Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/b8a6a4-f7ea-4afe-b60f-9c0de3652738/1/EDIVTzTnD9slx8_sN2MDGo10vX0.roa
File: EDIVTzTnD9slx8_sN2MDGo10vX0.roa (raw, json)
Hash identifier: niRdCwbiqIr4Uo3WkGhM3gC54LX+BnKXCufZ8GceLvM=
Subject key identifier: 10:32:15:4F:34:E7:0F:DB:25:C7:CF:EC:37:63:03:1A:8D:74:BD:7D
Certificate issuer: /CN=d81cf1aac21aa5823b019de91aeeec23e3e526db
Certificate serial: 019428239B8051825C40C112F73A36762928
Authority key identifier: D8:1C:F1:AA:C2:1A:A5:82:3B:01:9D:E9:1A:EE:EC:23:E3:E5:26:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2BzxqsIapYI7AZ3pGu7sI-PlJts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/b8a6a4-f7ea-4afe-b60f-9c0de3652738/1/EDIVTzTnD9slx8_sN2MDGo10vX0.roa
Signing time: Thu 02 Jan 2025 17:50:09 +0000
ROA not before: Thu 02 Jan 2025 17:50:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204027
IP address blocks: 195.43.60.0/22 maxlen: 22
195.43.60.0/24 maxlen: 24
2001:678:f0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:9b:80:51:82:5c:40:c1:12:f7:3a:36:76:29:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d81cf1aac21aa5823b019de91aeeec23e3e526db
Validity
Not Before: Jan 2 17:50:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1032154f34e70fdb25c7cfec3763031a8d74bd7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a4:58:25:88:62:13:81:be:7e:a6:5f:af:ef:
5a:5d:86:60:87:4c:f1:e0:e8:69:76:60:9a:05:27:
4b:95:99:ea:bf:a2:95:22:e3:5d:26:70:b3:a1:10:
3d:64:9a:7b:98:83:de:7c:71:55:04:c5:e7:64:fb:
a9:ba:96:b8:ea:ca:5d:59:97:c7:d4:a7:79:2c:cc:
80:76:a4:20:7e:6f:da:04:6c:4e:3a:1e:61:ad:3c:
96:92:77:fb:19:fd:96:ea:95:63:19:5e:08:94:3c:
0b:15:d7:79:d1:15:de:cd:ac:ff:be:2e:d6:92:5a:
fc:ba:17:94:c0:4d:9e:b9:65:1d:dd:68:79:28:d5:
61:7d:a9:89:de:6b:97:5e:45:44:08:79:99:d4:bd:
32:65:d4:79:e1:b4:f5:94:c4:c5:2e:29:48:5f:23:
9d:d7:e9:e1:66:9b:c3:c2:ae:e5:26:0c:5a:bb:cd:
f4:03:a8:37:d2:5b:7b:1f:8e:3b:1e:00:1a:09:1a:
dd:dd:f4:ff:15:ec:35:b0:16:f1:07:a0:e6:f6:1d:
dc:7f:84:26:09:dd:80:5a:d6:2a:9b:c0:17:4f:3a:
c8:ea:98:68:9e:0c:23:10:4b:87:c9:64:25:74:4a:
86:ec:de:da:34:db:3f:02:5f:86:8e:98:ad:4a:08:
a9:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:32:15:4F:34:E7:0F:DB:25:C7:CF:EC:37:63:03:1A:8D:74:BD:7D
X509v3 Authority Key Identifier:
keyid:D8:1C:F1:AA:C2:1A:A5:82:3B:01:9D:E9:1A:EE:EC:23:E3:E5:26:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2BzxqsIapYI7AZ3pGu7sI-PlJts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/b8a6a4-f7ea-4afe-b60f-9c0de3652738/1/EDIVTzTnD9slx8_sN2MDGo10vX0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/b8a6a4-f7ea-4afe-b60f-9c0de3652738/1/2BzxqsIapYI7AZ3pGu7sI-PlJts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.43.60.0/22
IPv6:
2001:678:f0::/48
Signature Algorithm: sha256WithRSAEncryption
4d:ca:d0:b5:78:13:93:4c:20:21:92:c3:4a:f6:78:05:6c:7f:
f9:cb:b1:6a:55:27:b0:17:1a:72:31:99:00:1a:71:12:90:83:
11:b1:51:cf:b7:c2:12:c1:3b:7e:2f:f1:a3:b1:3e:93:ef:76:
0f:18:75:6c:2b:83:be:61:7b:bb:31:de:61:a4:d4:0b:f1:23:
d5:fe:67:29:54:ea:e7:26:ae:f6:eb:b5:40:cf:91:73:03:b5:
5b:b0:11:43:c3:24:7e:1e:98:34:4a:38:94:f7:9c:a5:18:f4:
9a:16:f7:66:fb:0d:b1:55:83:f2:62:80:6e:d5:a2:4c:2b:36:
9d:4f:a3:3b:57:de:83:9e:5e:25:b3:f5:70:0e:88:92:bf:e0:
02:66:e5:56:63:05:d8:72:98:8f:ae:09:06:96:70:33:e1:f8:
87:18:1a:16:62:d1:f1:21:12:43:c4:6f:88:dc:9e:3a:13:9e:
76:ff:d1:eb:ba:57:aa:64:ae:bf:68:a6:5e:1a:b9:bd:9a:b8:
7f:ab:de:99:fb:79:3d:16:43:0f:95:0b:e7:a1:be:c4:c0:8c:
71:ba:6a:b3:e1:67:5f:56:b5:4c:92:10:d7:7e:7d:b8:ab:e7:
f5:2e:77:45:20:b5:1c:55:19:0a:c5:87:f1:f8:94:81:a3:bf:
33:fe:fb:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:36:56 2025 by rpki-client