Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/9zLvzm8otYmFem1Qd75FwmrsSxc.roa
File: 9zLvzm8otYmFem1Qd75FwmrsSxc.roa (raw, json)
Hash identifier: mU0sIkevG3y3WSoCK/P7ZAFf/EzDIDHpCIUVj9uqHhU=
Subject key identifier: F7:32:EF:CE:6F:28:B5:89:85:7A:6D:50:77:BE:45:C2:6A:EC:4B:17
Certificate issuer: /CN=b914961f67f22c61e84a66c8ad9c1a8ce51d099b
Certificate serial: 019428236BDD2FCAB90CD95DE873FA585C2D
Authority key identifier: B9:14:96:1F:67:F2:2C:61:E8:4A:66:C8:AD:9C:1A:8C:E5:1D:09:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRSWH2fyLGHoSmbIrZwajOUdCZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/9zLvzm8otYmFem1Qd75FwmrsSxc.roa
Signing time: Thu 02 Jan 2025 17:49:57 +0000
ROA not before: Thu 02 Jan 2025 17:49:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211974
IP address blocks: 195.5.76.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:6b:dd:2f:ca:b9:0c:d9:5d:e8:73:fa:58:5c:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b914961f67f22c61e84a66c8ad9c1a8ce51d099b
Validity
Not Before: Jan 2 17:49:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f732efce6f28b589857a6d5077be45c26aec4b17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:d4:68:b3:05:39:5a:b7:4f:c6:f5:21:ce:8b:
df:2b:eb:2d:6d:c2:b8:86:b0:2f:b3:80:eb:37:f8:
27:86:73:bb:93:de:56:72:ce:3d:06:39:f1:71:ee:
f1:75:46:0c:16:15:00:b8:b3:00:4e:01:cf:bc:14:
07:87:39:bf:c8:da:e9:27:f6:dd:b2:52:33:42:84:
51:67:f3:f4:e9:3c:d5:f1:3e:6f:a1:1b:e6:75:99:
54:49:4a:77:21:f7:05:96:a5:49:1f:76:93:82:e9:
ae:44:0f:d4:ef:7e:02:5e:21:75:cf:39:6e:e8:c0:
c3:95:a2:a0:38:8d:90:16:24:c8:e0:d0:20:12:d3:
c3:b4:62:d6:75:54:49:16:71:8e:01:80:42:0c:b8:
93:05:e8:2e:f0:86:4e:ef:eb:b7:f6:9b:72:dc:6b:
76:67:23:24:1b:29:0e:cc:d7:27:52:60:5d:ab:08:
f3:99:8b:89:1a:ad:da:9c:ba:b2:bc:c2:8c:43:8b:
45:32:17:cc:fe:3e:7e:2b:e1:bd:3b:07:da:29:15:
77:09:ad:d5:46:a7:db:08:37:92:bc:35:87:06:dc:
25:9d:47:b6:d0:a4:cf:ec:7e:42:f8:48:d2:e6:cf:
a7:ea:0b:06:ee:48:45:d4:b3:51:19:f2:a8:d2:ce:
da:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:32:EF:CE:6F:28:B5:89:85:7A:6D:50:77:BE:45:C2:6A:EC:4B:17
X509v3 Authority Key Identifier:
keyid:B9:14:96:1F:67:F2:2C:61:E8:4A:66:C8:AD:9C:1A:8C:E5:1D:09:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRSWH2fyLGHoSmbIrZwajOUdCZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/9zLvzm8otYmFem1Qd75FwmrsSxc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/uRSWH2fyLGHoSmbIrZwajOUdCZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.5.76.0/23
Signature Algorithm: sha256WithRSAEncryption
23:dc:0c:d4:56:97:af:d5:23:f6:3e:ce:17:ec:ee:3d:15:97:
b2:7d:91:6a:43:31:e2:58:59:f7:93:eb:70:0d:76:85:4a:cb:
c8:f4:f5:10:fd:e8:65:35:35:3a:72:cb:7a:e7:0a:e0:83:15:
60:90:c5:b2:42:fa:c3:2f:fc:ba:ec:f5:e3:16:f3:ab:7d:45:
bf:75:74:28:49:5b:96:fa:f5:b4:44:20:08:b6:69:d4:77:50:
90:c9:21:e4:9b:78:9c:77:6d:65:96:63:27:86:1c:bf:8d:67:
02:4a:fd:56:33:32:26:d9:0a:8a:63:fe:af:00:c4:1e:fc:e7:
8c:ad:af:a1:6a:28:3c:7f:ca:ed:2a:c7:49:eb:9a:f3:c5:94:
ab:f9:82:f9:9b:14:f4:d9:dc:20:14:b5:54:15:6b:71:be:a5:
48:ea:91:0a:6a:37:6d:52:cb:4b:01:10:70:87:f9:55:af:73:
54:7f:4d:af:94:f9:f8:5a:5f:8a:55:bd:59:28:ec:17:53:50:
95:2b:74:84:fa:a8:5a:7a:ec:fb:89:59:d7:f0:75:f5:ae:b8:
a5:24:3f:69:e4:b0:2d:38:20:55:96:da:b3:de:14:19:34:e4:
61:77:60:10:35:98:6e:47:b7:32:6d:d5:4a:62:27:3a:9f:3b:
03:47:53:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:45:40 2025 by rpki-client