Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/2cb95d-8f0c-42dd-91b9-29ffd0ef560a/1/Irr-r9qiqixIuYCUoqwg3jTCOlQ.roa
File: Irr-r9qiqixIuYCUoqwg3jTCOlQ.roa (raw, json)
Hash identifier: Da8fMzEd6ZdZtBJZunslR4v5JrpLeUfmPOL3PB5KGc4=
Subject key identifier: 22:BA:FE:AF:DA:A2:AA:2C:48:B9:80:94:A2:AC:20:DE:34:C2:3A:54
Certificate issuer: /CN=8c74849a970a9304df45f8e28b6eb87ff09e0bea
Certificate serial: 01942068096087E69FC674531C4529B4ED20
Authority key identifier: 8C:74:84:9A:97:0A:93:04:DF:45:F8:E2:8B:6E:B8:7F:F0:9E:0B:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jHSEmpcKkwTfRfjii264f_CeC-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/2cb95d-8f0c-42dd-91b9-29ffd0ef560a/1/Irr-r9qiqixIuYCUoqwg3jTCOlQ.roa
Signing time: Wed 01 Jan 2025 05:47:56 +0000
ROA not before: Wed 01 Jan 2025 05:47:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198119
IP address blocks: 195.137.231.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:09:60:87:e6:9f:c6:74:53:1c:45:29:b4:ed:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c74849a970a9304df45f8e28b6eb87ff09e0bea
Validity
Not Before: Jan 1 05:47:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=22bafeafdaa2aa2c48b98094a2ac20de34c23a54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:cd:bb:b7:23:a0:01:60:df:e4:81:2d:20:a4:
00:0c:a7:94:52:8d:2a:62:d4:c7:47:c1:a3:c7:f0:
e6:80:e8:9e:20:80:e6:a5:22:7c:9c:eb:c3:4d:f0:
67:1d:8d:f3:de:03:56:06:77:6b:49:e7:ec:22:0e:
fb:5e:06:da:e1:c5:fc:f8:93:da:26:ee:e1:a9:9c:
5a:44:c2:df:e5:e8:38:bd:62:91:9f:6a:17:20:02:
40:e4:b7:5f:d8:48:d2:8c:b0:a0:5e:71:c3:a0:b1:
95:42:cf:88:c7:fd:d7:2b:a0:ff:5d:eb:43:36:46:
cc:4b:9e:eb:b3:18:74:39:3b:15:fe:79:79:b2:f4:
11:ea:27:54:99:b0:b4:6c:01:ac:ce:e1:d5:f1:9d:
f0:6a:f6:da:7a:e8:a8:cb:05:dd:a1:08:60:71:5e:
a0:36:76:fb:33:d0:79:c3:ad:90:17:10:1f:34:e2:
be:7d:c5:36:cc:bc:bb:04:b1:03:77:c6:34:3b:c2:
a8:bf:59:27:3a:88:79:84:74:30:b2:ad:54:d5:c5:
5b:e6:a1:d7:6a:68:08:11:3d:d1:73:cc:c7:a1:08:
f0:ee:12:7b:95:33:0b:32:6c:1b:b0:6d:a4:0b:02:
a7:5f:d0:83:ac:19:d3:4a:81:1c:c5:db:ce:b2:49:
ed:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:BA:FE:AF:DA:A2:AA:2C:48:B9:80:94:A2:AC:20:DE:34:C2:3A:54
X509v3 Authority Key Identifier:
keyid:8C:74:84:9A:97:0A:93:04:DF:45:F8:E2:8B:6E:B8:7F:F0:9E:0B:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jHSEmpcKkwTfRfjii264f_CeC-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2cb95d-8f0c-42dd-91b9-29ffd0ef560a/1/Irr-r9qiqixIuYCUoqwg3jTCOlQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2cb95d-8f0c-42dd-91b9-29ffd0ef560a/1/jHSEmpcKkwTfRfjii264f_CeC-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.137.231.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:ec:c8:5c:b3:59:f2:25:fe:9c:f9:d6:a5:5a:7b:b6:de:cf:
df:ca:b4:45:35:54:27:d5:35:2f:5f:db:65:dd:67:4d:2f:6d:
43:cf:1a:cd:ce:40:6f:20:f6:83:dc:06:55:38:0f:13:fd:fb:
fb:f3:a0:f9:90:97:d6:92:49:90:73:08:ae:66:c1:fa:b5:d0:
a7:9c:fc:90:14:eb:97:c6:6d:57:1a:9c:b2:93:c6:3d:c0:80:
4b:d7:8f:c9:fe:9f:2c:89:4d:f2:77:b1:14:03:f7:4c:c6:7e:
57:62:bd:80:0c:d0:bc:7a:9e:a3:9c:35:f1:48:8f:47:cf:6d:
d3:ac:1d:9a:66:3a:c3:13:3a:df:99:2f:be:9c:43:01:0f:23:
54:f2:45:93:62:4e:72:33:e1:68:71:22:c5:bb:34:3c:b2:5b:
c1:71:d9:4d:f1:2b:d5:a0:e6:dc:e2:ff:36:6f:4a:b8:92:77:
7c:6b:9e:1f:1c:27:f9:19:e3:af:b9:e7:2a:8d:70:ae:1e:b7:
3f:56:8d:70:7c:e4:48:fb:1e:2f:21:b7:85:9f:94:7a:64:fc:
1b:b1:6b:75:05:a2:5d:80:ac:63:8f:e8:cb:0f:d4:c7:22:62:
b4:64:3b:8b:e4:15:82:85:e7:e1:40:7c:91:fa:09:43:19:37:
a3:32:2a:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:29:39 2025 by rpki-client