Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/cd9fd3-a3ee-4ec5-8c54-2f383e85ebc0/1/2MtCsLRfRRVkmWmmR_RgvP_iiYM.roa
File: 2MtCsLRfRRVkmWmmR_RgvP_iiYM.roa (raw, json)
Hash identifier: HuLQbolqCGZmiUhvPO/wiFvtWi3Okwmgccu/aBpptuc=
Subject key identifier: D8:CB:42:B0:B4:5F:45:15:64:99:69:A6:47:F4:60:BC:FF:E2:89:83
Certificate issuer: /CN=dc6516692c6382b3f83dae991fd89dd1b0cef579
Certificate serial: 01942369FBB40E50FB8C0E2B071121595A8C
Authority key identifier: DC:65:16:69:2C:63:82:B3:F8:3D:AE:99:1F:D8:9D:D1:B0:CE:F5:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/cd9fd3-a3ee-4ec5-8c54-2f383e85ebc0/1/2MtCsLRfRRVkmWmmR_RgvP_iiYM.roa
Signing time: Wed 01 Jan 2025 19:48:55 +0000
ROA not before: Wed 01 Jan 2025 19:48:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8364
IP address blocks: 195.216.96.0/19 maxlen: 19
212.126.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:fb:b4:0e:50:fb:8c:0e:2b:07:11:21:59:5a:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc6516692c6382b3f83dae991fd89dd1b0cef579
Validity
Not Before: Jan 1 19:48:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d8cb42b0b45f4515649969a647f460bcffe28983
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ff:c2:11:a3:1c:63:50:a7:72:7a:16:6b:f9:93:
28:73:52:1b:94:51:92:ea:75:55:44:16:54:d9:b7:
5b:92:ea:21:af:a4:87:13:0d:4d:06:02:7d:a9:cb:
94:e6:2b:43:55:95:b3:8c:86:8a:c7:73:ed:d9:43:
04:62:38:51:51:5c:dc:c0:6d:38:fd:7e:e4:ce:fc:
c2:16:3f:3b:74:d1:40:55:4a:9e:e2:24:0e:30:72:
4e:83:6c:b2:52:89:78:b2:60:52:ee:40:1c:b0:8f:
cb:33:21:b8:a9:b9:95:af:e9:12:5e:9a:49:34:28:
0d:5f:cf:65:ba:02:26:fe:fb:67:5a:e8:4c:a8:ef:
5a:0f:08:1d:f6:3c:bb:59:51:e2:ba:76:b5:05:4d:
35:2d:69:36:a4:c3:d7:a3:eb:75:43:93:52:d2:cf:
1d:67:83:ee:a4:d7:98:fd:87:74:d7:61:ba:f4:f6:
f6:da:03:01:d2:06:7c:d9:bc:bf:a3:81:eb:11:fc:
9a:b9:fa:58:64:1a:49:e2:c8:c9:d9:e7:53:5d:d0:
5e:fc:e8:7e:79:75:81:37:0d:a5:82:1f:2d:b4:fc:
66:c4:29:93:a6:2e:b5:c1:b4:21:95:26:71:a6:ec:
c7:a8:07:82:bd:a7:d7:29:89:82:59:0e:cb:63:c3:
11:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:CB:42:B0:B4:5F:45:15:64:99:69:A6:47:F4:60:BC:FF:E2:89:83
X509v3 Authority Key Identifier:
keyid:DC:65:16:69:2C:63:82:B3:F8:3D:AE:99:1F:D8:9D:D1:B0:CE:F5:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/cd9fd3-a3ee-4ec5-8c54-2f383e85ebc0/1/2MtCsLRfRRVkmWmmR_RgvP_iiYM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/cd9fd3-a3ee-4ec5-8c54-2f383e85ebc0/1/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.216.96.0/19
212.126.0.0/19
Signature Algorithm: sha256WithRSAEncryption
13:d8:68:e4:3b:7c:91:e4:0c:af:f5:34:70:9f:de:74:49:66:
ea:6b:77:a4:82:bb:85:11:67:28:a6:ef:58:f3:4d:9a:9b:c0:
4c:ea:f6:86:63:4e:e1:5b:78:32:ed:26:ef:1f:ea:01:6a:1c:
0c:93:51:23:de:92:49:d3:93:41:31:b9:0f:d6:f2:1a:a1:f1:
bd:59:52:a2:3a:9a:c8:e3:0e:20:04:41:56:87:e3:2b:a9:5e:
83:73:9d:88:cc:9c:62:6f:b6:90:1c:0d:31:e4:0a:2d:c2:40:
e2:8f:77:78:d4:86:d0:8a:85:95:94:92:6c:8c:20:a7:d2:83:
ef:0f:03:fe:5a:a5:bd:c9:2f:3a:7b:33:23:3a:00:be:c8:8a:
55:c2:1f:9e:94:ef:03:a6:89:6d:22:33:5b:8f:90:4a:66:24:
f1:70:f1:3e:03:38:ab:2d:a0:98:52:f5:f7:3e:fb:6b:19:0f:
69:c7:ee:90:61:6e:47:de:71:0c:2b:df:70:0c:fd:be:49:41:
ec:43:38:d8:12:43:66:68:91:a1:04:bd:f0:3e:f9:38:97:e3:
b0:5f:41:bd:a3:a6:ff:ed:3a:de:6a:80:77:f3:f6:13:67:bd:
e5:70:90:f2:97:65:2a:6c:d9:3b:41:82:97:be:3b:42:50:a6:
03:a8:28:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:08:24 2025 by rpki-client