Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/7142b1-7091-4d3a-bd6d-9fe7ee9c0368/1/F4E_A-3GsiPbrHv0FpBjWEBAnaw.roa
File: F4E_A-3GsiPbrHv0FpBjWEBAnaw.roa (raw, json)
Hash identifier: Ib9TkfBhAWRiVd7E8+OAkowsQ7AwC9M2n6bdugTcuJM=
Subject key identifier: 17:81:3F:03:ED:C6:B2:23:DB:AC:7B:F4:16:90:63:58:40:40:9D:AC
Certificate issuer: /CN=84db747b289717a0684cd6ac82307aa67bb2d7bb
Certificate serial: 019427B6150736B79E17687E2742FAC22C00
Authority key identifier: 84:DB:74:7B:28:97:17:A0:68:4C:D6:AC:82:30:7A:A6:7B:B2:D7:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hNt0eyiXF6BoTNasgjB6pnuy17s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/7142b1-7091-4d3a-bd6d-9fe7ee9c0368/1/F4E_A-3GsiPbrHv0FpBjWEBAnaw.roa
Signing time: Thu 02 Jan 2025 15:50:31 +0000
ROA not before: Thu 02 Jan 2025 15:50:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12363
IP address blocks: 195.110.96.0/19 maxlen: 24
195.110.96.0/24 maxlen: 24
195.110.97.0/24 maxlen: 24
195.110.99.0/24 maxlen: 24
2a0e:f080:1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:15:07:36:b7:9e:17:68:7e:27:42:fa:c2:2c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84db747b289717a0684cd6ac82307aa67bb2d7bb
Validity
Not Before: Jan 2 15:50:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=17813f03edc6b223dbac7bf41690635840409dac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d1:91:b0:9d:df:14:65:87:0f:a4:6c:98:bc:
7f:b8:56:37:23:e1:7b:ea:76:54:88:0e:c2:34:72:
8a:e2:de:70:fc:59:0a:37:a4:3b:6d:89:cf:1b:25:
17:54:b1:9d:79:ef:5d:96:7b:a7:33:64:e8:a1:fc:
71:f6:8e:ad:c6:62:99:0c:42:50:79:cb:43:eb:9d:
10:61:de:c5:bb:df:73:d7:0e:16:09:4e:a1:9a:88:
b1:b5:b5:8e:e8:a5:f6:97:04:a7:ec:37:aa:43:47:
62:af:16:21:9f:ac:a1:0b:d9:ca:25:10:15:a7:3d:
4d:16:ff:3e:2b:8e:c9:2d:33:e0:f9:fe:43:5f:1d:
ca:0e:87:9f:fe:75:b8:1e:9c:18:02:4b:3c:e3:58:
b1:b4:88:43:4f:eb:ba:f6:72:03:4c:22:84:0a:b4:
fe:e6:ec:e4:ce:ca:e0:29:7d:d0:55:62:57:94:2a:
74:74:d1:0e:f2:63:77:20:a4:3d:b0:76:e6:58:df:
70:00:d1:ab:2e:13:40:ac:67:47:50:e9:67:49:74:
d5:6d:99:f1:dc:23:06:2d:ef:26:14:e2:d9:87:e7:
ce:ee:44:ac:d9:ab:dc:52:5e:72:b8:2a:d0:55:5b:
59:7e:ed:df:c8:ea:a5:9e:fe:60:50:c5:b7:5a:91:
15:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:81:3F:03:ED:C6:B2:23:DB:AC:7B:F4:16:90:63:58:40:40:9D:AC
X509v3 Authority Key Identifier:
keyid:84:DB:74:7B:28:97:17:A0:68:4C:D6:AC:82:30:7A:A6:7B:B2:D7:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hNt0eyiXF6BoTNasgjB6pnuy17s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/7142b1-7091-4d3a-bd6d-9fe7ee9c0368/1/F4E_A-3GsiPbrHv0FpBjWEBAnaw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/7142b1-7091-4d3a-bd6d-9fe7ee9c0368/1/hNt0eyiXF6BoTNasgjB6pnuy17s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.110.96.0/19
IPv6:
2a0e:f080:1::/48
Signature Algorithm: sha256WithRSAEncryption
1d:8c:a9:f8:ea:58:26:06:fa:10:88:38:67:e6:49:6f:1a:e9:
89:fd:13:98:93:42:5f:6a:95:5b:81:cc:2a:7a:80:58:da:3e:
cf:87:81:d5:66:a0:5d:f1:72:97:4a:2d:25:92:cd:ea:e8:5d:
be:e3:d3:4f:24:ec:22:a4:e2:5f:c8:2a:61:90:c1:c1:b7:1e:
27:82:4e:79:08:4c:8c:ee:78:6b:3e:c0:d3:95:31:68:7b:33:
90:00:99:b8:12:01:52:7d:66:ad:7b:a9:7b:c8:2f:54:7b:f6:
a8:d4:ad:7f:fc:e0:70:39:d1:df:07:18:29:01:02:b5:47:4c:
dd:43:d8:16:0f:1d:51:cb:91:fa:8f:ef:83:6b:89:0a:1d:db:
cd:6a:1f:ab:96:52:c1:1b:e4:64:4a:9e:b0:36:73:3c:25:4b:
b8:09:f1:37:00:e5:22:b0:2d:1a:b6:b3:09:b3:c5:c6:c2:58:
0e:76:2e:9a:52:45:59:0b:18:51:9b:48:c3:33:8a:56:a1:ac:
58:e8:5b:dd:2e:1b:3f:77:3c:8e:2a:b7:e2:c2:55:08:df:ae:
36:07:c1:d8:82:c7:57:14:17:f1:0f:fe:a1:e9:d9:3d:9d:36:
aa:fe:d4:98:a3:bb:06:0f:c1:57:06:6c:5a:4e:40:a1:97:a2:
55:60:25:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:39:52 2025 by rpki-client