Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/9a1fff-050e-4de9-8e64-5d4010900e86/1/C21UyjKwyHlotXzUs2wrT9-7ml4.roa
File: C21UyjKwyHlotXzUs2wrT9-7ml4.roa (raw, json)
Hash identifier: ZR2xWVZUFQuKM7jT26V7/BzP532dWCavsfpkwUm/YAU=
Subject key identifier: 0B:6D:54:CA:32:B0:C8:79:68:B5:7C:D4:B3:6C:2B:4F:DF:BB:9A:5E
Certificate issuer: /CN=4716a44374fea5ec99f10fb8d6c7d8efe2a3348b
Certificate serial: 01942520437107CEA57B888CA71CAAD973A4
Authority key identifier: 47:16:A4:43:74:FE:A5:EC:99:F1:0F:B8:D6:C7:D8:EF:E2:A3:34:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RxakQ3T-peyZ8Q-41sfY7-KjNIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/9a1fff-050e-4de9-8e64-5d4010900e86/1/C21UyjKwyHlotXzUs2wrT9-7ml4.roa
Signing time: Thu 02 Jan 2025 03:47:38 +0000
ROA not before: Thu 02 Jan 2025 03:47:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25326
IP address blocks: 195.234.30.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:20:43:71:07:ce:a5:7b:88:8c:a7:1c:aa:d9:73:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4716a44374fea5ec99f10fb8d6c7d8efe2a3348b
Validity
Not Before: Jan 2 03:47:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0b6d54ca32b0c87968b57cd4b36c2b4fdfbb9a5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:25:0f:fd:c7:53:ef:f6:5b:ea:09:24:e4:96:
b4:6f:3b:5c:6c:5d:e7:da:ab:91:7c:57:f7:1c:be:
fa:dd:90:68:e3:37:4f:36:8f:63:ce:68:b0:b5:ae:
a5:5d:10:63:df:3b:cb:ec:a7:01:89:4b:25:d1:63:
ec:19:55:4d:e0:dd:87:9e:e6:94:b9:14:9d:db:7c:
c8:a1:64:21:6c:ca:fb:68:60:0a:bc:d4:86:8a:2d:
bc:1c:a8:b0:a7:11:46:41:1d:e8:53:b3:d9:a4:64:
c3:a5:2d:d3:74:7d:e0:03:42:14:ac:71:a0:f4:53:
10:99:fe:9f:e2:ed:d0:ab:fe:d1:fb:30:f9:0d:08:
0b:32:66:a4:d6:3a:e0:4a:78:05:0b:2c:89:98:17:
44:60:1b:b0:78:0c:77:59:d8:55:fe:c1:cd:40:fd:
8e:a3:64:e4:3a:af:f9:33:ef:16:c2:e4:7e:73:63:
9a:60:cb:5a:92:d5:37:14:26:63:5e:da:59:5e:ed:
ca:00:1d:d2:80:07:d6:f8:0d:8a:a9:83:f5:a8:0f:
11:15:42:1d:43:f5:fc:24:ad:d9:9f:14:cf:0c:1a:
20:c3:10:32:a7:85:ca:1b:f8:b4:28:0a:4a:d2:ab:
67:9d:1b:53:5d:0a:a8:c7:b7:03:74:57:39:e1:7f:
62:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:6D:54:CA:32:B0:C8:79:68:B5:7C:D4:B3:6C:2B:4F:DF:BB:9A:5E
X509v3 Authority Key Identifier:
keyid:47:16:A4:43:74:FE:A5:EC:99:F1:0F:B8:D6:C7:D8:EF:E2:A3:34:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RxakQ3T-peyZ8Q-41sfY7-KjNIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/9a1fff-050e-4de9-8e64-5d4010900e86/1/C21UyjKwyHlotXzUs2wrT9-7ml4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/9a1fff-050e-4de9-8e64-5d4010900e86/1/RxakQ3T-peyZ8Q-41sfY7-KjNIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.234.30.0/23
Signature Algorithm: sha256WithRSAEncryption
c5:92:b2:df:45:58:93:b1:bd:d7:f2:f7:af:8b:f7:b7:02:f2:
05:ef:40:00:5e:79:fd:8c:d9:b6:72:22:3f:fc:a0:c2:cc:ca:
3e:57:73:c0:b6:f5:46:4c:cc:14:f5:77:b7:05:77:4c:0e:e2:
81:2b:62:e1:b0:88:a5:d9:cb:a7:a2:2e:f0:62:94:f6:6c:94:
f0:be:5e:89:c8:f5:2e:af:85:b2:10:6a:c9:fc:c9:9f:55:0a:
ad:97:b8:70:f4:8b:30:d2:bc:00:9d:d5:80:2e:0e:12:12:c2:
92:1c:ea:40:12:2a:f5:9a:16:a5:8f:9e:81:ee:7e:7b:18:62:
b7:90:ef:ad:1d:13:8e:d6:c9:59:67:e6:ef:1a:6b:3e:4e:7b:
05:dd:ce:b3:2b:ae:25:f8:4a:3e:64:a4:13:a0:7d:9c:e4:fe:
03:44:63:29:80:8c:85:c6:2d:e9:9d:6b:a0:2f:62:c5:35:f0:
6a:d3:df:a6:fa:b6:3d:28:be:7f:b4:d7:76:f7:1d:b7:aa:7b:
4e:bd:6c:41:f0:8a:7f:80:d6:5f:a7:66:12:18:d5:c5:bc:92:
55:12:8b:c3:e0:a2:01:33:9d:f0:55:7c:f6:49:a7:9f:9a:98:
01:37:96:cf:98:a1:65:61:0e:46:8e:75:fc:79:5a:97:48:08:
c2:9e:08:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:26:47 2025 by rpki-client