Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/cddb61-12a0-46bd-9fb7-3e781dc1e7e9/1/E9Q22GIdMyoqpYS3_A3Sv4bLQrU.roa
File: E9Q22GIdMyoqpYS3_A3Sv4bLQrU.roa (raw, json)
Hash identifier: U3UIBvBEgw3rK3s+0sDC6RFjCDwgftn5pIAbSSrZ/Fw=
Subject key identifier: 13:D4:36:D8:62:1D:33:2A:2A:A5:84:B7:FC:0D:D2:BF:86:CB:42:B5
Certificate issuer: /CN=04e65b83d21315f8ba7578e88bdf3813295dde0a
Certificate serial: 019420D63B4CF737EB4454F09AD7D38715CA
Authority key identifier: 04:E6:5B:83:D2:13:15:F8:BA:75:78:E8:8B:DF:38:13:29:5D:DE:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BOZbg9ITFfi6dXjoi984Eyld3go.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/cddb61-12a0-46bd-9fb7-3e781dc1e7e9/1/E9Q22GIdMyoqpYS3_A3Sv4bLQrU.roa
Signing time: Wed 01 Jan 2025 07:48:18 +0000
ROA not before: Wed 01 Jan 2025 07:48:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197512
IP address blocks: 195.20.130.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:3b:4c:f7:37:eb:44:54:f0:9a:d7:d3:87:15:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04e65b83d21315f8ba7578e88bdf3813295dde0a
Validity
Not Before: Jan 1 07:48:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=13d436d8621d332a2aa584b7fc0dd2bf86cb42b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:24:35:04:ea:c5:48:46:aa:bb:43:ac:1c:88:
f4:6b:0a:dc:01:50:6b:40:96:1c:05:ed:11:07:7d:
24:c1:b2:a8:ed:e3:66:66:9c:b6:66:9d:20:17:34:
4e:72:9a:f2:31:2a:12:ba:c8:13:72:5f:89:3f:1c:
88:13:e1:9c:5e:f9:55:6f:92:6c:8b:cd:2d:b4:bd:
c4:9e:ea:10:32:b3:51:91:2b:3f:6e:22:5f:1e:9c:
d3:60:62:90:1c:58:10:6d:60:f6:ce:d1:e4:09:ba:
1a:1a:a5:17:05:88:0b:17:c7:01:24:50:fa:9d:d6:
da:d4:d8:72:b6:81:fb:00:06:16:79:36:96:a4:1d:
30:09:ca:63:7f:d6:49:59:9b:51:e4:b1:16:d1:5c:
ea:da:84:d7:37:1a:c1:c8:f8:07:f6:e5:81:8d:a8:
cc:15:0a:a5:f5:7c:f5:9b:3b:3f:fc:c5:a0:c3:34:
7c:ea:c1:22:75:43:e1:b5:06:08:c2:92:5c:9e:b6:
69:a7:2b:52:18:fd:03:96:f0:64:de:7b:d6:27:1f:
8c:4f:f9:f6:77:5d:16:25:f7:bc:88:bc:c6:36:fe:
87:06:67:c1:a1:bc:84:27:a8:61:26:d5:95:0c:08:
b1:c8:28:f2:64:7b:d5:aa:89:a2:10:95:36:8a:ed:
4f:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:D4:36:D8:62:1D:33:2A:2A:A5:84:B7:FC:0D:D2:BF:86:CB:42:B5
X509v3 Authority Key Identifier:
keyid:04:E6:5B:83:D2:13:15:F8:BA:75:78:E8:8B:DF:38:13:29:5D:DE:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BOZbg9ITFfi6dXjoi984Eyld3go.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/cddb61-12a0-46bd-9fb7-3e781dc1e7e9/1/E9Q22GIdMyoqpYS3_A3Sv4bLQrU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/cddb61-12a0-46bd-9fb7-3e781dc1e7e9/1/BOZbg9ITFfi6dXjoi984Eyld3go.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.20.130.0/24
Signature Algorithm: sha256WithRSAEncryption
44:26:2a:65:81:94:71:c6:17:ee:de:6b:28:81:a2:da:43:51:
dd:56:db:dc:0c:fa:8f:5d:b9:34:b6:ba:81:0f:73:2b:ad:39:
79:69:f6:83:50:79:65:98:f7:33:ea:e4:78:01:8f:5d:c5:8f:
5a:c6:57:9d:69:db:59:c9:0e:f8:4e:0e:90:f7:ae:5d:41:0e:
82:2f:ff:29:73:64:75:45:80:34:d3:7c:9b:2a:9e:a9:d9:b9:
04:69:77:ce:d2:24:bf:a4:7d:33:ff:ab:c6:26:35:d4:b8:bd:
0a:9f:5b:b3:5b:d1:71:e5:38:e9:ed:bf:2b:f8:f7:21:83:1a:
b6:cd:be:09:69:3e:7e:d4:43:e4:b2:eb:3b:41:c2:67:03:0b:
7d:4f:c2:5b:a1:20:b4:ca:bd:17:15:1b:2a:74:8c:c1:61:d0:
ba:c1:6d:c3:53:ea:f5:63:d8:a2:dc:e2:e2:15:ad:40:06:d8:
fe:2d:39:cd:e7:a0:25:86:0f:4e:c7:3f:88:2c:d7:4f:0f:b8:
6d:ed:17:62:21:6b:36:e1:42:98:4f:52:c9:e1:a0:19:ef:08:
03:4e:b8:b2:c3:96:93:d2:be:82:22:20:00:73:49:ec:9a:77:
ef:26:90:b5:69:86:34:20:3d:b7:93:ad:46:69:6f:bc:31:3d:
82:c4:a9:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 01:46:43 2025 by rpki-client