Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/8b5dbf-458d-4326-9302-5aaac2cb0df1/1/pTPPFKoFJuWdMRGvxA7E4jX80_c.roa
File: pTPPFKoFJuWdMRGvxA7E4jX80_c.roa (raw, json)
Hash identifier: HeJcd3mD5OFJbnZMPOd7wMALaLnR8ioIMvdpAeeFOz0=
Subject key identifier: A5:33:CF:14:AA:05:26:E5:9D:31:11:AF:C4:0E:C4:E2:35:FC:D3:F7
Certificate issuer: /CN=b7848cd2393c1783657a05777ab315e398ebb23f
Certificate serial: 0194266B3F47C7D02945D1A4DC6B012599D9
Authority key identifier: B7:84:8C:D2:39:3C:17:83:65:7A:05:77:7A:B3:15:E3:98:EB:B2:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t4SM0jk8F4NlegV3erMV45jrsj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/8b5dbf-458d-4326-9302-5aaac2cb0df1/1/pTPPFKoFJuWdMRGvxA7E4jX80_c.roa
Signing time: Thu 02 Jan 2025 09:49:10 +0000
ROA not before: Thu 02 Jan 2025 09:49:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29559
IP address blocks: 195.177.208.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:3f:47:c7:d0:29:45:d1:a4:dc:6b:01:25:99:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7848cd2393c1783657a05777ab315e398ebb23f
Validity
Not Before: Jan 2 09:49:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a533cf14aa0526e59d3111afc40ec4e235fcd3f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:fa:f2:fb:f7:33:a4:ba:95:35:40:68:c0:ca:
0a:08:b5:ed:5d:dc:3c:8e:fd:95:3a:c8:5f:7a:0a:
3c:46:8c:da:ad:c5:01:f0:be:01:c0:36:68:57:4d:
dc:60:da:44:15:27:17:11:3b:8c:74:9b:ee:27:10:
cd:0b:49:36:b4:af:e9:d1:8a:6a:d4:27:88:27:69:
00:93:5b:99:e0:54:05:c8:3e:e0:ef:80:5a:e8:38:
46:e2:07:23:2b:1f:79:b9:14:e7:95:d2:dd:1c:e9:
1e:b0:11:c2:54:f7:16:a0:7b:03:1a:3f:7e:82:7e:
a5:61:4d:ca:08:95:6b:37:c9:1d:8d:ae:bc:b4:30:
9f:c8:a7:95:78:e3:fd:f8:fd:92:88:76:16:5d:78:
8d:26:03:a5:c8:e8:87:cf:66:ae:03:f0:37:49:7a:
32:28:91:18:cd:40:a1:e3:9c:b3:5d:08:b9:33:4a:
c8:13:1a:63:90:14:5d:9c:dc:77:df:88:52:b4:d6:
59:ab:5e:a0:0d:8a:6c:cf:c8:12:e8:42:ee:b7:bc:
6f:5f:b7:93:5d:a3:1c:cd:9d:b4:0d:8b:f1:b7:4b:
44:18:3b:11:e8:83:8c:d1:49:77:dc:cd:e7:12:9b:
ba:78:63:01:20:6c:7e:8a:86:8a:ca:fe:1b:3a:37:
3d:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:33:CF:14:AA:05:26:E5:9D:31:11:AF:C4:0E:C4:E2:35:FC:D3:F7
X509v3 Authority Key Identifier:
keyid:B7:84:8C:D2:39:3C:17:83:65:7A:05:77:7A:B3:15:E3:98:EB:B2:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t4SM0jk8F4NlegV3erMV45jrsj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/8b5dbf-458d-4326-9302-5aaac2cb0df1/1/pTPPFKoFJuWdMRGvxA7E4jX80_c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/8b5dbf-458d-4326-9302-5aaac2cb0df1/1/t4SM0jk8F4NlegV3erMV45jrsj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.177.208.0/23
Signature Algorithm: sha256WithRSAEncryption
32:4a:ee:e8:4b:75:97:ff:5c:93:30:fe:1f:dd:72:a7:26:83:
1a:43:05:80:52:f1:aa:b3:b1:7a:d8:ce:f8:1c:10:da:05:5f:
dd:31:14:2e:57:a9:e1:cb:72:aa:61:d2:c9:c7:c1:62:75:1e:
56:e1:45:c3:4b:bb:de:48:c4:b2:21:d0:4e:a7:00:4c:da:1c:
cc:6e:d7:0f:9e:be:56:d7:f8:75:d7:b6:b8:a3:3a:5d:b4:a2:
93:28:c5:b4:38:af:b1:e0:af:74:63:10:1c:49:55:a4:28:dc:
d5:81:ce:e9:ba:6a:3e:4f:29:84:ea:c1:d1:e6:25:e5:a7:dc:
48:51:b4:d4:17:b2:ba:d9:f2:da:24:7f:2a:3b:10:d6:6a:26:
ba:9a:c2:33:1a:a8:c4:e6:37:4b:22:44:df:36:a4:2d:87:2e:
c2:96:7c:5e:2d:59:02:ee:a8:d8:9d:ff:27:09:78:ef:a9:34:
e3:7a:8d:6d:4a:72:5f:fd:6e:d5:89:15:18:ae:23:b4:65:cf:
72:2e:61:6a:15:1a:2c:50:54:33:72:5c:1e:a2:d6:65:f5:e0:
47:de:ed:33:2c:2f:2f:9a:f2:5f:4b:9b:97:3a:66:f1:54:c6:
32:a6:48:98:9e:c2:17:34:16:4c:1c:5b:bd:21:44:93:69:c9:
61:7b:05:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:45:10 2025 by rpki-client