Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/8e4518-0dd0-4cbb-ba78-bb86d4ba02de/1/1-2BRV4sfO38uFELp8sV79L0B1lw.roa
File: 1-2BRV4sfO38uFELp8sV79L0B1lw.roa (raw, json)
Hash identifier: APyNfY72IzRC6P6hQGMuA+VkTRyCwcNbDRlCp4K0Vjw=
Subject key identifier: FB:60:51:57:8B:1F:3B:7F:2E:14:42:E9:F2:C5:7B:F4:BD:01:D6:5C
Certificate issuer: /CN=4452633274b1d886a92757f65219c2e7546ecdf5
Certificate serial: 0194266BB90184AFBC910FF89841471D5FAA
Authority key identifier: 44:52:63:32:74:B1:D8:86:A9:27:57:F6:52:19:C2:E7:54:6E:CD:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFJjMnSx2IapJ1f2UhnC51RuzfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/8e4518-0dd0-4cbb-ba78-bb86d4ba02de/1/1-2BRV4sfO38uFELp8sV79L0B1lw.roa
Signing time: Thu 02 Jan 2025 09:49:41 +0000
ROA not before: Thu 02 Jan 2025 09:49:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48294
IP address blocks: 195.137.176.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:b9:01:84:af:bc:91:0f:f8:98:41:47:1d:5f:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4452633274b1d886a92757f65219c2e7546ecdf5
Validity
Not Before: Jan 2 09:49:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fb6051578b1f3b7f2e1442e9f2c57bf4bd01d65c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:a0:30:b1:4a:6e:76:7e:a1:21:55:ae:dd:83:
43:1e:7d:3f:4f:91:aa:d5:e3:e6:85:e7:d3:c9:73:
86:ea:02:ec:65:c3:2d:38:f2:e6:ed:69:ae:75:0e:
88:f5:03:72:ea:91:7a:f5:59:4f:e9:37:82:42:27:
7f:e1:62:1c:3b:2a:56:57:6a:fc:b7:bf:e7:30:42:
c6:ac:5a:37:f4:63:eb:06:75:17:68:97:45:95:9c:
e0:f0:4c:fc:50:50:42:df:49:4a:6b:2b:0a:e7:bd:
4c:72:5a:ae:ff:f7:45:9d:a2:6a:bc:84:b9:4d:a4:
2c:bd:4e:58:01:98:89:1f:19:e5:d8:28:c4:6d:53:
66:e2:27:ed:46:18:3c:63:c2:d6:c1:3c:69:9b:40:
46:33:ba:f1:21:21:12:f7:8d:60:fa:bf:0c:a5:f9:
c6:20:c9:36:83:4f:69:cd:ba:77:13:fa:f9:6f:ef:
91:b9:ff:0a:66:69:05:94:a2:ec:3b:0e:af:06:ec:
37:84:ba:2f:5f:28:33:6e:9e:a8:f3:5a:b3:27:15:
1c:3f:85:46:b9:99:81:c1:0d:64:1d:72:e9:4e:71:
60:c5:f3:4c:af:60:53:6e:cd:ec:f0:14:e6:b0:8a:
2a:6e:65:5a:82:d2:53:68:49:2b:62:13:c2:3a:a6:
22:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:60:51:57:8B:1F:3B:7F:2E:14:42:E9:F2:C5:7B:F4:BD:01:D6:5C
X509v3 Authority Key Identifier:
keyid:44:52:63:32:74:B1:D8:86:A9:27:57:F6:52:19:C2:E7:54:6E:CD:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFJjMnSx2IapJ1f2UhnC51RuzfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/8e4518-0dd0-4cbb-ba78-bb86d4ba02de/1/1-2BRV4sfO38uFELp8sV79L0B1lw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/8e4518-0dd0-4cbb-ba78-bb86d4ba02de/1/RFJjMnSx2IapJ1f2UhnC51RuzfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.137.176.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:19:51:d8:59:4c:8d:4d:10:06:6e:4f:a4:5a:d8:00:77:df:
63:86:66:38:1f:31:98:f0:19:de:aa:d0:37:48:3f:49:21:29:
dc:ef:44:ae:36:d2:e1:02:e8:95:0d:0d:b3:7b:4d:1b:80:b9:
e3:ce:4c:5c:e0:3a:1a:0b:59:93:42:57:99:45:98:b6:65:95:
fc:60:27:e4:b7:74:3c:d0:f7:9e:f4:59:4f:57:8c:24:74:89:
b1:5d:a0:fc:a3:9b:df:1f:15:0a:09:45:a1:e0:01:dd:94:f0:
30:75:7f:14:04:b0:7f:af:86:8e:a1:7e:bd:f6:76:c0:92:f6:
64:e9:d2:86:8c:20:b6:17:ce:de:00:2a:e6:ba:5d:6a:3a:ee:
e0:d4:f8:3c:dc:5a:9b:68:37:f4:da:6f:ff:fc:99:74:e9:38:
ad:df:ff:9b:ed:85:1e:b4:e7:80:5a:7f:2a:46:c8:d2:76:3a:
55:82:c5:49:4e:5d:22:26:d8:e3:e0:66:dc:f8:b4:b9:91:ca:
cc:54:1a:c0:ba:74:c1:ec:a6:1b:2f:9b:5d:a7:01:3b:5b:84:
43:30:a2:b2:f4:02:d3:41:6b:92:66:76:56:3c:ae:23:02:5e:
27:cb:2b:39:0f:7e:8e:47:22:d8:b8:b7:9f:6a:61:10:47:f4:
83:6e:b0:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:06:38 2025 by rpki-client