Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/7e18f0-af1d-47c1-8db5-5a5233dc0ce0/1/aMP60-6kIcycfPRX1mrnGq3rKu4.roa
File: aMP60-6kIcycfPRX1mrnGq3rKu4.roa (raw, json)
Hash identifier: 3JfLcJd1nqn3CbGO/VzxfaF4cayveMgFQoD5eZc253E=
Subject key identifier: 68:C3:FA:D3:EE:A4:21:CC:9C:7C:F4:57:D6:6A:E7:1A:AD:EB:2A:EE
Certificate issuer: /CN=893afc6efe62990a26932f40e150b27eed539c4b
Certificate serial: 019424B393CB63F23A6B24465E05B7394D28
Authority key identifier: 89:3A:FC:6E:FE:62:99:0A:26:93:2F:40:E1:50:B2:7E:ED:53:9C:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iTr8bv5imQomky9A4VCyfu1TnEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/7e18f0-af1d-47c1-8db5-5a5233dc0ce0/1/aMP60-6kIcycfPRX1mrnGq3rKu4.roa
Signing time: Thu 02 Jan 2025 01:48:56 +0000
ROA not before: Thu 02 Jan 2025 01:48:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12330
IP address blocks: 195.94.96.0/21 maxlen: 21
195.94.104.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:93:cb:63:f2:3a:6b:24:46:5e:05:b7:39:4d:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=893afc6efe62990a26932f40e150b27eed539c4b
Validity
Not Before: Jan 2 01:48:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=68c3fad3eea421cc9c7cf457d66ae71aadeb2aee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:53:cd:0b:1e:ac:93:e9:d0:41:db:96:c7:75:
2a:fb:3b:cd:27:6b:1d:45:6f:05:5d:85:13:d3:3a:
92:b5:a7:31:d7:55:c8:bb:05:50:12:79:d5:43:26:
2a:a3:bc:35:94:53:72:74:1c:1a:cd:9f:ac:2d:68:
62:64:b1:65:be:5d:f1:e8:2d:59:1b:23:e3:c0:0f:
a2:9c:94:7a:e8:d5:e2:a5:bf:2d:6f:1a:ab:c4:21:
40:cf:31:66:09:ab:98:fc:05:7a:e3:72:94:6d:9e:
3b:10:76:55:08:06:7d:54:fa:5e:03:4c:9e:4a:09:
3a:b5:d1:51:1e:e4:6c:8e:8f:76:be:e4:10:d7:92:
09:d4:de:78:0d:1a:a1:e2:6d:e4:d5:46:03:c6:40:
50:58:9f:7b:24:41:16:39:a0:12:6e:43:c5:0f:05:
3a:87:3d:2e:2a:3e:e9:0f:6f:42:dd:94:67:c1:d0:
4f:3e:75:1b:da:74:70:8d:5e:09:76:7e:27:de:89:
5f:be:6c:90:19:e5:03:8b:c5:6a:d4:c4:7d:bd:dc:
97:a0:8d:03:40:df:cd:98:23:0b:0e:33:02:86:d5:
70:4e:a5:0e:db:23:3d:f8:ca:3d:d6:da:44:28:76:
66:c7:26:87:45:77:52:2c:10:d8:d5:74:b1:64:77:
e0:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:C3:FA:D3:EE:A4:21:CC:9C:7C:F4:57:D6:6A:E7:1A:AD:EB:2A:EE
X509v3 Authority Key Identifier:
keyid:89:3A:FC:6E:FE:62:99:0A:26:93:2F:40:E1:50:B2:7E:ED:53:9C:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iTr8bv5imQomky9A4VCyfu1TnEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/7e18f0-af1d-47c1-8db5-5a5233dc0ce0/1/aMP60-6kIcycfPRX1mrnGq3rKu4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/7e18f0-af1d-47c1-8db5-5a5233dc0ce0/1/iTr8bv5imQomky9A4VCyfu1TnEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.94.96.0-195.94.107.255
Signature Algorithm: sha256WithRSAEncryption
53:fd:05:12:7b:b3:6b:06:19:4b:8a:c8:b3:b5:27:f6:64:eb:
cf:fa:01:b9:ef:38:43:83:4f:04:3b:d8:ea:d1:db:8c:35:4a:
d1:e1:00:ad:c2:c8:bd:6d:cb:a6:78:db:be:20:53:85:53:69:
d2:97:14:3f:ed:33:31:80:45:76:e0:95:7c:0e:d8:40:05:64:
85:20:36:66:56:da:91:2c:3b:11:7a:b0:40:cb:7c:73:19:74:
9c:08:8e:a3:96:81:cd:04:e8:eb:df:aa:2a:4c:d0:81:82:4a:
72:b2:7b:80:3f:8e:fc:4f:cf:94:9c:fc:57:0b:45:48:0d:22:
c3:7b:0f:c1:c8:80:1e:c2:1e:c4:93:73:8c:ff:0f:b3:8b:52:
27:ac:ca:03:6c:04:41:d9:e0:9e:9f:b0:95:de:ac:13:54:02:
05:fd:9b:f8:7c:d0:a7:38:55:b6:c4:22:05:9f:46:b6:ec:98:
a1:98:df:18:28:70:04:a5:3a:cf:78:68:6e:16:d7:6c:46:31:
d4:54:d7:17:37:6e:b7:fb:41:6e:f1:60:17:5d:38:0e:92:79:
19:2c:76:03:06:16:68:9d:7d:46:25:f3:46:f9:9d:30:cf:25:
5a:ea:57:66:ed:bb:19:99:6a:5e:64:fb:35:a7:9e:03:22:26:
5f:9e:46:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:16:54 2025 by rpki-client