Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/6683ca-a688-4141-ad41-8adf0da22545/1/ReBd6XpLAEdQnq22AyigT28YEek.roa
File: ReBd6XpLAEdQnq22AyigT28YEek.roa (raw, json)
Hash identifier: RhoXTgASpblnjFEdfG3nqoqUpEixf7i2FKnJEh2Jo/g=
Subject key identifier: 45:E0:5D:E9:7A:4B:00:47:50:9E:AD:B6:03:28:A0:4F:6F:18:11:E9
Certificate issuer: /CN=b094780ffbb06b7b57f0214e84552b964c5041d6
Certificate serial: 0194258F2F6F8897B50734E1ADAF2DD96062
Authority key identifier: B0:94:78:0F:FB:B0:6B:7B:57:F0:21:4E:84:55:2B:96:4C:50:41:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sJR4D_uwa3tX8CFOhFUrlkxQQdY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/6683ca-a688-4141-ad41-8adf0da22545/1/ReBd6XpLAEdQnq22AyigT28YEek.roa
Signing time: Thu 02 Jan 2025 05:48:48 +0000
ROA not before: Thu 02 Jan 2025 05:48:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9180
IP address blocks: 195.214.224.0/24 maxlen: 24
195.214.225.0/24 maxlen: 24
195.214.226.0/24 maxlen: 24
195.214.227.0/24 maxlen: 24
195.214.228.0/24 maxlen: 24
195.214.229.0/24 maxlen: 24
195.214.230.0/24 maxlen: 24
195.214.231.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:2f:6f:88:97:b5:07:34:e1:ad:af:2d:d9:60:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b094780ffbb06b7b57f0214e84552b964c5041d6
Validity
Not Before: Jan 2 05:48:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=45e05de97a4b0047509eadb60328a04f6f1811e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:89:14:b7:32:3e:e1:65:40:56:06:ba:b9:a1:
ab:34:85:9a:a1:3e:43:4a:f2:dd:9f:a4:53:e5:50:
a9:bf:39:2f:26:d6:20:63:ec:eb:88:95:b2:f0:87:
bb:9d:e7:f0:a2:c2:7a:92:f5:10:ee:0f:d4:2b:3b:
6d:8e:f1:d7:b2:28:7f:43:e9:fb:b0:c3:93:a4:0b:
3b:04:54:8d:c0:f4:d9:20:f0:34:3c:e5:9a:3b:1f:
62:be:3a:c4:0d:ba:1f:f1:5c:0a:18:92:73:d6:6b:
f4:3d:5c:ef:29:77:f1:a5:50:bb:dd:8a:8d:0d:9b:
b5:d3:2c:2c:26:1f:28:79:62:e9:c7:84:3e:ed:b7:
12:97:49:e6:2d:51:63:09:a7:58:5b:f3:55:04:74:
fd:97:69:49:89:91:4c:30:8d:f2:83:34:c7:cb:91:
fc:9c:ef:a8:d0:ac:8d:c8:0a:ea:31:cb:de:89:dc:
cd:8f:91:30:63:80:5f:8a:90:2d:38:68:7a:97:43:
4d:da:0e:57:b3:5e:ff:99:6d:46:78:c0:b8:3e:b6:
6e:2d:6d:8c:51:8f:d6:27:eb:07:9e:03:74:3d:64:
28:0d:90:2b:04:01:4c:13:39:64:9d:03:3e:08:77:
0a:75:53:ac:85:e1:70:40:ca:41:1d:14:56:e9:e7:
1a:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:E0:5D:E9:7A:4B:00:47:50:9E:AD:B6:03:28:A0:4F:6F:18:11:E9
X509v3 Authority Key Identifier:
keyid:B0:94:78:0F:FB:B0:6B:7B:57:F0:21:4E:84:55:2B:96:4C:50:41:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sJR4D_uwa3tX8CFOhFUrlkxQQdY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/6683ca-a688-4141-ad41-8adf0da22545/1/ReBd6XpLAEdQnq22AyigT28YEek.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/6683ca-a688-4141-ad41-8adf0da22545/1/sJR4D_uwa3tX8CFOhFUrlkxQQdY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.214.224.0/21
Signature Algorithm: sha256WithRSAEncryption
aa:bb:fa:78:49:b0:96:e0:7e:5c:63:fa:32:48:7b:47:20:5d:
24:45:84:1c:75:c3:75:c5:d1:a9:91:fb:56:11:25:60:29:b7:
fa:6a:aa:e3:86:39:03:34:92:1f:42:c5:a0:db:a5:83:2c:c3:
0c:be:29:0b:d5:81:b6:05:a1:f9:69:9c:35:05:0e:a3:b5:1a:
c4:54:c1:a7:3f:90:e7:0c:03:6f:34:dc:c6:89:71:36:b1:27:
8e:7d:00:ae:ef:c1:27:72:09:62:f5:40:7d:d3:b0:7a:8e:6a:
4a:68:28:3f:31:be:09:5d:35:e9:84:a6:2a:32:f6:1a:1a:46:
ec:78:2e:0c:e0:6e:ad:37:1c:b7:00:89:bf:85:92:0e:0d:be:
b5:7c:30:56:c6:92:0a:ec:cc:b9:05:41:a3:14:68:86:eb:7c:
15:0c:56:88:74:6e:bb:5f:1e:b6:40:2d:9b:a1:0f:9c:3b:f5:
73:a5:fd:21:fc:1a:69:c8:82:18:c7:ef:8a:b8:5f:71:fa:61:
a5:7a:eb:89:cd:8e:b9:28:c0:38:47:a8:00:d9:ea:e5:66:27:
f1:6e:43:34:11:27:8e:d7:e0:8f:b6:c4:e5:87:42:9d:d7:be:
88:1d:ec:57:9a:aa:f9:cc:6a:fa:f3:06:64:22:cf:23:6a:f6:
f2:af:98:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:44:10 2025 by rpki-client