Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/4oy5f6eWUFWeuQ-LYoGKR5kBbmA.roa
File: 4oy5f6eWUFWeuQ-LYoGKR5kBbmA.roa (raw, json)
Hash identifier: YFWPRLKzF0IohoijQjCKo23llGQIbDkRvtvR0mEBhNE=
Subject key identifier: E2:8C:B9:7F:A7:96:50:55:9E:B9:0F:8B:62:81:8A:47:99:01:6E:60
Certificate issuer: /CN=1aca63df248b7adf3ddd07e8c2d3eedd02cef933
Certificate serial: 0194221FC2B56D28B63A03E4DE6F31440E37
Authority key identifier: 1A:CA:63:DF:24:8B:7A:DF:3D:DD:07:E8:C2:D3:EE:DD:02:CE:F9:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/4oy5f6eWUFWeuQ-LYoGKR5kBbmA.roa
Signing time: Wed 01 Jan 2025 13:48:14 +0000
ROA not before: Wed 01 Jan 2025 13:48:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42402
IP address blocks: 195.94.202.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:c2:b5:6d:28:b6:3a:03:e4:de:6f:31:44:0e:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1aca63df248b7adf3ddd07e8c2d3eedd02cef933
Validity
Not Before: Jan 1 13:48:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e28cb97fa79650559eb90f8b62818a4799016e60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:05:e1:87:f7:1b:15:3d:09:05:6d:ba:71:a4:
b3:8c:50:86:7a:fd:7e:1f:76:ba:b7:76:53:62:96:
20:33:44:0e:e4:b8:29:a1:86:eb:41:e0:c1:33:17:
6e:aa:ba:77:fa:a5:42:0b:29:c1:c7:90:de:95:51:
a8:db:90:f7:f3:c7:5b:25:7e:85:18:d9:d1:e4:6c:
46:58:ca:72:22:21:72:5c:e1:47:ff:ed:7b:80:51:
3a:00:d8:e3:e8:67:57:e0:af:5c:8b:7e:ab:63:97:
c9:24:a6:06:2f:48:cf:32:07:36:5f:ff:11:c5:3f:
a3:c3:79:58:22:7c:ee:d7:a3:c0:1e:30:22:b1:a4:
32:7a:40:d5:47:8c:8e:04:36:5c:16:32:77:78:2e:
2e:88:39:b0:aa:cb:a8:7c:19:eb:50:10:d9:b8:77:
f9:84:09:f3:44:cd:b9:90:ba:1d:00:c0:c9:77:a0:
c0:c1:16:9c:4f:be:f2:b4:b7:0d:03:17:d6:9d:b8:
47:1d:50:81:dd:17:ae:a7:a1:7f:fb:f5:07:b6:eb:
b3:e2:5d:8a:b6:37:ce:7b:17:58:50:94:bf:ad:7e:
ce:a0:ea:25:4e:fb:ee:15:78:5a:dd:eb:fd:24:89:
84:f5:4e:10:3e:49:2e:79:15:53:e2:33:fd:f2:b9:
61:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:8C:B9:7F:A7:96:50:55:9E:B9:0F:8B:62:81:8A:47:99:01:6E:60
X509v3 Authority Key Identifier:
keyid:1A:CA:63:DF:24:8B:7A:DF:3D:DD:07:E8:C2:D3:EE:DD:02:CE:F9:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/4oy5f6eWUFWeuQ-LYoGKR5kBbmA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.94.202.0/24
Signature Algorithm: sha256WithRSAEncryption
60:55:2e:ee:70:0c:4a:6f:08:01:51:91:78:f2:f1:6c:b4:e6:
d6:7a:0d:a2:9c:fc:21:7b:6f:eb:84:e3:f4:49:0f:24:7f:c0:
d9:be:26:7e:19:fb:d6:eb:1a:b2:5a:fc:de:fc:a1:ae:6c:75:
67:84:e2:f1:17:54:f9:e9:4f:e5:60:41:cb:f7:56:fe:24:08:
ae:45:14:27:df:7d:f3:7e:ce:f9:d3:65:27:9f:10:dd:4b:19:
00:71:ae:03:20:ea:7b:c9:c0:51:e4:02:ce:a9:73:49:19:c6:
81:f5:99:bf:d0:37:aa:45:06:33:5b:f8:cf:34:f8:33:6f:b9:
f5:92:bb:30:4f:6a:79:c4:5f:91:6f:f6:80:0d:41:c0:27:17:
69:cb:33:5a:d3:59:24:5c:45:bc:ee:1a:97:88:04:7a:08:79:
46:88:87:59:1e:1c:fb:e3:8f:53:4b:b3:dd:5c:2b:6b:9d:26:
98:29:03:b4:ed:37:75:ac:46:88:69:e4:7e:a8:d7:0a:ed:2f:
3d:74:f4:49:95:20:5e:51:52:7b:80:de:53:bd:e1:86:6f:a9:
db:83:d5:8a:31:6b:d1:5d:df:18:a0:e3:be:36:64:36:49:5b:
3e:94:f1:54:2c:99:00:40:27:5d:80:12:1c:89:5b:9b:07:c8:
8b:53:29:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:06:52 2025 by rpki-client