Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/9a52fd-0364-4150-aaca-41602fdc9fde/1/x6TyoeiDznZ5SRtqywkNMGfQA5k.roa
File: x6TyoeiDznZ5SRtqywkNMGfQA5k.roa (raw, json)
Hash identifier: 1tj6LlfsRsB/tYIfqw9rOc/KrLH+6NOSUXP1XdEdR5k=
Subject key identifier: C7:A4:F2:A1:E8:83:CE:76:79:49:1B:6A:CB:09:0D:30:67:D0:03:99
Certificate issuer: /CN=76e2ae4fe0c0d6cb0749b877ae155a629fe2afd6
Certificate serial: 01942068534BF02EFA3954D44F2E86CB1568
Authority key identifier: 76:E2:AE:4F:E0:C0:D6:CB:07:49:B8:77:AE:15:5A:62:9F:E2:AF:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/duKuT-DA1ssHSbh3rhVaYp_ir9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/9a52fd-0364-4150-aaca-41602fdc9fde/1/x6TyoeiDznZ5SRtqywkNMGfQA5k.roa
Signing time: Wed 01 Jan 2025 05:48:15 +0000
ROA not before: Wed 01 Jan 2025 05:48:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44761
IP address blocks: 195.28.18.0/23 maxlen: 23
195.28.19.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:53:4b:f0:2e:fa:39:54:d4:4f:2e:86:cb:15:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76e2ae4fe0c0d6cb0749b877ae155a629fe2afd6
Validity
Not Before: Jan 1 05:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c7a4f2a1e883ce7679491b6acb090d3067d00399
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:9f:27:af:f3:60:51:b7:69:ed:8d:aa:5c:b5:
43:57:c0:4d:49:d3:f5:b5:e9:fa:59:18:74:60:b0:
a3:ca:be:0c:00:ef:3c:b8:a4:9a:47:82:17:35:84:
26:92:0c:a1:45:95:8d:b9:d0:98:bc:ca:a3:33:f7:
df:58:cb:a4:a6:c3:29:76:ab:ce:2c:11:c8:4e:a4:
d0:7a:b4:c9:bf:8f:0c:c1:90:1e:30:2d:5e:c7:f7:
ce:49:f0:83:2b:08:24:a6:21:cc:ba:0b:ef:c5:02:
86:c4:fa:2c:3c:d8:cc:be:9b:a4:52:d5:98:08:12:
65:20:f4:63:09:f9:cd:e7:d0:ae:87:a7:7a:71:ef:
ab:97:97:c5:6c:64:34:06:dc:c1:3f:07:da:8d:27:
52:64:4e:ef:d1:80:1a:da:ae:dc:20:02:57:6f:5b:
28:be:b9:a1:35:88:93:b0:55:04:31:be:11:50:c7:
9d:e0:b4:96:ea:11:68:f0:03:9e:17:f3:a9:d3:9b:
3a:f3:50:c5:b5:e3:7b:66:53:84:8e:62:a3:e4:ed:
32:ff:10:64:53:59:90:7a:99:f9:9f:95:aa:fe:48:
e4:ad:21:eb:a7:f5:a7:b9:40:ba:9f:1e:62:bc:c6:
fa:68:54:4d:da:73:74:b4:07:5d:f4:82:b9:9e:1d:
4c:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:A4:F2:A1:E8:83:CE:76:79:49:1B:6A:CB:09:0D:30:67:D0:03:99
X509v3 Authority Key Identifier:
keyid:76:E2:AE:4F:E0:C0:D6:CB:07:49:B8:77:AE:15:5A:62:9F:E2:AF:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/duKuT-DA1ssHSbh3rhVaYp_ir9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/9a52fd-0364-4150-aaca-41602fdc9fde/1/x6TyoeiDznZ5SRtqywkNMGfQA5k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/9a52fd-0364-4150-aaca-41602fdc9fde/1/duKuT-DA1ssHSbh3rhVaYp_ir9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.28.18.0/23
Signature Algorithm: sha256WithRSAEncryption
87:81:21:6b:25:ec:09:a6:67:46:f6:e1:bb:ff:7e:9e:8f:c8:
92:7e:63:7c:4c:04:44:ab:19:37:51:75:b1:a5:fa:67:5b:91:
d4:4d:8b:1a:b5:56:92:4c:0e:5b:7f:3c:b9:db:65:29:d9:f4:
09:88:9c:a4:39:e9:e3:60:58:74:fb:e2:c5:3e:e7:43:22:e7:
dd:e9:2f:ef:79:93:ec:98:5b:7e:a5:57:66:b8:62:99:5d:05:
37:06:b9:28:be:5f:c8:e0:57:46:35:4d:bb:cc:26:ba:42:08:
16:5c:7e:1b:b9:3d:0c:3d:d3:26:3b:e4:92:68:49:dd:ab:87:
34:30:0e:4d:a0:b4:0b:4f:4f:d3:a3:e4:ca:6f:7f:ac:77:51:
76:62:60:e9:11:9a:c9:9a:95:ca:71:20:87:9e:bb:3a:00:d5:
29:77:99:6a:3c:08:90:41:55:7b:06:11:7c:0d:87:1d:f2:7c:
b0:fa:3b:c6:a3:be:06:19:44:d2:10:c2:d8:90:28:51:a9:82:
f4:86:51:0b:e6:17:40:6f:3f:46:8a:b9:a8:4b:75:cc:99:3a:
e6:d8:99:ed:e2:2b:a0:48:e6:c8:54:37:b8:11:68:7f:95:c2:
6b:bf:e3:1a:13:7a:fe:55:3d:ea:f9:3a:b1:76:e9:07:1d:34:
98:a6:0c:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 23:26:56 2025 by rpki-client