Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/269290-59ff-4233-8fa0-27550b219507/1/devZOEgryptZR-bT6KNMpTw3Mfc.roa
File: devZOEgryptZR-bT6KNMpTw3Mfc.roa (raw, json)
Hash identifier: u3HbxNlq49urjWUiGXoyu0fcegzQ7OgqdK+RiiJSzRA=
Subject key identifier: 75:EB:D9:38:48:2B:CA:9B:59:47:E6:D3:E8:A3:4C:A5:3C:37:31:F7
Certificate issuer: /CN=ff1a0a7554385703974ae15ef947bc54c0b89c95
Certificate serial: 0194258FA34F06ACE9FB4EDD242C856E91CB
Authority key identifier: FF:1A:0A:75:54:38:57:03:97:4A:E1:5E:F9:47:BC:54:C0:B8:9C:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_xoKdVQ4VwOXSuFe-Ue8VMC4nJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/269290-59ff-4233-8fa0-27550b219507/1/devZOEgryptZR-bT6KNMpTw3Mfc.roa
Signing time: Thu 02 Jan 2025 05:49:17 +0000
ROA not before: Thu 02 Jan 2025 05:49:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25181
IP address blocks: 195.2.36.0/23 maxlen: 23
195.2.38.0/23 maxlen: 23
195.2.41.0/24 maxlen: 24
2a00:1310::/32 maxlen: 48
2a00:1310:802::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:a3:4f:06:ac:e9:fb:4e:dd:24:2c:85:6e:91:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff1a0a7554385703974ae15ef947bc54c0b89c95
Validity
Not Before: Jan 2 05:49:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=75ebd938482bca9b5947e6d3e8a34ca53c3731f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:c1:ee:d8:73:1e:66:33:86:ff:46:de:ba:62:
b2:53:d5:6a:83:ae:2f:b7:37:38:c4:33:6f:55:2c:
a9:af:6b:1b:42:9c:1a:e6:74:99:77:2a:09:cf:78:
67:67:b3:b8:fc:42:4d:60:e8:2d:81:11:51:fd:20:
c4:c8:78:bb:d1:28:bf:0e:e8:22:9e:8d:e3:49:39:
bd:e7:ae:ab:aa:d2:78:d7:2e:aa:6f:6e:b1:30:47:
c3:14:da:9e:96:e6:9f:3c:f6:6d:85:cf:37:cf:ed:
a8:a7:e6:8e:1c:5e:a9:00:17:f3:e1:83:9f:2e:86:
57:31:6c:8c:13:c5:4d:53:7f:5e:c5:c8:2e:13:6f:
5e:6e:30:58:d0:80:1c:d1:f7:23:fe:60:b6:74:9f:
0e:39:7a:86:e1:5c:9b:d9:8f:8b:96:44:d5:9c:99:
be:48:18:b9:2d:f8:b6:50:2b:59:e1:c6:6d:35:b3:
fa:33:92:7a:5d:e7:2e:d3:3a:1e:53:f7:7b:9a:96:
47:2e:fd:2b:e8:e8:44:25:84:61:2a:0e:e9:5c:a9:
5a:fe:15:45:02:bc:0f:70:97:5e:5a:1f:f8:67:20:
88:c5:3c:5a:a0:80:7f:8e:92:2f:8f:f2:7b:b1:ef:
31:25:4a:81:47:15:16:8e:b8:4a:03:ca:6b:06:ae:
0b:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:EB:D9:38:48:2B:CA:9B:59:47:E6:D3:E8:A3:4C:A5:3C:37:31:F7
X509v3 Authority Key Identifier:
keyid:FF:1A:0A:75:54:38:57:03:97:4A:E1:5E:F9:47:BC:54:C0:B8:9C:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_xoKdVQ4VwOXSuFe-Ue8VMC4nJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/269290-59ff-4233-8fa0-27550b219507/1/devZOEgryptZR-bT6KNMpTw3Mfc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/269290-59ff-4233-8fa0-27550b219507/1/_xoKdVQ4VwOXSuFe-Ue8VMC4nJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.2.36.0/22
195.2.41.0/24
IPv6:
2a00:1310::/32
Signature Algorithm: sha256WithRSAEncryption
5c:63:74:6d:c2:09:38:8a:2b:df:25:ef:30:ba:5c:df:21:7d:
89:89:9b:07:4a:3a:e8:69:c5:42:c3:88:7a:e4:d6:4f:35:c9:
50:69:36:d0:de:80:af:f1:9e:5d:e3:2f:b2:c9:5e:d3:43:cd:
97:03:b5:9e:95:a6:ef:6b:40:26:05:2c:d0:32:0a:65:4c:39:
09:d5:04:62:28:2e:ce:54:53:b2:30:aa:bb:14:04:4d:14:54:
fa:60:4d:f0:94:25:9b:d5:c9:a7:4f:02:21:7e:91:91:60:1c:
64:0c:a0:dd:06:62:4f:f6:9f:b8:ba:a2:03:f7:94:f2:36:0d:
04:46:0a:92:f8:30:96:a9:1d:fd:57:4e:33:6c:6b:f8:67:70:
f3:d7:7b:75:cb:16:98:5d:6b:24:ad:aa:9e:88:f0:56:98:ef:
92:78:93:93:35:7d:e7:3a:09:c1:ca:82:a6:dc:5d:36:3c:77:
22:7f:de:01:2c:aa:9a:c6:2f:e3:ee:cd:f0:e0:47:53:02:8e:
e7:a5:b9:f7:6b:4d:03:f9:6a:f8:51:44:d8:3a:e9:ff:d9:b7:
6c:bb:c3:08:5f:9e:91:5f:60:99:a5:dc:65:c7:e4:59:40:54:
63:d8:81:2f:3c:a9:75:3b:a5:5a:75:b4:10:cb:e1:81:9e:ee:
a8:ae:58:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:06:33 2025 by rpki-client