Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/a1399a-ea6b-4a09-8b40-90c0bde09869/1/lSgllAaAELvvF0H-w0cYbphI7hQ.roa
File: lSgllAaAELvvF0H-w0cYbphI7hQ.roa (raw, json)
Hash identifier: mYm36pDoIuCzo+L7W1TsWUCdXE7ibTRlxGe95aZaVaU=
Subject key identifier: 95:28:25:94:06:80:10:BB:EF:17:41:FE:C3:47:18:6E:98:48:EE:14
Certificate issuer: /CN=ad80679b96ca322bfa85500cab206c6d47412edf
Certificate serial: 019427B5BE7D8EF6482BEC85D813A91D5B16
Authority key identifier: AD:80:67:9B:96:CA:32:2B:FA:85:50:0C:AB:20:6C:6D:47:41:2E:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rYBnm5bKMiv6hVAMqyBsbUdBLt8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/a1399a-ea6b-4a09-8b40-90c0bde09869/1/lSgllAaAELvvF0H-w0cYbphI7hQ.roa
Signing time: Thu 02 Jan 2025 15:50:09 +0000
ROA not before: Thu 02 Jan 2025 15:50:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 195.42.240.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:be:7d:8e:f6:48:2b:ec:85:d8:13:a9:1d:5b:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad80679b96ca322bfa85500cab206c6d47412edf
Validity
Not Before: Jan 2 15:50:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=95282594068010bbef1741fec347186e9848ee14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:64:f1:1c:23:2f:4e:e9:06:e6:39:84:1f:e5:
fa:a8:81:a4:01:d9:3e:67:b6:ec:1e:fb:1f:52:9e:
1a:5b:0e:35:bf:f6:db:3f:4f:bc:e6:2f:5a:f8:7d:
d8:fc:b8:ea:5c:45:f7:09:7e:41:15:3f:55:7e:b0:
5e:5a:24:6f:d2:2a:02:1a:c2:5d:7b:85:b1:d4:b0:
06:d0:5f:48:51:21:e3:88:ab:46:60:d6:ce:61:87:
72:c2:45:21:ba:58:9e:49:9a:44:da:e6:8a:bc:19:
cb:38:19:76:0c:59:49:91:2a:45:62:d1:66:80:44:
0c:68:18:8a:75:0d:90:cc:05:c8:b2:2f:18:af:82:
45:33:e8:d9:dc:e1:34:8f:ff:a9:2b:ce:bb:96:3e:
26:c4:15:3e:86:cb:c4:61:f1:55:8a:32:1f:73:a4:
23:25:39:0a:f8:05:f6:08:95:38:dc:0a:bf:9c:a9:
d4:2f:69:3b:1b:0b:e1:21:45:b2:6d:3c:0b:ba:56:
94:31:0d:d9:31:fe:5a:72:97:a8:b1:d5:e1:e1:52:
9b:a9:99:5d:77:81:23:73:c7:ba:14:63:1c:01:bb:
1c:e2:3a:f4:f7:9f:d6:d8:ef:70:be:56:91:7a:b5:
55:37:df:a0:b6:48:de:5f:1c:b6:9c:e3:2b:56:7f:
eb:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:28:25:94:06:80:10:BB:EF:17:41:FE:C3:47:18:6E:98:48:EE:14
X509v3 Authority Key Identifier:
keyid:AD:80:67:9B:96:CA:32:2B:FA:85:50:0C:AB:20:6C:6D:47:41:2E:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rYBnm5bKMiv6hVAMqyBsbUdBLt8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/a1399a-ea6b-4a09-8b40-90c0bde09869/1/lSgllAaAELvvF0H-w0cYbphI7hQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/a1399a-ea6b-4a09-8b40-90c0bde09869/1/rYBnm5bKMiv6hVAMqyBsbUdBLt8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.42.240.0/24
Signature Algorithm: sha256WithRSAEncryption
76:da:e9:3b:d5:ee:ab:14:1a:68:31:7f:62:43:1a:94:a0:a4:
72:64:60:2f:27:1a:51:1e:66:6d:b4:f9:8a:98:a2:8d:65:ff:
40:2a:a0:ca:c8:72:8e:23:5d:d7:cb:3e:9b:33:fb:3b:9b:2f:
80:89:48:b6:70:27:21:25:3b:64:51:e5:eb:9c:e1:e3:2d:6d:
d3:f4:f5:c6:7b:03:19:7b:07:df:6a:3d:c0:2b:3f:17:c6:12:
be:f9:80:81:aa:c5:da:f6:9b:6c:02:16:d1:bf:ae:5e:0f:31:
9c:b5:0f:19:93:b2:97:09:f0:7a:a5:00:83:fb:10:d5:27:a6:
fe:86:be:43:e8:66:82:29:cd:11:b6:f4:f6:40:ba:86:c6:8d:
0d:99:85:42:0d:20:ca:c7:5c:ed:20:5c:5a:c7:0d:52:e2:76:
56:f4:83:12:58:2d:5b:17:a3:18:47:7f:e1:15:c3:e4:f7:65:
c6:ed:88:6e:6d:0e:93:2b:a7:c6:22:9e:95:d2:26:f2:04:d6:
cc:f3:ff:22:02:52:3d:bf:e6:80:1f:39:a1:00:ee:66:43:33:
d3:17:6b:8d:29:bf:fe:39:2f:f9:9d:41:d3:4f:8f:8a:19:a6:
20:a5:5a:2e:34:c9:55:25:3f:ef:43:38:d7:84:c6:ab:6a:14:
82:ad:f0:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:22:13 2025 by rpki-client