Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/abdafc-b389-4518-b12d-2cc342b00519/1/Ki24jPZgJrCPTdr-EzJOC_g3W_g.roa
File: Ki24jPZgJrCPTdr-EzJOC_g3W_g.roa (raw, json)
Hash identifier: n4ZbZmzZFlutTnq+BcgW8yw5bghHlIwLiglxRYnEDAw=
Subject key identifier: 2A:2D:B8:8C:F6:60:26:B0:8F:4D:DA:FE:13:32:4E:0B:F8:37:5B:F8
Certificate issuer: /CN=c84ac52e2b572cc2a99a741257e569aa371e3568
Certificate serial: 019423D6C5FF19E0D7D47FBCFB735F58E6BD
Authority key identifier: C8:4A:C5:2E:2B:57:2C:C2:A9:9A:74:12:57:E5:69:AA:37:1E:35:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yErFLitXLMKpmnQSV-VpqjceNWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/abdafc-b389-4518-b12d-2cc342b00519/1/Ki24jPZgJrCPTdr-EzJOC_g3W_g.roa
Signing time: Wed 01 Jan 2025 21:47:45 +0000
ROA not before: Wed 01 Jan 2025 21:47:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 196651
IP address blocks: 195.246.244.0/24 maxlen: 24
195.246.245.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:c5:ff:19:e0:d7:d4:7f:bc:fb:73:5f:58:e6:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c84ac52e2b572cc2a99a741257e569aa371e3568
Validity
Not Before: Jan 1 21:47:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2a2db88cf66026b08f4ddafe13324e0bf8375bf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:06:7a:67:5d:70:db:26:83:af:2a:3f:51:31:
30:38:63:29:a7:2a:53:15:76:da:86:2c:6f:b2:da:
79:2d:f9:3a:00:a5:1a:23:52:b7:b2:16:f9:48:2c:
e4:9b:02:7e:74:de:3b:a3:85:97:15:eb:36:a3:cb:
66:a2:45:ce:46:77:9a:af:23:8a:f0:aa:89:88:e8:
a9:f9:1e:0d:c8:ab:38:97:18:3a:51:ab:65:8f:a2:
74:6f:69:98:dd:ab:03:8b:5b:20:c8:3c:23:5f:03:
af:9b:9c:aa:2f:e7:bb:6e:de:f5:92:58:bf:4c:de:
47:16:7d:70:f1:18:f8:93:20:d4:74:fc:7d:fb:18:
a1:01:79:0c:f6:94:3a:53:81:be:35:92:f4:f1:92:
83:fe:05:c0:a0:3d:7c:fa:2b:fa:83:0b:c7:0c:4b:
51:97:55:41:d2:be:af:7e:03:87:e4:30:ab:ec:c7:
4a:cf:58:69:ef:a8:94:5f:81:5b:44:66:41:a6:d4:
dd:9c:f1:3a:c8:f2:76:5e:50:13:59:ba:8b:77:7d:
16:a3:08:8d:cd:6b:8a:6d:0c:6d:43:6a:90:21:bb:
18:ca:cf:06:25:02:ee:09:fc:44:81:87:53:c3:9b:
21:ac:5c:b2:37:df:5e:71:5f:7c:62:95:0f:f4:ef:
1c:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:2D:B8:8C:F6:60:26:B0:8F:4D:DA:FE:13:32:4E:0B:F8:37:5B:F8
X509v3 Authority Key Identifier:
keyid:C8:4A:C5:2E:2B:57:2C:C2:A9:9A:74:12:57:E5:69:AA:37:1E:35:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yErFLitXLMKpmnQSV-VpqjceNWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/abdafc-b389-4518-b12d-2cc342b00519/1/Ki24jPZgJrCPTdr-EzJOC_g3W_g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/abdafc-b389-4518-b12d-2cc342b00519/1/yErFLitXLMKpmnQSV-VpqjceNWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.246.244.0/23
Signature Algorithm: sha256WithRSAEncryption
37:d5:82:3c:f7:a0:34:9f:be:a4:9a:dc:e3:ff:41:e8:10:36:
b9:0d:e4:64:1a:3f:c7:29:0b:07:59:3d:61:1a:35:62:8d:05:
90:32:17:6c:e7:28:de:c7:28:54:cd:2f:07:1e:70:00:c0:cd:
01:22:f4:4e:a2:c3:0d:d6:0a:1c:41:04:fa:18:dc:53:ec:1c:
b2:7c:7a:df:94:d9:f1:bd:9b:e2:a3:9c:9c:58:0b:9c:cc:d2:
49:08:05:29:d4:2b:43:5d:1d:35:a1:0c:ff:d6:ef:5c:ef:af:
c4:c9:c8:8e:bb:73:22:7a:95:ab:63:e1:d2:4c:34:20:53:88:
97:36:2a:51:da:f4:0f:2a:3f:2a:0a:c9:88:a5:11:0b:9b:0e:
60:c0:d7:89:bf:5f:3d:e0:75:11:9e:81:39:9e:5b:6f:80:11:
ff:45:8e:ed:1b:c7:66:51:45:34:e2:2c:0a:fc:43:8c:b2:e2:
1d:5e:96:06:7d:65:6a:00:65:d8:30:32:a9:81:44:57:a1:0e:
40:e4:dc:c9:4d:5b:94:b2:4b:42:4a:26:c9:82:ea:5b:bf:6b:
63:fd:39:a5:7d:81:cb:57:98:34:65:b5:5b:a5:a5:79:24:c2:
86:50:bf:46:fd:a5:fb:fd:1d:9c:13:fa:df:93:08:7a:34:14:
7e:f5:70:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:01:43 2025 by rpki-client