Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/IJAOzCgcOmnwLYeg7ILsOnQE_C4.roa
File: IJAOzCgcOmnwLYeg7ILsOnQE_C4.roa (raw, json)
Hash identifier: qNB39/8R46KNEQ+i+JNvTzUgavEQepnYZFITugyt9Gk=
Subject key identifier: 20:90:0E:CC:28:1C:3A:69:F0:2D:87:A0:EC:82:EC:3A:74:04:FC:2E
Certificate issuer: /CN=0e0f4872ad1c1f4fcb213b6b2edb388a2d9c9a23
Certificate serial: 019425FD9AA846AEBA4E5996E57BCBF3E061
Authority key identifier: 0E:0F:48:72:AD:1C:1F:4F:CB:21:3B:6B:2E:DB:38:8A:2D:9C:9A:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dg9Icq0cH0_LITtrLts4ii2cmiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/IJAOzCgcOmnwLYeg7ILsOnQE_C4.roa
Signing time: Thu 02 Jan 2025 07:49:24 +0000
ROA not before: Thu 02 Jan 2025 07:49:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21323
IP address blocks: 195.29.91.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:9a:a8:46:ae:ba:4e:59:96:e5:7b:cb:f3:e0:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e0f4872ad1c1f4fcb213b6b2edb388a2d9c9a23
Validity
Not Before: Jan 2 07:49:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=20900ecc281c3a69f02d87a0ec82ec3a7404fc2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:d1:7d:61:03:31:d8:79:7a:47:bc:12:b9:00:
7d:57:09:3e:ae:07:5a:3e:1b:09:cf:f5:41:17:92:
fd:ff:dc:dd:b2:85:79:c9:a8:93:06:bf:86:69:51:
41:96:ba:f5:82:95:2a:13:b4:43:9d:4e:a8:ee:63:
e1:82:88:65:56:34:11:04:5b:2e:d1:4b:e7:43:00:
bc:bb:01:b0:17:77:3f:b7:d9:80:6b:76:4a:46:4e:
d4:f7:2f:21:f1:f3:b4:ba:d1:be:97:20:9f:00:a4:
4e:c8:c7:cf:f6:b0:22:19:a4:bd:5b:ab:0f:b6:31:
1e:83:ee:43:10:54:29:97:9b:70:31:16:57:d5:02:
04:41:52:ce:c7:c9:ae:e1:51:cb:a6:e5:0b:24:25:
aa:6f:67:30:54:1e:8d:ef:f2:d6:e8:0f:b7:f6:e2:
89:73:f4:f1:29:4e:d7:51:73:5c:83:68:f2:78:b8:
48:be:39:04:0d:3c:4a:b7:19:08:82:78:99:4d:d5:
b5:a1:57:34:3d:6c:6f:a0:34:ac:0c:7f:8c:40:e5:
71:e6:f5:b0:7d:29:00:e0:39:09:bf:10:12:e3:e1:
43:17:58:3d:69:47:c6:38:ca:89:09:38:b9:53:1a:
36:b9:93:7d:8e:33:0e:be:26:a5:a1:d1:51:4e:c9:
98:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:90:0E:CC:28:1C:3A:69:F0:2D:87:A0:EC:82:EC:3A:74:04:FC:2E
X509v3 Authority Key Identifier:
keyid:0E:0F:48:72:AD:1C:1F:4F:CB:21:3B:6B:2E:DB:38:8A:2D:9C:9A:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dg9Icq0cH0_LITtrLts4ii2cmiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/IJAOzCgcOmnwLYeg7ILsOnQE_C4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/Dg9Icq0cH0_LITtrLts4ii2cmiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.29.91.0/24
Signature Algorithm: sha256WithRSAEncryption
27:04:81:e6:d0:b7:39:85:5a:33:bb:79:71:52:7b:4d:48:b8:
fe:07:e0:d0:3b:2f:c8:94:f7:c3:22:61:f5:5e:40:c7:07:3b:
06:c3:16:4c:13:83:95:06:06:e3:2b:a1:5f:19:53:e2:d8:b1:
36:4f:ca:1f:0c:bd:8b:8a:2f:af:80:6e:04:1e:10:39:74:3b:
ec:6d:ad:11:5a:5c:60:0a:72:23:fe:a1:55:10:45:34:15:bf:
a2:cd:7c:df:3b:50:c0:ad:0b:12:03:4a:a0:19:57:6b:56:11:
82:f1:c4:9b:fb:08:2b:72:c7:1c:b0:1b:88:ab:9b:91:44:b9:
d2:11:40:75:81:e8:df:5a:3d:f1:a9:0f:79:1b:4f:68:bc:bc:
fb:ca:00:0d:7d:2c:dd:31:63:78:e1:6e:2d:88:82:9c:fe:92:
d4:39:fd:a2:48:38:19:46:1e:80:f4:ce:81:13:f6:83:ab:ca:
c0:47:d4:03:fd:ca:0a:63:fa:17:d1:e3:64:cc:64:fd:0a:f3:
9b:88:55:b9:1e:85:1a:b8:14:dc:2e:fe:e3:df:03:12:9e:76:
99:51:e5:b0:71:f9:d4:ca:43:0b:fb:a6:30:62:bd:d5:ee:e5:
21:b6:cd:d5:f5:eb:20:37:71:f7:10:ed:14:77:b3:00:03:4e:
4f:18:06:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:24:15 2025 by rpki-client