Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/bJE571Es9mWytmWy8Hm2hU0LvwQ.roa
File: bJE571Es9mWytmWy8Hm2hU0LvwQ.roa (raw, json)
Hash identifier: G4ykv8ElUqNocIC2Di9TU9f+tq6JYb2XSPQUlNwbQs8=
Subject key identifier: 6C:91:39:EF:51:2C:F6:65:B2:B6:65:B2:F0:79:B6:85:4D:0B:BF:04
Certificate issuer: /CN=9a526a73ce8f9f62c14a11a2ea913ec273d58c46
Certificate serial: 01942067D958B688C39063CFF5D1D20BC5F6
Authority key identifier: 9A:52:6A:73:CE:8F:9F:62:C1:4A:11:A2:EA:91:3E:C2:73:D5:8C:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mlJqc86Pn2LBShGi6pE-wnPVjEY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/bJE571Es9mWytmWy8Hm2hU0LvwQ.roa
Signing time: Wed 01 Jan 2025 05:47:44 +0000
ROA not before: Wed 01 Jan 2025 05:47:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47457
IP address blocks: 195.43.144.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:d9:58:b6:88:c3:90:63:cf:f5:d1:d2:0b:c5:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a526a73ce8f9f62c14a11a2ea913ec273d58c46
Validity
Not Before: Jan 1 05:47:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6c9139ef512cf665b2b665b2f079b6854d0bbf04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b1:c6:0a:70:7c:bd:8d:78:48:09:67:30:e5:
9b:29:91:f2:87:ad:21:47:6c:b8:13:81:c5:9a:2d:
e3:67:cb:b2:85:2c:4f:93:f9:63:e4:46:67:e1:15:
0e:c1:4f:72:7e:c9:51:97:ae:9e:d4:7f:09:34:22:
70:6c:42:43:2e:9f:6c:33:f6:0a:32:6a:b0:a7:1d:
40:8c:20:d6:96:fc:93:e0:ad:42:4a:d4:30:d5:5d:
a2:1b:46:9e:7f:8f:56:c9:b7:9c:ee:32:a0:b5:e9:
bb:1d:a6:df:71:27:40:0b:84:84:a8:53:d5:56:e7:
12:23:4b:31:bc:cf:64:5b:4e:3e:0c:d0:59:80:79:
a8:81:55:8b:58:09:dd:31:32:35:cc:f6:a9:55:4a:
99:5b:65:39:d1:54:1f:f0:e9:86:71:53:19:11:00:
77:3b:50:95:91:42:a5:33:57:83:1f:a9:c5:21:4e:
c9:00:1c:02:8b:ac:5f:74:cf:27:9e:0d:8d:cc:1e:
b4:19:b7:4e:72:11:8f:2e:79:7c:0d:d5:b6:c7:32:
35:bf:8c:f0:bb:97:94:5b:37:24:e2:bf:2e:15:ce:
ca:f5:73:e4:ad:4b:50:46:f2:53:06:a4:35:95:9e:
63:1a:e4:4f:4e:e5:c6:bd:fc:23:04:8d:f1:05:bd:
8d:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:91:39:EF:51:2C:F6:65:B2:B6:65:B2:F0:79:B6:85:4D:0B:BF:04
X509v3 Authority Key Identifier:
keyid:9A:52:6A:73:CE:8F:9F:62:C1:4A:11:A2:EA:91:3E:C2:73:D5:8C:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mlJqc86Pn2LBShGi6pE-wnPVjEY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/bJE571Es9mWytmWy8Hm2hU0LvwQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/mlJqc86Pn2LBShGi6pE-wnPVjEY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.43.144.0/24
Signature Algorithm: sha256WithRSAEncryption
14:19:83:df:39:01:3d:f2:47:72:d2:2f:96:bc:f0:b1:8c:70:
fc:d5:c2:cd:14:b9:30:93:b4:ee:89:29:cb:4b:c2:09:88:d9:
c5:92:66:58:7c:e7:47:ec:70:82:7b:b3:63:75:40:d6:20:f8:
45:5a:ae:8f:b6:c2:07:67:92:bf:a8:5e:b7:de:0a:ef:f1:e8:
32:2a:15:a6:75:87:0b:89:8a:64:e3:73:6b:54:a3:96:29:d9:
4c:af:c8:24:9f:6e:7a:85:8d:a1:21:da:de:b7:e2:37:f7:e4:
9c:1f:b5:fd:02:6c:90:03:89:45:7c:0c:d3:19:f4:10:69:96:
07:58:45:4e:a5:c4:1f:74:35:2d:82:e1:6e:fa:5b:50:17:a8:
1a:84:80:0f:91:af:f6:90:43:57:b8:d2:a9:1c:f8:5a:9b:a5:
76:55:62:34:d8:3f:37:a3:61:06:d4:2f:08:31:5a:54:3c:18:
be:30:b8:3a:1a:c1:21:b9:d5:a6:fb:90:b6:37:d1:6d:06:66:
5c:64:8d:36:5b:86:f9:8e:46:a5:c3:b8:d9:8c:65:30:48:5c:
15:ed:29:36:db:21:a1:c7:2a:45:76:a7:9c:38:5d:f5:05:f1:
0d:78:a8:b6:5d:a7:42:29:4c:e3:10:13:3f:d0:5e:89:5b:dc:
f8:d4:d6:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:06:55 2025 by rpki-client