Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/qGiSBSeyzRyn9Ajz7HhD8l7tG3Y.roa
File: qGiSBSeyzRyn9Ajz7HhD8l7tG3Y.roa (raw, json)
Hash identifier: GnnaWIKpN0eAjpEg8P80sj2L9RGvECjZg+1BZwASIyQ=
Subject key identifier: A8:68:92:05:27:B2:CD:1C:A7:F4:08:F3:EC:78:43:F2:5E:ED:1B:76
Certificate issuer: /CN=e7f881401abacc88c941fdf740f1ab1536f05dba
Certificate serial: 0194236A2AF5A98DD29791E356BB0A5DBDF6
Authority key identifier: E7:F8:81:40:1A:BA:CC:88:C9:41:FD:F7:40:F1:AB:15:36:F0:5D:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5_iBQBq6zIjJQf33QPGrFTbwXbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/qGiSBSeyzRyn9Ajz7HhD8l7tG3Y.roa
Signing time: Wed 01 Jan 2025 19:49:07 +0000
ROA not before: Wed 01 Jan 2025 19:49:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39456
IP address blocks: 195.12.137.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:2a:f5:a9:8d:d2:97:91:e3:56:bb:0a:5d:bd:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7f881401abacc88c941fdf740f1ab1536f05dba
Validity
Not Before: Jan 1 19:49:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a868920527b2cd1ca7f408f3ec7843f25eed1b76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ae:ee:c7:6e:58:b7:02:11:00:cd:d1:09:63:
c5:c5:2e:7a:52:ef:fd:c4:f5:28:be:c7:64:ab:fe:
c8:f6:18:8f:fd:bb:8a:f3:4a:89:f3:23:4b:22:10:
28:0a:6d:28:6c:6e:66:01:e4:59:60:13:79:4d:de:
ad:d4:aa:2b:be:f0:c6:fc:6b:17:df:9e:99:82:b8:
33:74:65:f2:66:98:60:dd:36:22:b8:a9:33:c6:2b:
39:de:f0:fa:5e:ba:62:d5:04:86:14:68:79:28:ca:
67:f4:26:8a:30:57:f9:08:4a:e3:36:c5:62:23:52:
fa:65:d5:a0:6e:cf:96:28:3d:70:01:e8:67:26:00:
41:a1:a6:f7:07:4f:fe:91:db:87:d0:86:ba:1c:33:
2a:4f:5f:3a:ab:1f:01:e1:67:d0:2a:ce:1d:b4:d8:
40:24:59:47:e7:ec:c9:5f:10:96:00:cb:4a:f8:48:
60:78:b7:e1:bf:8f:aa:ac:f5:11:8b:f9:e7:62:aa:
6f:6b:fd:99:c7:8b:dc:e1:fb:b4:7d:20:fd:e1:c5:
56:ea:ee:a8:5b:26:20:ed:ac:2f:3c:55:6e:78:7a:
68:f2:b0:41:c4:db:e5:8e:51:13:16:6c:93:6f:64:
b4:70:33:48:ea:ba:cd:6d:3c:0b:e5:a0:cc:57:85:
f4:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:68:92:05:27:B2:CD:1C:A7:F4:08:F3:EC:78:43:F2:5E:ED:1B:76
X509v3 Authority Key Identifier:
keyid:E7:F8:81:40:1A:BA:CC:88:C9:41:FD:F7:40:F1:AB:15:36:F0:5D:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_iBQBq6zIjJQf33QPGrFTbwXbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/qGiSBSeyzRyn9Ajz7HhD8l7tG3Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/5_iBQBq6zIjJQf33QPGrFTbwXbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.12.137.0/24
Signature Algorithm: sha256WithRSAEncryption
50:dc:82:a0:1c:f9:a4:1b:c1:82:54:79:05:d7:ba:94:d3:6f:
ec:1e:b1:d0:c6:b8:48:b1:8c:28:da:06:b4:2d:5d:77:fc:eb:
90:c5:59:20:33:c5:a2:f6:eb:ec:58:b7:4a:fe:f7:4d:8c:be:
44:2a:12:b6:df:d0:22:a7:bc:bb:0b:79:a5:fc:0c:4f:df:e8:
10:ad:e4:7c:31:db:8a:ce:de:42:fd:bc:43:ce:90:25:a7:5a:
68:b9:68:c2:f6:83:42:44:1d:01:4d:79:bf:c0:5c:b4:1b:0b:
66:09:ac:0a:77:84:c3:a4:eb:7f:27:ce:76:d0:8a:d8:a1:2a:
d5:de:f5:44:90:20:f1:7e:49:a0:ec:fb:34:24:6c:e9:d4:d4:
61:90:e8:52:3b:7f:ea:5c:9c:a7:f0:69:a8:66:8c:3f:4f:43:
9b:31:56:80:97:cf:67:cd:31:d8:ca:bb:59:6f:c6:0e:48:30:
42:fe:0c:61:4b:5a:d9:af:be:4e:9d:41:95:de:22:be:21:fe:
38:bf:a8:66:8c:f7:da:95:e5:98:71:83:31:76:09:15:cf:0f:
9c:ec:0a:94:28:c0:4d:a6:e4:79:a3:6e:38:8d:70:29:d5:c6:
64:37:00:60:6b:18:15:49:fb:0c:f6:6f:a5:70:1d:f7:25:67:
e1:ca:0c:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:32:04 2025 by rpki-client