Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/1XXH5Tc2jjPAzQHYwkwVQAw_gHI.roa
File: 1XXH5Tc2jjPAzQHYwkwVQAw_gHI.roa (raw, json)
Hash identifier: dcfuBWAVvDzz9GpSqGo/OZzT5vbmtFCpLz+pXMeuFkc=
Subject key identifier: D5:75:C7:E5:37:36:8E:33:C0:CD:01:D8:C2:4C:15:40:0C:3F:80:72
Certificate issuer: /CN=30c409613fea0a2b442ce112e9cbdb485e01188f
Certificate serial: 01942143B227855CFB735BDBB9181423CE49
Authority key identifier: 30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/1XXH5Tc2jjPAzQHYwkwVQAw_gHI.roa
Signing time: Wed 01 Jan 2025 09:47:52 +0000
ROA not before: Wed 01 Jan 2025 09:47:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21324
IP address blocks: 195.187.133.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:b2:27:85:5c:fb:73:5b:db:b9:18:14:23:ce:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30c409613fea0a2b442ce112e9cbdb485e01188f
Validity
Not Before: Jan 1 09:47:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d575c7e537368e33c0cd01d8c24c15400c3f8072
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:4a:63:f2:00:ef:a3:06:1e:2d:b9:a4:9d:85:
99:a1:2d:a2:03:db:0f:0c:4e:79:e2:c4:e8:4d:fb:
eb:fc:63:1a:2a:3a:04:14:d8:f7:a7:22:87:25:77:
dd:3b:42:13:f6:22:84:f9:7b:e6:cd:04:ec:7d:cc:
6c:47:7c:8d:d4:9d:7d:b6:bb:0e:e7:44:24:cb:f5:
c8:6a:68:6c:33:26:92:65:3c:1c:0a:6c:b1:20:a2:
ba:49:b7:8f:ab:78:96:42:77:3f:d1:fe:8e:31:30:
77:ac:55:6e:67:72:5e:cb:7c:9b:b9:9f:c1:f7:83:
63:85:f3:c1:5d:3d:d3:d4:df:f1:79:61:44:42:59:
18:10:ea:0d:a3:4e:da:f3:05:6a:69:b2:49:e9:b2:
c3:41:9a:c1:94:14:5e:d5:b9:83:9c:05:f2:42:50:
3c:90:8b:7b:00:76:36:64:b4:d8:ef:fe:69:73:dd:
1f:ca:2f:88:27:4d:c9:d3:69:be:6e:d3:0d:61:c6:
c0:fc:7b:9a:30:98:57:de:e2:05:75:28:e5:da:da:
7a:93:88:4f:25:8a:55:46:28:11:d0:ce:d1:c9:ef:
19:21:4c:8c:39:0d:d8:0f:cd:22:a6:71:01:cf:f7:
46:3e:47:84:f6:98:18:5f:40:40:8a:1a:6b:90:48:
4a:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:75:C7:E5:37:36:8E:33:C0:CD:01:D8:C2:4C:15:40:0C:3F:80:72
X509v3 Authority Key Identifier:
keyid:30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/1XXH5Tc2jjPAzQHYwkwVQAw_gHI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.187.133.0/24
Signature Algorithm: sha256WithRSAEncryption
76:33:3c:b0:6a:b6:e5:cb:62:3d:ad:3e:a4:9b:e4:2d:5b:a0:
6f:b0:87:a9:52:84:21:c2:d4:36:e1:aa:03:31:55:ca:10:cc:
b7:45:49:5d:43:3d:2d:ad:2c:38:6d:50:10:12:e1:64:fb:42:
53:8b:50:b7:7b:14:d9:d2:84:b3:6e:59:ed:98:1b:1e:f6:8e:
2d:f7:77:55:1f:05:19:01:53:0d:18:79:f7:26:60:6a:e5:e8:
92:16:4d:ab:17:5e:99:f3:a7:79:b0:74:f5:2a:bb:aa:15:5b:
33:79:02:25:67:c6:aa:cb:1d:53:f1:e1:e3:47:53:27:25:46:
b0:9a:ec:6b:c8:51:bf:b6:03:b1:4f:3e:b2:fa:82:fc:e2:46:
2d:bd:1d:40:14:ac:2d:91:20:09:a1:3a:42:21:4d:6f:4d:62:
37:94:ec:f9:3e:d7:2b:d9:12:f6:2e:2e:df:18:64:14:96:bd:
b6:01:c7:f0:8a:0c:00:37:84:15:45:f2:9e:f7:c2:df:2a:5f:
21:93:f3:b1:21:5c:c7:ba:34:8b:f5:09:77:7b:69:f9:0d:d0:
0c:75:6c:60:a9:96:1b:74:2e:72:d7:fd:b6:de:f4:0b:d7:f4:
02:f1:01:c6:ff:4a:2c:f9:17:c7:1f:5f:25:34:12:7f:e0:4d:
72:43:24:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:27:00 2025 by rpki-client