Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/J6jwomPMeZ1BKUT1HKADpUVqL4Q.roa
File: J6jwomPMeZ1BKUT1HKADpUVqL4Q.roa (raw, json)
Hash identifier: ZT8/tzUWsV32mp8ODBnGUiawz3yA5cw8UBFbLvsiiBI=
Subject key identifier: 27:A8:F0:A2:63:CC:79:9D:41:29:44:F5:1C:A0:03:A5:45:6A:2F:84
Certificate issuer: /CN=30c409613fea0a2b442ce112e9cbdb485e01188f
Certificate serial: 01942143C4AECF545302E1DADF2E4205051F
Authority key identifier: 30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/J6jwomPMeZ1BKUT1HKADpUVqL4Q.roa
Signing time: Wed 01 Jan 2025 09:47:56 +0000
ROA not before: Wed 01 Jan 2025 09:47:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212837
IP address blocks: 195.187.108.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:c4:ae:cf:54:53:02:e1:da:df:2e:42:05:05:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30c409613fea0a2b442ce112e9cbdb485e01188f
Validity
Not Before: Jan 1 09:47:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=27a8f0a263cc799d412944f51ca003a5456a2f84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:df:a5:f5:ce:70:74:ac:15:d0:80:ca:1c:0d:
00:7b:65:3e:4f:1e:62:66:86:43:00:0c:0e:a9:49:
9e:61:a5:60:9d:79:5c:47:d9:b1:a5:49:06:a1:27:
cf:de:b3:da:35:61:88:13:27:4f:70:25:33:df:d9:
d2:74:47:67:81:08:d4:0d:ab:d1:bf:9f:e0:a9:6b:
72:b1:21:bb:e8:e8:45:ec:51:bc:84:07:b5:58:01:
13:fe:73:30:8b:64:08:90:5a:dd:b8:b8:92:99:92:
2d:a0:8e:2c:04:b6:c6:14:82:23:98:ef:93:90:0f:
bf:62:1b:b5:29:54:c8:7f:3c:d1:99:d2:8d:c5:70:
71:69:da:c8:dc:d7:39:db:fa:91:1e:41:9b:1a:2e:
dc:77:17:7d:96:45:18:88:e2:aa:66:9f:b8:fa:52:
a0:05:ab:65:8e:5c:54:98:f3:f2:23:10:3f:1f:27:
aa:6a:43:26:ef:ca:68:12:b4:80:40:b2:51:9e:92:
a4:21:7c:66:9f:3d:1f:71:23:c7:c6:24:b1:ec:57:
f5:7c:c7:cb:1a:b4:bf:19:b3:3b:a6:8d:e4:d6:12:
f2:f9:23:1b:ba:d8:80:5c:aa:08:05:4e:6a:0a:ca:
82:a3:20:18:9d:a3:76:92:03:a4:53:04:17:63:c1:
42:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:A8:F0:A2:63:CC:79:9D:41:29:44:F5:1C:A0:03:A5:45:6A:2F:84
X509v3 Authority Key Identifier:
keyid:30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/J6jwomPMeZ1BKUT1HKADpUVqL4Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.187.108.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:0d:89:17:c9:f6:79:f7:4f:b1:bf:5d:ba:bb:36:64:29:28:
f5:e7:93:0d:d0:4a:15:6d:c5:c7:71:39:4c:10:0d:6d:80:a0:
c9:03:ff:cd:6a:17:d2:e6:8e:b6:37:98:d6:e7:87:a5:62:98:
b9:ba:09:30:dd:e2:97:74:b4:b4:0f:c6:f3:37:61:e3:ac:f4:
6f:6b:b0:7d:0e:5e:ac:1a:95:10:58:51:b0:8e:c4:a5:2e:6a:
2f:32:0f:d2:15:8a:7e:32:6d:6b:19:5f:4d:1a:b6:8a:a6:21:
76:20:d6:6e:e8:4c:a9:65:38:59:d6:f3:ec:9d:50:18:04:b4:
70:33:ba:b6:cd:c1:32:b1:d2:5d:3b:d9:9c:e3:e1:e7:7b:c1:
5c:84:9f:02:6c:74:2f:f6:e8:38:96:87:03:ff:4b:c4:2b:89:
88:2c:b7:0e:9f:dd:9e:96:91:48:2e:35:80:65:50:64:9b:63:
70:f6:f3:4e:56:2c:05:03:0f:23:0a:4a:2c:50:f3:93:a0:e4:
2d:b3:51:ec:e4:ad:24:49:59:1a:94:65:dd:10:5e:e5:98:d4:
ec:bd:eb:55:11:cb:97:18:f1:de:57:26:c2:6d:8f:b0:5f:31:
bb:b0:c8:52:26:d5:84:44:7c:c8:ff:33:6a:c1:33:71:27:f4:
7a:d2:52:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:16:55 2025 by rpki-client