Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/6977cd-4343-4b4c-8cea-bd35c048b930/1/7agd0xXHCJCEBXtCCNxD5ubRKuY.roa
File: 7agd0xXHCJCEBXtCCNxD5ubRKuY.roa (raw, json)
Hash identifier: oQw/mKm0E4AJl8kl0WckRZJlnbPoPgaZD+9rJpy3frY=
Subject key identifier: ED:A8:1D:D3:15:C7:08:90:84:05:7B:42:08:DC:43:E6:E6:D1:2A:E6
Certificate issuer: /CN=0e6d8fd77dade3d3f96cb49931948c2729ada0de
Certificate serial: 0194274858AD4D80AF164A71CEDBE4377C4A
Authority key identifier: 0E:6D:8F:D7:7D:AD:E3:D3:F9:6C:B4:99:31:94:8C:27:29:AD:A0:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dm2P132t49P5bLSZMZSMJymtoN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/6977cd-4343-4b4c-8cea-bd35c048b930/1/7agd0xXHCJCEBXtCCNxD5ubRKuY.roa
Signing time: Thu 02 Jan 2025 13:50:40 +0000
ROA not before: Thu 02 Jan 2025 13:50:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9161
IP address blocks: 195.110.160.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:58:ad:4d:80:af:16:4a:71:ce:db:e4:37:7c:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e6d8fd77dade3d3f96cb49931948c2729ada0de
Validity
Not Before: Jan 2 13:50:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eda81dd315c7089084057b4208dc43e6e6d12ae6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:9d:e4:d4:cb:12:10:e4:19:a3:3e:12:7c:38:
5d:58:da:8b:4d:3f:21:68:fe:06:73:ae:76:96:8e:
96:51:a8:2a:34:91:ce:d5:c2:a8:97:1c:4f:65:86:
62:62:cd:c1:53:c1:0c:a4:c2:1a:6b:0d:39:6c:c4:
f1:ae:2d:83:82:9d:fb:72:ec:45:e7:69:de:60:21:
59:5e:6e:d0:08:7b:7b:9a:7e:b9:f0:ad:9d:85:bf:
ad:12:e2:84:54:dd:ef:b6:db:85:d6:ad:47:ba:1f:
45:93:45:4f:49:b3:d6:a9:d7:48:59:5a:67:a7:15:
07:75:49:64:5d:9f:b6:a2:17:68:df:24:0e:26:56:
41:5e:ba:8e:94:d3:2e:80:a5:eb:77:c3:16:f6:1a:
8a:da:fa:f6:fa:39:6d:76:bd:32:da:09:dd:6c:d5:
6f:17:1c:9f:6f:62:27:f3:70:e6:b6:09:4d:84:3c:
c0:36:95:13:75:b6:aa:d7:93:c2:2b:dc:6b:37:00:
c4:20:df:65:e4:04:8b:d1:03:96:81:c3:ab:d8:fc:
31:85:1b:fb:7c:56:df:72:04:2e:aa:ac:ae:b2:dc:
e6:58:f8:9c:80:a4:da:cb:38:ce:c6:90:c9:fa:54:
7f:62:50:72:d8:47:0a:52:f7:7d:0e:67:fa:76:ba:
05:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:A8:1D:D3:15:C7:08:90:84:05:7B:42:08:DC:43:E6:E6:D1:2A:E6
X509v3 Authority Key Identifier:
keyid:0E:6D:8F:D7:7D:AD:E3:D3:F9:6C:B4:99:31:94:8C:27:29:AD:A0:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dm2P132t49P5bLSZMZSMJymtoN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/6977cd-4343-4b4c-8cea-bd35c048b930/1/7agd0xXHCJCEBXtCCNxD5ubRKuY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/6977cd-4343-4b4c-8cea-bd35c048b930/1/Dm2P132t49P5bLSZMZSMJymtoN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.110.160.0/19
Signature Algorithm: sha256WithRSAEncryption
15:53:04:56:d8:ff:90:96:73:f7:00:3e:51:f5:4b:38:e5:e3:
ea:66:7f:28:14:3c:e2:2c:3c:22:aa:88:12:3a:f4:00:64:32:
2a:c2:21:36:c9:10:5a:03:77:a7:1d:0d:18:74:b5:1e:3c:3c:
4a:b1:90:24:22:6c:0b:62:ae:0d:94:c2:d1:55:4b:8e:ff:2d:
13:73:e8:3b:94:e9:d9:32:a1:b7:14:6f:42:21:cb:af:fa:bb:
15:3e:58:24:3b:50:35:e2:b8:90:3b:de:25:4a:8e:97:a0:42:
c0:d3:e9:05:82:af:99:05:04:c3:62:a3:99:d4:26:91:91:6c:
fd:22:87:48:4b:0b:37:3b:66:64:a0:41:a3:c2:83:c6:d9:9f:
02:c2:50:04:fb:86:e6:22:28:ab:52:ce:eb:95:c3:76:f5:69:
4a:d9:70:74:84:f6:38:bb:3d:07:81:4a:ef:2d:74:8b:75:77:
72:e2:65:41:a5:06:82:a2:7b:66:38:1d:d0:a2:34:20:bb:9e:
7f:a9:5a:55:19:15:77:4d:d0:82:e8:c5:2e:79:17:54:df:82:
d7:fc:51:ac:13:4a:f1:da:fe:a0:16:f7:26:42:bb:8a:70:9c:
b1:a0:8a:b2:9f:17:6d:d7:22:08:b2:96:c5:9a:46:32:c8:0f:
da:88:56:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:42:55 2025 by rpki-client