd:75:a7:5b:fc:0f:c0:1b:00:e9:41:
a6:8b:6c:ad:98:13:17:20:e8:e7:58:b0:41:d8:3b:
bd:f8:ba:62:d0:0c:20:c5:e2:05:a5:7b:44:2e:25:
59:6e:4c:41:4b:86:9a:89:c3:d6:c0:9d:ef:00:20:
ee:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:2C:35:B9:D4:80:45:E2:C0:B0:5C:FF:7A:B4:96:06:67:6A:C8:CE
X509v3 Authority Key Identifier:
keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/OCw1udSAReLAsFz_erSWBmdqyM4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.128.133.0/24
IPv6:
2a09:6280:1::/48
2a09:6280:4::/48
Signature Algorithm: sha256WithRSAEncryption
c6:86:46:14:f6:aa:13:4a:38:be:b7:81:1f:8a:bc:ec:83:ce:
ef:37:de:a8:b9:c0:ba:4b:41:dc:21:9a:7a:c6:5b:9a:46:0e:
a6:40:b2:6b:be:2e:08:7f:1c:5b:d8:5a:cc:ca:8c:eb:90:81:
f8:ae:7d:06:67:b4:e2:e2:a5:d3:de:17:4e:92:bb:fe:a3:d8:
81:ff:dd:32:36:e8:9b:ab:1d:27:94:b1:13:51:8e:f3:31:72:
fe:80:6c:3a:cd:39:bc:23:15:03:69:e2:bc:21:c4:48:2b:eb:
06:82:ea:f7:85:f7:c5:67:be:91:9e:e0:95:b2:b5:b5:39:22:
f2:8b:bd:74:9a:59:03:18:23:51:ec:12:4e:35:a4:7f:92:e3:
67:c2:5a:5f:30:5f:b7:4a:31:1b:a4:dd:91:a8:f4:a2:9f:d5:
9f:9a:9f:1a:e0:4f:53:11:59:7c:f8:4f:c0:fa:33:17:c6:cf:
a9:4d:33:25:91:54:2f:3a:8c:6e:75:45:b9:9f:47:dc:7c:8a:
3c:a4:27:9f:2a:af:8c:09:86:4b:0a:bd:34:1e:04:6f:3e:ec:
9f:67:6a:a6:3f:10:9c:45:f2:73:e8:c2:92:28:82:7a:4e:d7:
af:85:0e:aa:e7:95:cd:86:1e:71:85:56:12:a9:d3:0d:4a:dc:
5c:9d:93:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:06:34 2025 by rpki-client