Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/2a57be-be77-4428-8e93-ba5201ea5f83/1/9VAtH6rT9AmgMjM5y2MsDg-1uuk.roa
File: 9VAtH6rT9AmgMjM5y2MsDg-1uuk.roa (raw, json)
Hash identifier: wQrCWKGL3Sn9wGoFnk6i9VJ1UdYXoGTZv1+i2lw0LfY=
Subject key identifier: F5:50:2D:1F:AA:D3:F4:09:A0:32:33:39:CB:63:2C:0E:0F:B5:BA:E9
Certificate issuer: /CN=a4b65da1753fb4eeedb86fda87dd3afa69d862d0
Certificate serial: 01942521998C5A92F5AB8B802EDA41F34B26
Authority key identifier: A4:B6:5D:A1:75:3F:B4:EE:ED:B8:6F:DA:87:DD:3A:FA:69:D8:62:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pLZdoXU_tO7tuG_ah906-mnYYtA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/2a57be-be77-4428-8e93-ba5201ea5f83/1/9VAtH6rT9AmgMjM5y2MsDg-1uuk.roa
Signing time: Thu 02 Jan 2025 03:49:06 +0000
ROA not before: Thu 02 Jan 2025 03:49:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44544
IP address blocks: 195.216.222.0/24 maxlen: 24
195.216.223.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:99:8c:5a:92:f5:ab:8b:80:2e:da:41:f3:4b:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4b65da1753fb4eeedb86fda87dd3afa69d862d0
Validity
Not Before: Jan 2 03:49:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f5502d1faad3f409a0323339cb632c0e0fb5bae9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:3f:83:94:e5:da:22:b7:df:dc:15:23:63:d3:
ad:e7:fc:e0:1c:48:71:aa:59:26:25:eb:73:c3:5b:
48:8c:39:56:8e:57:dd:df:9b:17:4a:24:b1:2f:c5:
bc:81:a7:83:d3:5b:a7:01:cf:dd:0f:b4:39:8f:00:
cc:5e:35:05:25:99:5c:fa:c5:01:0e:b0:30:bc:20:
d5:28:f9:02:64:34:e3:fc:a8:d8:89:5a:a1:0e:60:
bc:c5:b7:40:7f:d6:20:c8:e3:2c:bb:64:1b:24:57:
a8:b8:d1:77:6c:52:c5:30:37:61:e8:10:b6:db:bb:
3c:04:fc:89:0d:75:32:e5:99:c1:8e:7d:a6:3d:ff:
24:73:53:c3:4d:01:5c:e2:ce:f5:38:34:f2:05:53:
97:a6:0e:ec:b4:39:1d:6b:08:98:6c:6c:e1:50:0c:
4e:79:aa:fc:f4:43:c6:54:c9:79:3b:ac:a2:b4:e3:
e7:80:55:75:70:3b:cf:6e:3d:e2:4f:f8:05:c4:8e:
ae:23:9a:fd:50:0a:bf:8d:d8:ef:78:e5:b0:47:9a:
6a:fe:a6:72:43:7d:34:68:89:77:03:ae:a0:48:8c:
ab:e1:91:ab:15:1a:3a:34:f8:cc:17:7c:00:22:43:
5d:97:b6:b1:42:3f:da:f1:35:a2:83:3f:07:0a:f6:
34:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:50:2D:1F:AA:D3:F4:09:A0:32:33:39:CB:63:2C:0E:0F:B5:BA:E9
X509v3 Authority Key Identifier:
keyid:A4:B6:5D:A1:75:3F:B4:EE:ED:B8:6F:DA:87:DD:3A:FA:69:D8:62:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pLZdoXU_tO7tuG_ah906-mnYYtA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2a57be-be77-4428-8e93-ba5201ea5f83/1/9VAtH6rT9AmgMjM5y2MsDg-1uuk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2a57be-be77-4428-8e93-ba5201ea5f83/1/pLZdoXU_tO7tuG_ah906-mnYYtA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.216.222.0/23
Signature Algorithm: sha256WithRSAEncryption
14:3f:df:f5:da:c7:b1:e4:a4:7c:77:fd:98:22:67:06:7c:14:
57:aa:76:cc:78:7a:94:00:c1:f3:e7:37:98:1a:ef:5e:f7:e8:
61:3e:5a:9c:88:9e:08:7a:d9:a9:9f:d6:16:8b:89:8a:e4:f6:
2b:de:60:02:67:91:ca:9d:44:b0:c0:52:65:a2:86:82:01:53:
b5:0a:dd:d7:24:5c:5b:21:db:59:53:07:a2:5d:2a:68:d1:55:
be:c4:84:9b:53:ee:8a:52:19:42:47:6f:b0:94:20:54:74:01:
45:9d:42:64:8b:cc:49:c8:f0:cd:bc:60:c5:7a:70:94:8c:03:
12:47:4c:5b:b5:cc:d7:67:6d:1d:d4:ed:0b:44:4c:95:6a:0a:
a4:ae:42:90:d2:e2:a7:4b:22:21:1c:f3:08:34:a2:fc:51:96:
d3:c0:74:2a:54:40:de:b5:b7:cd:47:be:62:8a:ff:e2:2a:b8:
3d:dc:f0:7c:18:3c:be:86:9c:ad:a8:b2:33:7e:81:ff:ef:2a:
ce:4a:5c:18:ae:f5:e1:e5:6d:e0:62:c2:f8:d4:96:b6:92:c1:
63:2e:ca:07:0c:54:3f:21:d0:65:4f:58:3a:24:8d:9e:af:dc:
bc:4b:36:e1:ef:6c:f0:9a:ba:18:8a:18:30:d6:71:b7:78:18:
e4:a1:a6:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:40:01 2025 by rpki-client