Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/56433a-0a70-4eae-9f9d-8cfbdb799284/1/50bo-j7HR95aUFz7is7MBLLkMsc.roa
File: 50bo-j7HR95aUFz7is7MBLLkMsc.roa (raw, json)
Hash identifier: aYgErZR0B+wLx1tDGd7DRHlBnCECIPjEQvva1IOrhbs=
Subject key identifier: E7:46:E8:FA:3E:C7:47:DE:5A:50:5C:FB:8A:CE:CC:04:B2:E4:32:C7
Certificate issuer: /CN=d21a5940722b207b29d95a6c81be0d2bf4d410cc
Certificate serial: 019427B475722164B3C5C97F3F1E9BECFBB5
Authority key identifier: D2:1A:59:40:72:2B:20:7B:29:D9:5A:6C:81:BE:0D:2B:F4:D4:10:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0hpZQHIrIHsp2Vpsgb4NK_TUEMw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/56433a-0a70-4eae-9f9d-8cfbdb799284/1/50bo-j7HR95aUFz7is7MBLLkMsc.roa
Signing time: Thu 02 Jan 2025 15:48:45 +0000
ROA not before: Thu 02 Jan 2025 15:48:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215867
IP address blocks: 195.211.125.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b4:75:72:21:64:b3:c5:c9:7f:3f:1e:9b:ec:fb:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d21a5940722b207b29d95a6c81be0d2bf4d410cc
Validity
Not Before: Jan 2 15:48:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e746e8fa3ec747de5a505cfb8acecc04b2e432c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:fd:6a:ee:a1:3b:94:2f:e6:c6:3b:be:77:e8:
f4:b7:e0:04:79:d6:73:bb:17:f8:37:62:fb:a6:2d:
fa:0d:c9:69:44:14:e2:ab:8a:9f:2e:66:34:45:c0:
4a:bf:0e:33:a2:5b:2c:66:2d:6f:47:3e:1e:40:f7:
e1:9d:8b:46:1c:5a:e2:27:ce:2a:31:7b:69:cb:58:
5a:0c:74:dd:a3:3e:b9:0b:55:b0:38:68:14:fd:38:
6d:f5:41:42:06:64:12:c1:3b:23:e7:6e:b8:52:e9:
92:67:b8:87:13:e4:61:21:cc:4b:fb:96:01:2e:13:
62:6a:09:b8:4b:71:c0:4e:9c:07:70:5e:ea:28:14:
8d:f7:1f:bf:b7:bf:8e:aa:b1:7d:46:64:8a:17:b9:
49:16:7f:d4:31:e3:a1:1a:36:f7:15:a7:ca:91:8c:
8f:41:4d:65:c5:0c:a5:91:9d:d2:5d:35:bc:fc:6a:
85:ce:35:6a:2b:a9:b6:3c:7f:e7:3c:64:0d:4d:4d:
3f:80:07:15:46:03:7c:d8:10:23:5b:19:f2:10:83:
de:a6:89:21:7a:34:e2:46:2c:cd:c6:60:82:5d:af:
10:62:40:9b:42:ed:05:04:c4:8a:b7:e2:d9:ec:84:
2c:91:89:4c:b1:c3:c6:88:2e:4e:43:c6:53:ab:74:
81:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:46:E8:FA:3E:C7:47:DE:5A:50:5C:FB:8A:CE:CC:04:B2:E4:32:C7
X509v3 Authority Key Identifier:
keyid:D2:1A:59:40:72:2B:20:7B:29:D9:5A:6C:81:BE:0D:2B:F4:D4:10:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0hpZQHIrIHsp2Vpsgb4NK_TUEMw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/56433a-0a70-4eae-9f9d-8cfbdb799284/1/50bo-j7HR95aUFz7is7MBLLkMsc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/56433a-0a70-4eae-9f9d-8cfbdb799284/1/0hpZQHIrIHsp2Vpsgb4NK_TUEMw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.211.125.0/24
Signature Algorithm: sha256WithRSAEncryption
51:98:e9:0d:49:71:09:f3:1c:41:3d:26:52:e1:af:3b:05:b4:
5a:6b:1c:e0:c5:be:e0:c9:51:88:5d:9c:19:56:5e:7d:d1:4f:
87:d5:90:92:36:54:cb:51:c4:b9:f6:b5:fc:bc:29:a4:c3:3f:
27:63:f7:fe:40:ea:88:da:70:09:27:b2:02:09:2e:fe:7f:ea:
37:e1:66:d3:0e:ec:07:98:d1:ef:32:c5:c2:43:20:a2:cc:07:
40:ad:74:92:ee:c7:74:a0:9f:1a:40:3f:e6:3b:11:37:a2:22:
b0:07:fe:1e:4c:82:8c:23:70:67:54:0f:0a:4f:41:c5:85:91:
1d:38:8e:0c:0d:4b:62:7e:a5:11:ef:79:3b:5c:3c:56:cb:a4:
9d:99:67:e4:97:eb:6b:18:2e:67:c7:d1:23:bc:af:2a:76:ca:
79:97:45:f6:b1:38:74:b6:27:5a:77:6e:18:cb:51:ff:53:ae:
43:32:06:0b:1b:e5:01:98:4d:33:be:c6:9f:88:f5:fa:f8:50:
00:8e:d7:df:5d:6b:4a:e9:66:09:d0:aa:16:2d:11:94:67:fa:
26:d0:29:23:39:d7:8a:b2:c9:59:78:a6:c9:d7:78:76:0f:10:
78:cc:f6:5e:a9:a1:09:03:ba:50:8d:ab:b3:02:36:c9:51:e7:
e4:8c:1e:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:48:08 2025 by rpki-client