Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/08164a-8821-47c1-bd48-5f9e482f1bf4/1/K0MDRhPja4FBoWQBNDrKCNqcl-Q.roa
File: K0MDRhPja4FBoWQBNDrKCNqcl-Q.roa (raw, json)
Hash identifier: WPTwJ7uNCLk7bUU9KEWKxx4fN9uRask9g0nASALMjjE=
Subject key identifier: 2B:43:03:46:13:E3:6B:81:41:A1:64:01:34:3A:CA:08:DA:9C:97:E4
Certificate issuer: /CN=d09363cfebbbf92a51e428533d3e8ad412aa3374
Certificate serial: 019422FBA77072F5673DB7B7AED50B72E0B7
Authority key identifier: D0:93:63:CF:EB:BB:F9:2A:51:E4:28:53:3D:3E:8A:D4:12:AA:33:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0JNjz-u7-SpR5ChTPT6K1BKqM3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/08164a-8821-47c1-bd48-5f9e482f1bf4/1/K0MDRhPja4FBoWQBNDrKCNqcl-Q.roa
Signing time: Wed 01 Jan 2025 17:48:25 +0000
ROA not before: Wed 01 Jan 2025 17:48:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12779
IP address blocks: 195.238.235.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:a7:70:72:f5:67:3d:b7:b7:ae:d5:0b:72:e0:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d09363cfebbbf92a51e428533d3e8ad412aa3374
Validity
Not Before: Jan 1 17:48:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2b43034613e36b8141a16401343aca08da9c97e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:cb:2d:2f:56:b0:b3:b1:47:0a:86:66:e0:60:
8d:c3:b4:e9:c7:4f:a5:b8:3a:af:3f:60:ef:6c:a2:
d2:ae:dc:25:1d:bb:df:6e:91:08:93:5e:8b:de:13:
51:49:92:a3:70:0f:58:4b:79:15:cf:51:bb:69:11:
53:a5:4f:2a:a1:18:61:df:ee:6e:37:c6:5c:06:21:
52:54:d0:99:37:ab:c4:a9:50:42:b9:af:18:7a:eb:
90:ab:dd:79:4e:b2:06:e6:2f:ce:99:1d:f4:cf:34:
da:0c:87:95:3d:bf:0b:45:ea:a2:b9:d0:2e:80:2c:
0d:0e:9b:a0:3a:e0:de:39:d2:3d:5e:c2:02:f4:54:
ff:59:f7:75:2c:f3:f5:4a:aa:15:43:21:38:e9:7b:
c6:e1:db:50:94:93:70:75:2f:dc:a0:19:76:74:c2:
06:86:6f:95:b5:af:91:5a:59:7b:22:60:16:50:55:
2d:5a:cc:47:e2:dd:cd:fd:53:dd:e8:e7:90:f0:cd:
9f:51:40:d3:80:8f:35:24:60:ba:f0:ed:48:96:6e:
42:50:4d:02:4b:41:b5:de:8f:3e:53:89:ba:9f:e8:
c5:df:78:70:ce:5a:2b:bd:6f:b0:db:af:ff:4f:3c:
24:5a:9b:f1:39:dc:10:ee:51:4f:13:aa:f9:c6:40:
07:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:43:03:46:13:E3:6B:81:41:A1:64:01:34:3A:CA:08:DA:9C:97:E4
X509v3 Authority Key Identifier:
keyid:D0:93:63:CF:EB:BB:F9:2A:51:E4:28:53:3D:3E:8A:D4:12:AA:33:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0JNjz-u7-SpR5ChTPT6K1BKqM3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/08164a-8821-47c1-bd48-5f9e482f1bf4/1/K0MDRhPja4FBoWQBNDrKCNqcl-Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/08164a-8821-47c1-bd48-5f9e482f1bf4/1/0JNjz-u7-SpR5ChTPT6K1BKqM3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.238.235.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:cf:e8:ae:00:15:a9:ce:87:3b:83:18:7f:33:9c:4f:bc:a5:
64:aa:be:c5:f9:4c:59:9c:f3:71:08:f8:93:6a:83:49:d6:23:
49:ee:8a:6c:db:20:31:c1:51:42:c8:38:37:2e:8c:54:72:d1:
3a:4f:74:0d:22:04:1d:62:82:0d:96:d7:a2:09:9f:fc:83:c8:
ef:ee:20:7e:1d:e1:7f:e8:e7:5e:3a:04:7f:e1:4b:ba:40:0a:
e3:ab:fd:b6:a4:3d:5d:5f:e1:02:5b:aa:27:f4:a8:91:66:8d:
9e:d8:64:e3:e9:4f:61:a1:7e:15:5a:c5:c5:90:89:2a:7f:ae:
2f:7f:e0:fe:fe:57:1d:a1:fb:19:de:15:e7:53:e5:60:48:f6:
a0:43:01:a2:84:ff:b2:32:00:90:0b:79:34:05:e8:d8:bd:90:
29:39:4a:98:ea:cd:e0:6f:1e:8a:26:15:d1:2f:b7:83:92:ed:
f1:ba:de:0b:8d:5f:d4:ec:57:ce:8b:01:83:90:86:84:97:58:
a6:af:f7:0a:e2:aa:ac:9a:4c:ae:9c:d0:07:a8:a6:99:b2:0e:
35:5b:e8:71:f4:9d:f4:d9:b5:cc:ce:90:0b:5a:4e:2b:63:9e:
9d:2b:fe:85:2f:86:ce:f9:6d:32:fc:94:a6:fd:cc:f2:17:95:
fe:eb:af:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:28:35 2025 by rpki-client