Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/6829aa-11a5-42e7-9f96-56ebf829d6b2/1/ceDg72YenqK4_dFvq8QBAcGglOc.roa
File: ceDg72YenqK4_dFvq8QBAcGglOc.roa (raw, json)
Hash identifier: Zws7AOUBGinLUnjZoVBw7x3JkyX35Jt03arL9swrd5c=
Subject key identifier: 71:E0:E0:EF:66:1E:9E:A2:B8:FD:D1:6F:AB:C4:01:01:C1:A0:94:E7
Certificate issuer: /CN=f62c2b73000406824dfbc7ae3886eb7867f8ec6e
Certificate serial: 0194221FDED6514717EF9A2EBF93A24FD4F1
Authority key identifier: F6:2C:2B:73:00:04:06:82:4D:FB:C7:AE:38:86:EB:78:67:F8:EC:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9iwrcwAEBoJN-8euOIbreGf47G4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/6829aa-11a5-42e7-9f96-56ebf829d6b2/1/ceDg72YenqK4_dFvq8QBAcGglOc.roa
Signing time: Wed 01 Jan 2025 13:48:21 +0000
ROA not before: Wed 01 Jan 2025 13:48:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209085
IP address blocks: 195.80.44.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:de:d6:51:47:17:ef:9a:2e:bf:93:a2:4f:d4:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f62c2b73000406824dfbc7ae3886eb7867f8ec6e
Validity
Not Before: Jan 1 13:48:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=71e0e0ef661e9ea2b8fdd16fabc40101c1a094e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:03:16:6a:7e:14:f0:3b:a0:09:f5:3d:a8:05:
ec:2b:0c:74:08:11:03:f3:8c:5b:d4:54:3c:d3:6f:
90:6e:36:0c:2e:24:ea:31:4b:04:7d:0b:d6:4e:4c:
7b:1e:0a:f7:ef:30:d0:b6:8f:30:16:8b:1a:67:6f:
95:50:49:25:2d:8d:f3:e2:d2:7e:8a:13:64:4e:33:
b2:a8:5c:0f:99:21:45:ee:7f:22:c8:dc:25:ea:18:
fe:ba:d9:0a:e3:ad:ee:72:aa:c1:0d:c7:ee:c0:0d:
71:d6:00:97:a0:d8:41:67:4c:dc:76:7a:03:81:8b:
9c:4c:72:2a:fd:21:72:c0:79:08:1f:95:5b:fd:d1:
cc:61:65:30:f4:b3:54:fb:b4:5d:be:24:85:8a:38:
17:29:83:d6:36:07:6b:85:4a:57:6f:a2:be:cc:be:
39:0f:f3:74:1b:26:24:8a:19:79:e4:3e:f6:c3:65:
7b:5b:ac:d1:8b:03:3a:b4:a4:5a:41:7e:b4:01:ba:
35:32:77:37:be:c2:ff:4f:51:fa:c3:d0:d5:1c:fd:
a7:e2:2d:2f:a2:9c:2d:ba:34:f9:72:dd:b7:1e:9a:
07:27:e9:ff:31:c6:64:74:08:f1:22:c2:14:d5:38:
dd:cf:41:cf:9d:4f:d6:c5:38:01:30:e3:72:98:35:
9d:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:E0:E0:EF:66:1E:9E:A2:B8:FD:D1:6F:AB:C4:01:01:C1:A0:94:E7
X509v3 Authority Key Identifier:
keyid:F6:2C:2B:73:00:04:06:82:4D:FB:C7:AE:38:86:EB:78:67:F8:EC:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9iwrcwAEBoJN-8euOIbreGf47G4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6829aa-11a5-42e7-9f96-56ebf829d6b2/1/ceDg72YenqK4_dFvq8QBAcGglOc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6829aa-11a5-42e7-9f96-56ebf829d6b2/1/9iwrcwAEBoJN-8euOIbreGf47G4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.80.44.0/22
Signature Algorithm: sha256WithRSAEncryption
4b:19:7c:62:72:19:98:ef:94:48:35:27:ff:dc:ad:d8:06:d2:
44:33:6b:b6:99:c1:74:ea:ae:18:b7:9b:1d:15:3b:cf:94:36:
11:12:17:2c:4e:c1:51:71:be:25:d8:4e:11:37:3f:c3:e7:02:
92:e8:db:8e:aa:02:6b:bd:7a:8a:1f:50:6b:f8:80:2f:6f:b3:
74:f3:28:6e:98:74:73:e1:2f:b4:bd:f7:ea:35:c3:62:41:ee:
5d:b3:25:22:de:aa:ba:fe:99:76:58:98:2e:4e:8b:5d:1d:71:
d8:e4:81:2c:df:e3:b8:b0:13:02:ee:40:96:46:a5:cc:1e:62:
7a:d5:9c:b7:db:1a:aa:94:fa:d7:44:a9:0c:79:c2:85:f6:6f:
45:7d:75:72:0c:85:2a:c5:8f:8a:8a:46:80:70:3b:9e:fe:58:
9e:57:7a:dc:04:d6:17:17:1e:00:fc:3c:5c:8a:8c:fc:89:d8:
00:a5:26:b7:07:d0:01:2d:2d:28:b4:69:27:7d:2b:dc:b3:1b:
10:ce:e9:02:f2:4c:9d:d3:23:64:54:a1:a7:66:f2:92:b1:df:
1c:ee:bb:fa:bc:9c:33:8f:23:66:db:8f:ba:a8:29:a6:5a:9c:
9c:ac:d0:8b:64:bb:a9:bc:fc:1c:58:b7:10:29:7b:87:80:b7:
4e:27:0b:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:19:04 2025 by rpki-client