Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/758203-d529-48a7-98f4-e51a90907226/1/t502H2vMdpAeOhruVMNDr3Acpww.roa
File: t502H2vMdpAeOhruVMNDr3Acpww.roa (raw, json)
Hash identifier: fOmBVqNdsH/gE4UkC59LOcZAoo+pjmsg19OUK4hM+ps=
Subject key identifier: B7:9D:36:1F:6B:CC:76:90:1E:3A:1A:EE:54:C3:43:AF:70:1C:A7:0C
Certificate issuer: /CN=360c5935e51fe706c2447519d9b5f95ae363c186
Certificate serial: 01942068146A9BBA9458338697C1DB71ACB2
Authority key identifier: 36:0C:59:35:E5:1F:E7:06:C2:44:75:19:D9:B5:F9:5A:E3:63:C1:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NgxZNeUf5wbCRHUZ2bX5WuNjwYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/758203-d529-48a7-98f4-e51a90907226/1/t502H2vMdpAeOhruVMNDr3Acpww.roa
Signing time: Wed 01 Jan 2025 05:47:59 +0000
ROA not before: Wed 01 Jan 2025 05:47:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211964
IP address blocks: 195.128.35.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:14:6a:9b:ba:94:58:33:86:97:c1:db:71:ac:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=360c5935e51fe706c2447519d9b5f95ae363c186
Validity
Not Before: Jan 1 05:47:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b79d361f6bcc76901e3a1aee54c343af701ca70c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:4d:c4:cd:dd:a3:e4:7a:ee:ed:1c:a7:a3:dd:
06:0a:b7:c1:c6:bf:bd:cd:62:f3:f2:99:44:25:a6:
a5:7f:7c:d6:b0:75:48:5d:4c:58:e8:83:7e:af:ac:
05:e7:b1:8d:28:34:53:b8:f6:be:51:db:79:04:7c:
7a:b4:32:42:a9:7d:71:7f:70:14:ef:46:c6:10:15:
a5:ee:8f:de:0c:fd:42:aa:52:db:91:1c:be:8d:9f:
68:c5:31:dc:a3:c3:6f:22:da:2d:97:66:81:61:2e:
7c:5d:c4:31:a4:c0:f5:71:2b:51:30:13:a7:d5:55:
55:79:c4:a1:4e:de:e8:19:b3:cd:9d:a1:50:71:74:
de:16:86:0c:9d:04:5f:11:a6:ae:6f:fb:f3:d7:6b:
f3:4c:50:26:b3:a2:bb:49:c1:fd:d2:82:05:89:ad:
f4:0b:70:82:8f:e5:28:00:85:c9:a9:1c:2b:37:65:
75:30:21:f1:d8:2e:ad:51:58:b8:0f:91:70:f2:3c:
20:a3:a7:c4:f7:5f:45:cf:cb:69:fa:6b:50:8b:63:
9b:f0:b9:c9:aa:44:8e:36:57:3b:5f:7e:70:3b:27:
ba:f1:1c:cd:46:72:d8:78:13:17:1f:9f:10:b0:5b:
2c:71:33:fb:98:ff:31:20:27:a4:84:c5:c0:c2:b6:
61:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:9D:36:1F:6B:CC:76:90:1E:3A:1A:EE:54:C3:43:AF:70:1C:A7:0C
X509v3 Authority Key Identifier:
keyid:36:0C:59:35:E5:1F:E7:06:C2:44:75:19:D9:B5:F9:5A:E3:63:C1:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NgxZNeUf5wbCRHUZ2bX5WuNjwYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/758203-d529-48a7-98f4-e51a90907226/1/t502H2vMdpAeOhruVMNDr3Acpww.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/758203-d529-48a7-98f4-e51a90907226/1/NgxZNeUf5wbCRHUZ2bX5WuNjwYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.128.35.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:07:4b:31:14:48:20:13:b1:dd:79:10:c9:f0:a7:18:54:20:
d6:50:05:ba:8f:cb:76:82:ce:03:bd:78:b9:66:a3:c6:e0:b7:
b5:1b:14:53:20:98:6a:2a:1d:f7:32:c1:7c:86:95:86:dd:dd:
f1:bf:17:64:44:8d:91:44:0c:98:ff:f2:9e:73:0c:46:ba:a6:
32:fc:fe:36:82:54:28:93:0f:88:a4:46:0a:c7:48:d5:6c:37:
a4:ba:93:0a:b8:b9:92:2a:93:09:27:aa:76:8d:72:0b:8d:25:
f4:b3:6c:9c:cd:99:19:fe:a1:f9:a1:4b:73:0b:68:c1:27:f6:
ad:85:23:32:b5:7f:51:b1:95:f0:2d:85:2c:56:39:e9:09:c7:
48:0b:c2:63:ae:1d:0f:f6:d5:7e:f2:1b:94:09:2c:37:5b:c9:
83:5a:57:20:40:76:4e:08:b3:53:aa:a2:c1:7b:e6:b5:9b:dd:
00:cc:86:fb:d6:10:33:ef:e5:be:20:d9:2b:4e:a0:44:a8:a0:
92:c4:bb:df:1f:be:57:87:83:51:26:2b:ec:5d:00:d0:ee:84:
b9:58:2b:b5:13:de:a1:98:6e:52:c7:21:7f:91:9e:71:c3:07:
ee:24:53:34:41:59:ff:0a:17:82:b3:4d:a6:4d:ed:90:fa:ce:
ad:c5:e1:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:42:40 2025 by rpki-client