Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/048df6-bccd-4885-8f43-4dc2071a5bf1/1/Ku7W6RCmGf1FMZYF6bxZkcHlJ3U.roa
File: Ku7W6RCmGf1FMZYF6bxZkcHlJ3U.roa (raw, json)
Hash identifier: yodxfHzeCCrONRmxjgNBHi9TEwJB+PIep9C2GIrnRgo=
Subject key identifier: 2A:EE:D6:E9:10:A6:19:FD:45:31:96:05:E9:BC:59:91:C1:E5:27:75
Certificate issuer: /CN=9944078b40772b172c7046e7446204980ceae139
Certificate serial: 019422FB6F2F1351C66E8D488968FAECCBFC
Authority key identifier: 99:44:07:8B:40:77:2B:17:2C:70:46:E7:44:62:04:98:0C:EA:E1:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mUQHi0B3KxcscEbnRGIEmAzq4Tk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/048df6-bccd-4885-8f43-4dc2071a5bf1/1/Ku7W6RCmGf1FMZYF6bxZkcHlJ3U.roa
Signing time: Wed 01 Jan 2025 17:48:10 +0000
ROA not before: Wed 01 Jan 2025 17:48:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43210
IP address blocks: 195.95.179.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:6f:2f:13:51:c6:6e:8d:48:89:68:fa:ec:cb:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9944078b40772b172c7046e7446204980ceae139
Validity
Not Before: Jan 1 17:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2aeed6e910a619fd45319605e9bc5991c1e52775
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:94:97:48:45:57:a7:b2:5e:08:bf:21:df:9f:
45:03:ea:8d:22:a9:31:b0:c0:0b:d3:f6:f8:46:8b:
b8:6e:5c:8d:13:19:ee:4d:b4:3c:e4:91:41:c9:d9:
7e:cc:d0:82:95:c6:0f:56:5f:70:9f:e3:3c:d2:d4:
a2:02:94:6a:7f:65:04:1e:2d:5e:42:cc:15:cf:a2:
78:1d:28:04:fc:5b:42:9e:7a:74:b0:6d:da:85:f2:
1f:89:24:f5:32:37:9a:74:82:41:af:9a:af:9d:af:
97:e4:a4:b4:18:38:a5:20:ad:cc:dd:be:4a:06:d7:
de:bb:75:7e:2c:99:74:67:2d:1e:9a:0e:77:d2:c3:
cc:03:9d:cd:b9:56:82:9c:db:10:b3:37:4e:74:83:
8d:45:ec:36:85:42:ff:62:a8:85:c4:70:41:7a:d9:
56:e4:2f:60:79:28:17:2a:74:51:f9:66:2a:7f:9d:
3e:65:3f:d6:3f:df:fb:cd:2a:e6:5a:eb:60:6d:9c:
8d:a9:69:c1:8a:1f:95:04:19:48:d2:d3:57:1d:94:
76:d1:cc:ad:aa:ff:1e:8e:28:4d:62:92:4f:64:17:
8b:07:41:77:74:6e:ad:6e:ce:e8:9a:a5:c9:e2:e0:
d7:d0:3a:67:11:e1:11:27:70:7c:a7:10:43:c5:0d:
3b:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:EE:D6:E9:10:A6:19:FD:45:31:96:05:E9:BC:59:91:C1:E5:27:75
X509v3 Authority Key Identifier:
keyid:99:44:07:8B:40:77:2B:17:2C:70:46:E7:44:62:04:98:0C:EA:E1:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mUQHi0B3KxcscEbnRGIEmAzq4Tk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/048df6-bccd-4885-8f43-4dc2071a5bf1/1/Ku7W6RCmGf1FMZYF6bxZkcHlJ3U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/048df6-bccd-4885-8f43-4dc2071a5bf1/1/mUQHi0B3KxcscEbnRGIEmAzq4Tk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.95.179.0/24
Signature Algorithm: sha256WithRSAEncryption
43:48:6a:5c:0d:7c:95:5f:03:79:3e:9a:87:c5:91:7c:d8:39:
33:50:2f:23:79:8e:00:7c:53:6b:d8:eb:71:6c:0e:6e:26:d7:
b2:18:82:50:b2:f7:01:e9:db:2f:2e:f6:7e:33:d1:6e:96:5a:
ae:21:92:76:5b:84:ec:69:3a:e0:ea:b5:c3:1c:95:97:ca:dc:
51:26:67:80:14:80:79:7d:cb:ce:08:32:18:42:c8:7b:1b:43:
90:58:79:1e:74:bd:c5:bc:f0:f3:24:f8:73:c0:7f:4f:13:6b:
78:db:92:91:2f:ab:cf:19:a8:42:3b:5d:a4:a1:90:5a:4b:d6:
22:86:12:9f:29:13:31:47:81:47:dc:40:54:42:23:56:c1:1b:
1c:e1:b4:0f:8b:08:fa:da:f0:a8:9c:c3:19:6a:6b:e5:bd:2a:
4f:60:8b:a9:ed:97:b2:90:be:d9:21:d2:1c:ac:0a:39:37:88:
74:74:7f:1c:68:19:36:74:af:58:5d:2e:eb:9a:66:7f:da:92:
c2:b4:da:91:16:54:81:17:f1:2f:f6:4b:b3:26:72:57:d5:ea:
38:67:90:6f:45:f9:c4:88:d6:16:25:bd:10:4e:87:85:a6:d7:
f9:93:6c:0a:3c:e8:34:dd:a6:8a:18:c0:10:05:66:ac:10:0d:
2a:57:98:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:20:49 2025 by rpki-client