Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/bd0c07-e972-4d88-95e8-fc958e8d48c2/1/Kk17QDRaVm55Nj1Ql5GZNxMxg-E.roa
File: Kk17QDRaVm55Nj1Ql5GZNxMxg-E.roa (raw, json)
Hash identifier: 1DI9vhSZXA/YJqAVaaagZypXr5kFSqz0lKWRcfLOEfQ=
Subject key identifier: 2A:4D:7B:40:34:5A:56:6E:79:36:3D:50:97:91:99:37:13:31:83:E1
Certificate issuer: /CN=56e02f73509bde35d95d1851803e1f00829eb718
Certificate serial: 01941FFA09934BC10E4CF6AF4E7B378E9698
Authority key identifier: 56:E0:2F:73:50:9B:DE:35:D9:5D:18:51:80:3E:1F:00:82:9E:B7:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VuAvc1Cb3jXZXRhRgD4fAIKetxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/bd0c07-e972-4d88-95e8-fc958e8d48c2/1/Kk17QDRaVm55Nj1Ql5GZNxMxg-E.roa
Signing time: Wed 01 Jan 2025 03:47:47 +0000
ROA not before: Wed 01 Jan 2025 03:47:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15962
IP address blocks: 195.3.168.0/22 maxlen: 22
195.78.44.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:09:93:4b:c1:0e:4c:f6:af:4e:7b:37:8e:96:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56e02f73509bde35d95d1851803e1f00829eb718
Validity
Not Before: Jan 1 03:47:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2a4d7b40345a566e79363d5097919937133183e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:0f:e0:b7:26:89:33:0c:89:06:91:7c:3d:69:
19:c0:94:66:9b:77:cd:81:8f:05:45:c8:a4:fa:a5:
6c:34:75:5e:13:d1:66:0c:06:c2:e7:45:b3:e8:8d:
5a:af:c8:3c:df:23:34:e6:4b:d4:1f:ba:0e:dc:cc:
ae:c3:05:54:d3:1f:d2:95:2b:8c:26:4b:13:99:7e:
d8:5a:3c:7e:eb:da:46:53:31:9d:6a:41:86:ce:66:
b0:db:9e:07:89:55:02:8d:a5:e9:9c:b2:81:bc:fe:
81:39:e6:47:92:c7:7e:7c:da:7a:b5:38:7e:f7:55:
40:5d:79:05:f5:c7:b4:eb:cb:ba:9f:79:3b:77:cc:
52:54:2a:ac:6a:eb:92:85:15:3f:e9:a0:5a:c0:e7:
67:6e:e5:5b:bc:66:5e:e0:d6:5e:e8:ef:c8:46:4b:
3f:de:07:fe:51:11:48:fe:3b:94:46:fe:50:7a:a1:
d1:5a:f4:b4:46:30:e6:91:f2:c1:37:4b:24:eb:20:
a7:e5:6c:3e:2a:4d:4a:18:6c:4d:e5:ab:88:3f:2a:
c6:0c:a7:3b:3d:e9:4c:fd:56:78:e4:7a:b1:66:a7:
46:9f:5e:61:33:00:06:86:14:7c:a1:7c:1e:51:fd:
ec:83:24:f7:f2:ff:c0:16:ff:d5:16:64:d1:40:91:
a6:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:4D:7B:40:34:5A:56:6E:79:36:3D:50:97:91:99:37:13:31:83:E1
X509v3 Authority Key Identifier:
keyid:56:E0:2F:73:50:9B:DE:35:D9:5D:18:51:80:3E:1F:00:82:9E:B7:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VuAvc1Cb3jXZXRhRgD4fAIKetxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/bd0c07-e972-4d88-95e8-fc958e8d48c2/1/Kk17QDRaVm55Nj1Ql5GZNxMxg-E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/bd0c07-e972-4d88-95e8-fc958e8d48c2/1/VuAvc1Cb3jXZXRhRgD4fAIKetxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.3.168.0/22
195.78.44.0/23
Signature Algorithm: sha256WithRSAEncryption
65:6b:16:c5:9d:a5:40:2d:1a:a6:af:e7:e9:0e:20:39:af:87:
29:1d:f2:fd:0e:39:b8:73:fc:9a:b8:ff:a8:da:a4:8a:ad:c8:
f2:6c:26:62:36:2a:92:09:ad:13:fa:1d:d9:3d:ab:28:6d:99:
85:59:d9:1f:4b:db:24:c4:c4:2f:5a:74:66:aa:69:6d:1c:c7:
d9:05:9a:fa:01:8a:09:cf:d8:5c:13:cc:64:9a:b1:67:e8:5f:
3d:65:b6:33:01:6a:95:33:1b:be:35:d4:9f:d1:84:56:aa:a2:
a7:c2:ed:a7:d2:d7:3a:3d:39:97:49:b3:72:36:85:7d:89:af:
1f:c0:5a:e7:1c:58:87:c2:66:af:77:a7:68:d8:55:be:00:c5:
9e:e5:e8:9c:ce:25:f0:6a:65:cf:55:4b:6c:be:7a:a4:33:87:
1e:19:bd:30:f6:7b:20:f0:f6:8c:6a:ba:6e:3d:18:9f:4d:46:
2c:95:05:4f:fb:93:79:15:3a:8e:b9:3f:b9:3f:65:c6:5d:bd:
b8:dc:a0:dd:74:eb:a1:16:90:cc:1e:3a:53:57:1a:be:31:7d:
2a:fb:54:87:1a:23:4d:07:70:e3:82:2f:12:19:f8:23:5e:70:
3c:cf:7e:be:6a:63:fa:d3:00:5e:a9:8e:63:fa:2a:89:ac:17:
34:29:8e:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:14:15 2025 by rpki-client