Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/811d16-b513-47ed-9e71-238405f2cde9/1/1-FIWmYuNIJI-Cwk15dhF5oxGQws.roa
File: 1-FIWmYuNIJI-Cwk15dhF5oxGQws.roa (raw, json)
Hash identifier: 5WgQd9Yh0UTrO+r9EgLHuyHwMYhN32NKq3EDRy9j2p0=
Subject key identifier: F8:52:16:99:8B:8D:20:92:3E:0B:09:35:E5:D8:45:E6:8C:46:43:0B
Certificate issuer: /CN=c7983b3a9758fcbe78733d9155aed266c882a23c
Certificate serial: 019421B24FCCF563A947AA6FBE2979B52BDC
Authority key identifier: C7:98:3B:3A:97:58:FC:BE:78:73:3D:91:55:AE:D2:66:C8:82:A2:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x5g7OpdY_L54cz2RVa7SZsiCojw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/811d16-b513-47ed-9e71-238405f2cde9/1/1-FIWmYuNIJI-Cwk15dhF5oxGQws.roa
Signing time: Wed 01 Jan 2025 11:48:41 +0000
ROA not before: Wed 01 Jan 2025 11:48:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51619
IP address blocks: 195.210.60.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:4f:cc:f5:63:a9:47:aa:6f:be:29:79:b5:2b:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7983b3a9758fcbe78733d9155aed266c882a23c
Validity
Not Before: Jan 1 11:48:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f85216998b8d20923e0b0935e5d845e68c46430b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:d7:76:79:07:9d:0c:ee:4a:c0:46:b7:02:bb:
a4:bb:56:5f:73:27:80:b9:21:c8:c1:b0:04:28:c4:
19:8b:22:fa:3b:2b:89:5e:c3:8a:18:99:cf:31:89:
e2:2a:fa:f7:34:25:d9:a5:7d:26:82:0f:ad:e0:36:
a6:1e:d1:56:14:2f:eb:ec:cd:1d:12:3d:87:4c:90:
69:f6:e3:32:ad:14:49:87:50:66:dd:7b:e2:0e:58:
92:fb:24:7b:fc:c0:b1:65:e9:c0:b3:c2:9f:3b:00:
15:ab:79:30:fb:03:45:fc:2a:8b:42:c2:30:33:2d:
68:5e:05:6e:2e:b9:68:8a:3f:e1:64:66:98:8f:e6:
7a:fb:6b:63:b1:24:09:09:45:d9:89:9a:5f:af:83:
bc:e6:59:35:60:b7:72:7e:64:6f:f4:8c:0a:22:d2:
0c:fd:fa:48:46:78:2d:84:3a:bf:93:6c:a4:57:1c:
83:76:31:21:d3:e9:36:8e:4b:ce:ac:94:63:b6:db:
de:7b:8d:64:f1:fd:82:96:d7:32:dd:13:26:74:07:
6a:d2:d0:57:10:9a:29:7d:78:e4:f8:a1:4d:af:58:
7c:78:8d:79:a7:61:df:fa:fb:5d:d2:f9:71:0c:86:
31:71:e3:40:54:f1:a9:4c:56:9a:5f:90:c9:15:34:
45:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:52:16:99:8B:8D:20:92:3E:0B:09:35:E5:D8:45:E6:8C:46:43:0B
X509v3 Authority Key Identifier:
keyid:C7:98:3B:3A:97:58:FC:BE:78:73:3D:91:55:AE:D2:66:C8:82:A2:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x5g7OpdY_L54cz2RVa7SZsiCojw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/811d16-b513-47ed-9e71-238405f2cde9/1/1-FIWmYuNIJI-Cwk15dhF5oxGQws.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/811d16-b513-47ed-9e71-238405f2cde9/1/x5g7OpdY_L54cz2RVa7SZsiCojw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.210.60.0/23
Signature Algorithm: sha256WithRSAEncryption
9d:45:dc:4e:f3:f7:8f:d9:44:71:6b:1d:0c:7b:28:06:b4:e1:
1b:96:da:f4:57:66:39:a0:c8:af:39:e7:8c:1c:5e:6a:8c:3f:
e7:01:d9:cd:5b:93:ba:78:5c:8d:83:b1:c5:f4:fa:9c:14:dd:
cf:0f:5f:20:61:db:b1:02:0b:84:45:78:a5:fc:5f:4a:21:aa:
d4:66:f9:64:2c:17:37:89:c1:33:a0:87:6f:b6:ce:16:a9:bd:
11:26:9f:20:6b:9d:f8:e9:49:83:7f:8c:55:79:c8:17:93:59:
b2:9e:61:f9:33:f0:26:17:ca:ba:5c:32:a5:f7:5b:29:a4:3d:
9b:8d:b6:f4:82:38:f3:38:42:34:6c:6d:b9:bf:74:61:fc:f5:
c5:5a:4c:b2:67:dd:74:4f:ba:55:61:18:19:fc:9d:78:45:99:
03:21:38:58:6b:3b:dc:2d:66:3a:03:4a:42:0f:ac:bc:50:4d:
14:06:aa:8f:7c:94:95:f6:f5:3b:18:92:ac:5a:7a:a2:f4:7b:
5b:da:f7:f7:ca:b3:14:31:37:9f:63:33:29:7a:ae:11:84:19:
38:de:a0:88:4a:ab:d2:c5:4a:8f:88:05:c9:ca:52:11:34:f1:
a1:50:ab:f6:9e:cd:ab:99:53:59:0e:f7:d5:94:09:5b:89:ac:
c4:70:59:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 07:53:18 2025 by rpki-client