Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/4d2796-7f80-43a4-b814-00395a38c37d/1/90E-kBjO5zMPh_CjvoGF6X6gBPo.roa
File: 90E-kBjO5zMPh_CjvoGF6X6gBPo.roa (raw, json)
Hash identifier: CtoUcToSQH/z7T8Z7IC3trmKUCXpBxtjD/8pAoHxgVE=
Subject key identifier: F7:41:3E:90:18:CE:E7:33:0F:87:F0:A3:BE:81:85:E9:7E:A0:04:FA
Certificate issuer: /CN=67708e05cda86bbde74edba85d1dbeb73fe7f757
Certificate serial: 019425FD5FBFFBB126093588AAF8FC0B5805
Authority key identifier: 67:70:8E:05:CD:A8:6B:BD:E7:4E:DB:A8:5D:1D:BE:B7:3F:E7:F7:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z3COBc2oa73nTtuoXR2-tz_n91c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/4d2796-7f80-43a4-b814-00395a38c37d/1/90E-kBjO5zMPh_CjvoGF6X6gBPo.roa
Signing time: Thu 02 Jan 2025 07:49:09 +0000
ROA not before: Thu 02 Jan 2025 07:49:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 30734
IP address blocks: 195.95.160.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:5f:bf:fb:b1:26:09:35:88:aa:f8:fc:0b:58:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67708e05cda86bbde74edba85d1dbeb73fe7f757
Validity
Not Before: Jan 2 07:49:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f7413e9018cee7330f87f0a3be8185e97ea004fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:a0:06:30:8d:fd:2e:85:ca:50:8b:80:a5:55:
bd:a2:3b:e3:bc:3f:b2:5c:e6:8c:a9:c9:db:fa:f8:
fe:77:a5:c4:da:56:29:57:3b:c6:db:17:c7:cb:b3:
9c:c6:4a:c5:64:7e:1f:a2:d8:b7:a2:d3:f8:95:3b:
21:9b:5f:30:f8:91:be:0e:82:8e:7a:7d:38:66:7d:
5e:56:e3:e2:f3:40:44:f7:e2:ef:42:69:34:0d:9d:
14:c5:2a:af:8d:09:a1:34:db:a9:5e:03:78:95:04:
1a:9c:f6:5e:da:09:c7:a0:4e:c4:d5:4e:0b:28:33:
46:92:34:94:cc:ec:06:bd:39:4a:48:07:a7:54:3e:
13:a0:7f:b3:ef:36:2f:f2:23:03:62:e2:c9:63:44:
a8:05:8c:7d:7d:18:91:5b:75:9d:9b:f3:c6:bf:c2:
13:1f:36:50:4f:45:d1:94:ec:03:1a:b9:34:3c:cc:
ac:91:3a:37:10:38:84:76:f9:83:3c:f8:bb:fb:e1:
04:63:bc:43:6d:cb:7f:75:ff:b8:c2:15:e9:06:98:
8f:8f:a2:86:b3:d2:f2:23:6f:31:80:1c:f8:d9:91:
a2:23:fd:84:74:8e:e8:38:9f:28:ad:1f:67:21:e6:
a3:ad:17:5a:e3:c6:0c:84:b8:bf:a0:59:df:44:97:
8b:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:41:3E:90:18:CE:E7:33:0F:87:F0:A3:BE:81:85:E9:7E:A0:04:FA
X509v3 Authority Key Identifier:
keyid:67:70:8E:05:CD:A8:6B:BD:E7:4E:DB:A8:5D:1D:BE:B7:3F:E7:F7:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z3COBc2oa73nTtuoXR2-tz_n91c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/4d2796-7f80-43a4-b814-00395a38c37d/1/90E-kBjO5zMPh_CjvoGF6X6gBPo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/4d2796-7f80-43a4-b814-00395a38c37d/1/Z3COBc2oa73nTtuoXR2-tz_n91c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.95.160.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:b1:f7:77:80:c7:be:8b:21:7d:36:c4:01:f7:eb:09:4f:b4:
72:6f:b0:15:d9:8a:4b:93:31:7d:29:33:5a:f4:18:cf:04:ab:
b1:b9:81:3e:55:b6:4e:6e:80:7e:dc:bb:61:6b:b3:fd:e7:e1:
00:54:64:0b:bc:df:4f:73:fe:96:b3:57:07:76:f4:5e:5b:bd:
f3:30:da:85:44:de:6d:84:17:a5:0e:0e:4b:32:42:a7:88:7c:
04:ed:9c:f6:24:f0:9b:26:3a:6a:a8:f0:12:8f:d5:96:33:db:
c8:06:1c:e3:58:c7:26:0c:48:5d:03:94:8b:73:02:cf:04:5a:
09:4d:a8:20:85:d5:d1:ce:4b:fb:b9:7b:66:c1:6c:73:eb:21:
af:1f:c9:36:51:c5:48:cf:e4:24:cf:df:66:f5:9f:65:6f:35:
5a:69:07:22:8f:bd:ee:e4:27:72:ec:82:a8:14:7a:77:08:eb:
3b:cc:b2:a9:50:47:6c:f2:2f:7d:68:e9:67:2d:8f:4a:e1:0a:
38:c4:e3:c5:e0:f1:4c:05:c8:5d:00:85:df:6e:af:45:27:2e:
be:9c:52:e3:d5:69:2c:36:d7:f3:7b:de:43:54:56:4a:54:bc:
f3:ee:1f:a4:a4:3a:53:fe:9c:33:bb:7c:ea:79:ec:ba:4a:ec:
c6:9f:eb:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:19:22 2025 by rpki-client