Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/g64IDCaPNJ9ZShV_l_bo46HmhJ0.roa
File: g64IDCaPNJ9ZShV_l_bo46HmhJ0.roa (raw, json)
Hash identifier: 5+QoeL2CSfIj5AnV36tcPb8Se6mkOWP178b805IjUzk=
Subject key identifier: 83:AE:08:0C:26:8F:34:9F:59:4A:15:7F:97:F6:E8:E3:A1:E6:84:9D
Certificate issuer: /CN=30c409613fea0a2b442ce112e9cbdb485e01188f
Certificate serial: 01942143B1DD10A623E04E0AB63031C79A82
Authority key identifier: 30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/g64IDCaPNJ9ZShV_l_bo46HmhJ0.roa
Signing time: Wed 01 Jan 2025 09:47:52 +0000
ROA not before: Wed 01 Jan 2025 09:47:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15606
IP address blocks: 192.195.72.0/24 maxlen: 24
2001:7f9:c::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:b1:dd:10:a6:23:e0:4e:0a:b6:30:31:c7:9a:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30c409613fea0a2b442ce112e9cbdb485e01188f
Validity
Not Before: Jan 1 09:47:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=83ae080c268f349f594a157f97f6e8e3a1e6849d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:a7:bd:a4:fd:cf:b9:80:e8:17:7f:0b:32:ad:
be:20:9e:bc:0d:7a:29:e4:d8:7d:a9:97:66:61:4d:
83:71:a7:3f:c8:1e:7e:b1:0e:f4:18:5f:ba:8b:f1:
a9:ca:0b:07:42:7c:2f:6b:e4:7e:cd:93:d2:fd:0c:
08:5c:e7:21:96:5e:18:f7:7b:24:2f:05:0e:62:cd:
4a:cd:4e:94:de:9d:1d:f3:aa:f3:dd:c0:a2:63:4f:
95:79:5e:b6:e2:c8:40:21:57:49:48:a1:60:79:05:
c8:d5:91:5c:b6:4a:2d:c4:4f:e2:9d:78:86:cf:8a:
73:1e:e6:a6:19:cc:ee:3b:91:5e:55:0a:21:8b:ab:
5e:10:02:73:1a:90:c3:63:19:38:ca:78:39:8c:84:
70:46:d0:3c:07:64:ab:28:27:dc:73:fc:b8:2a:42:
b5:f4:d5:2b:57:3d:f4:16:78:79:0e:a3:1d:87:47:
db:1d:fd:d9:cc:fa:0a:68:d7:d3:a0:9c:af:26:cd:
11:a5:c7:c6:24:8b:ef:65:49:f8:c8:41:f4:a0:93:
14:24:c3:36:8a:67:cc:33:86:5a:7e:d3:16:4a:53:
4a:ab:54:38:c2:c6:3e:ee:a1:27:1d:83:2a:21:ed:
0e:a6:f3:33:9b:44:62:63:08:2f:1b:41:b7:a6:64:
0f:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:AE:08:0C:26:8F:34:9F:59:4A:15:7F:97:F6:E8:E3:A1:E6:84:9D
X509v3 Authority Key Identifier:
keyid:30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/g64IDCaPNJ9ZShV_l_bo46HmhJ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.195.72.0/24
IPv6:
2001:7f9:c::/48
Signature Algorithm: sha256WithRSAEncryption
67:31:74:cc:63:a1:fb:57:ae:24:ec:d6:e7:bf:6b:26:c1:44:
4e:32:43:ae:1c:71:f6:b8:52:40:20:cc:f4:90:3e:8a:42:01:
ab:0d:36:9c:7a:0d:52:27:2a:0d:cb:a6:ec:ef:e2:90:9f:53:
d7:50:92:88:db:12:53:eb:cc:cd:db:95:24:04:a6:9d:e0:05:
06:85:5b:85:13:c2:e6:2f:be:1d:99:8a:c1:37:c9:72:90:b2:
22:72:1c:02:15:3f:64:a6:f0:a0:c3:09:8e:23:42:c5:df:43:
49:a6:7e:9a:b9:d0:ef:e0:77:41:3b:6d:39:b8:95:af:39:0c:
9a:78:1c:88:77:90:7b:71:cc:0b:0e:ac:b0:6a:9f:66:99:b3:
85:4d:00:80:66:8b:16:e0:1e:40:35:d2:f9:4d:10:44:0e:c8:
cd:71:ae:b6:c4:e5:38:85:3c:70:ec:19:90:a0:52:19:f5:b5:
87:7c:3a:a7:7b:5c:68:59:a2:03:e1:98:51:d3:5a:e5:41:c8:
cf:03:3b:0e:93:48:f8:8a:65:b9:5c:ca:90:dd:25:28:a0:7c:
6b:f0:b2:1a:cc:3a:87:1d:da:7c:31:a8:95:5c:ea:b7:b8:cc:
e0:ab:ae:88:41:2b:5f:6e:33:89:63:a9:a5:8e:e7:66:6e:f2:
e0:1a:e9:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:42:42 2025 by rpki-client