Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/b26859-9b14-450f-bb85-592ed73761ca/1/saC2CSGHzjfoqz_AyeGRfbO_Z4c.roa
File: saC2CSGHzjfoqz_AyeGRfbO_Z4c.roa (raw, json)
Hash identifier: evXXOhKr0k/9XMT8MxumeZizzHV0YoG5/EuRYGW5sl4=
Subject key identifier: B1:A0:B6:09:21:87:CE:37:E8:AB:3F:C0:C9:E1:91:7D:B3:BF:67:87
Certificate issuer: /CN=ad2464ecc946f292e404f2c351922ecf4c590fd8
Certificate serial: 019422201B510E15EE3402C69E1341BE5E62
Authority key identifier: AD:24:64:EC:C9:46:F2:92:E4:04:F2:C3:51:92:2E:CF:4C:59:0F:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rSRk7MlG8pLkBPLDUZIuz0xZD9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/b26859-9b14-450f-bb85-592ed73761ca/1/saC2CSGHzjfoqz_AyeGRfbO_Z4c.roa
Signing time: Wed 01 Jan 2025 13:48:37 +0000
ROA not before: Wed 01 Jan 2025 13:48:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60453
IP address blocks: 195.62.51.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:1b:51:0e:15:ee:34:02:c6:9e:13:41:be:5e:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad2464ecc946f292e404f2c351922ecf4c590fd8
Validity
Not Before: Jan 1 13:48:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b1a0b6092187ce37e8ab3fc0c9e1917db3bf6787
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:cb:bc:aa:a7:31:ec:13:2b:d2:fa:2f:f9:71:
f7:39:44:b6:10:d7:00:38:c8:fa:79:71:33:91:21:
2b:11:0e:7c:57:4d:32:c2:98:8d:33:0b:37:dc:6e:
88:31:b7:45:40:3d:82:ad:3a:e9:7a:b8:e7:9b:97:
c2:7f:2d:cb:8d:d5:20:be:5e:25:17:3e:9a:cc:84:
5a:8c:ed:a9:5c:b7:17:f1:e1:11:ec:58:09:b5:f3:
dd:30:4b:d2:63:71:cf:86:e5:ad:f0:2e:2a:f5:e9:
f8:30:24:b6:b0:84:35:d2:ab:f0:5b:cd:78:21:32:
bb:33:bc:3b:de:cb:58:15:90:f4:99:8a:85:44:67:
02:44:44:68:90:8a:47:dc:e9:18:b6:4f:69:78:25:
c3:73:fc:16:1f:9d:ab:b7:6b:1a:81:f9:30:bc:0e:
59:52:34:c7:51:1f:47:ed:78:3d:c3:14:0b:7f:77:
5c:54:bd:1c:1d:56:2f:67:3a:4e:0e:fb:0a:f1:50:
a5:08:41:4a:fc:0b:31:ac:ef:ee:6d:2f:15:2d:fa:
93:1a:25:9a:74:f1:e9:1c:ff:41:bc:8f:05:68:b3:
09:d7:9b:20:c3:2c:90:f4:3b:b0:40:82:be:ef:72:
5f:d5:66:79:75:19:26:1f:dd:ed:76:0e:c0:ad:ce:
86:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:A0:B6:09:21:87:CE:37:E8:AB:3F:C0:C9:E1:91:7D:B3:BF:67:87
X509v3 Authority Key Identifier:
keyid:AD:24:64:EC:C9:46:F2:92:E4:04:F2:C3:51:92:2E:CF:4C:59:0F:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rSRk7MlG8pLkBPLDUZIuz0xZD9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/b26859-9b14-450f-bb85-592ed73761ca/1/saC2CSGHzjfoqz_AyeGRfbO_Z4c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/b26859-9b14-450f-bb85-592ed73761ca/1/rSRk7MlG8pLkBPLDUZIuz0xZD9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.62.51.0/24
Signature Algorithm: sha256WithRSAEncryption
02:b7:05:95:8b:ed:f1:96:14:90:0e:23:fe:0f:2c:ee:c3:6b:
be:34:45:fd:66:90:0a:3a:3c:a9:33:35:91:a6:93:c5:d7:26:
14:f3:83:af:79:8f:49:d6:8e:31:fa:a0:f7:9c:7c:0d:41:65:
1d:85:36:22:7b:58:9a:04:e9:ea:84:9d:bb:b3:6b:31:ff:60:
99:f0:1f:25:90:a7:58:b4:b3:e3:66:46:88:ae:7e:55:bc:90:
fb:d0:db:c7:d5:34:d4:81:b8:3b:0f:6d:bd:05:53:bc:49:8f:
2b:0f:6e:86:71:57:9e:5c:74:21:c4:f0:ef:48:64:15:e0:9e:
74:31:13:57:be:95:df:bd:e1:f2:a3:3d:9f:fd:29:fd:72:0f:
6b:b3:41:93:60:0d:16:a5:ff:2e:20:86:30:ca:b3:53:43:f3:
2f:71:58:cc:0c:1b:41:3a:e6:c0:1f:16:1c:f5:39:af:9b:44:
ac:48:ad:52:d6:4a:b5:dd:6f:e9:20:0c:0c:c4:21:db:d1:29:
1a:d2:f8:92:d2:7c:e8:8d:7e:7f:d2:84:3c:72:d6:65:ae:7e:
29:af:c3:1c:9a:8b:bf:35:d8:de:23:79:ad:66:23:1c:bd:d5:
23:06:50:ed:a0:e1:cc:b4:38:5e:8a:0e:11:09:29:5a:86:80:
56:d6:ce:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 01:48:51 2025 by rpki-client