Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/12rPwjWiqKX4g14Og2Y3siy4gis.roa
File: 12rPwjWiqKX4g14Og2Y3siy4gis.roa (raw, json)
Hash identifier: qAGlSM8DGwCcVGwmQlaf/L77w70WF6d6NuOg2dLojfE=
Subject key identifier: D7:6A:CF:C2:35:A2:A8:A5:F8:83:5E:0E:83:66:37:B2:2C:B8:82:2B
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01942824A848CC772783201FA3D325DEA25C
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/12rPwjWiqKX4g14Og2Y3siy4gis.roa
Signing time: Thu 02 Jan 2025 17:51:18 +0000
ROA not before: Thu 02 Jan 2025 17:51:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200385
IP address blocks: 195.178.121.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:a8:48:cc:77:27:83:20:1f:a3:d3:25:de:a2:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 17:51:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d76acfc235a2a8a5f8835e0e836637b22cb8822b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:5e:6f:c6:95:d1:77:1a:1f:b3:89:d1:61:39:
0b:98:11:14:71:f0:07:ee:7e:cd:85:5a:4d:eb:f5:
fb:2e:1e:61:de:e6:34:51:6a:82:b9:81:8c:ee:e0:
29:f3:28:a9:c7:59:09:f4:35:8f:7f:9c:b3:0b:d7:
32:64:71:e5:b7:1b:32:79:91:86:cc:17:62:b1:3a:
69:90:6a:cf:ca:4c:b8:2e:53:33:08:32:e1:36:bb:
db:a6:49:e4:94:62:ba:fc:ff:9c:24:15:a7:86:a1:
a4:ed:32:ea:51:ba:0f:23:5c:a5:b6:f8:35:e6:04:
c1:1a:db:46:9c:ce:e5:23:66:c8:3d:7c:93:3b:54:
3b:d1:1d:c2:b6:02:6e:f3:40:d6:0d:09:3b:61:21:
b4:09:96:67:9c:27:c2:a5:7e:29:68:7d:6c:d8:b2:
88:40:df:b9:ed:c0:83:ed:cc:cc:b6:5b:0f:5e:06:
97:a2:be:22:11:3b:04:44:3c:19:7d:ac:c8:dc:19:
da:48:5d:eb:4b:0f:6b:b8:b4:d7:38:8f:bd:e7:3a:
58:b8:3b:4e:6b:75:24:3c:ec:ae:50:1a:e4:4e:a3:
a8:d6:a0:54:30:7a:d2:5d:e9:4b:a1:18:08:91:d4:
1d:a2:be:40:79:9a:b6:64:53:1a:b3:85:0f:cb:44:
e6:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:6A:CF:C2:35:A2:A8:A5:F8:83:5E:0E:83:66:37:B2:2C:B8:82:2B
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/12rPwjWiqKX4g14Og2Y3siy4gis.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.178.121.0/24
Signature Algorithm: sha256WithRSAEncryption
35:74:c5:23:d8:d3:6b:33:31:05:54:77:eb:21:98:5a:b0:e0:
2e:cb:99:f9:ea:37:2a:10:fb:b8:b7:f7:46:77:23:47:d9:97:
c7:86:b7:cd:dd:06:a9:8c:cb:49:ce:ab:85:91:ad:66:02:b3:
cf:52:0f:21:01:65:8a:14:78:c4:94:f6:4f:06:a8:89:3b:6b:
9e:5e:4c:c5:5c:b8:66:89:82:09:3b:6a:f4:d8:67:62:66:74:
df:ac:e4:a3:88:77:bc:d9:58:14:c5:27:9a:d9:f8:cc:66:4a:
86:e1:83:32:18:7b:70:bc:39:91:6e:30:cd:09:ce:b7:7e:c6:
29:17:01:61:95:7a:50:ab:5a:99:46:7b:6d:aa:14:f5:e1:6d:
4d:4b:03:81:48:0b:4f:ab:8e:77:01:00:56:b2:2e:b8:0b:05:
53:92:05:08:8b:16:da:40:8d:c8:0f:d2:10:3e:9c:2d:1f:da:
79:f4:3b:43:3f:6f:79:d5:16:b3:4a:cc:1e:48:69:ea:23:b4:
08:c4:ec:4b:63:11:e3:2c:84:ba:98:5f:d3:d1:fb:fa:30:f4:
df:df:63:41:63:57:30:39:04:5f:01:0d:08:9b:37:2d:47:9a:
7f:13:5e:3a:d4:d1:4b:29:5e:f9:39:5e:51:b6:ce:6f:94:29:
b6:19:7b:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:54:02 2025 by rpki-client