Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/2894d7-14ee-46ab-882a-21272b87728b/1/pVboDUVcCgIOSYeEdNLk6uQS4-Y.roa
File: pVboDUVcCgIOSYeEdNLk6uQS4-Y.roa (raw, json)
Hash identifier: YNYcfocsMawW3njWrgaZfKy0b3fCRuRw7rODR3Kt6t8=
Subject key identifier: A5:56:E8:0D:45:5C:0A:02:0E:49:87:84:74:D2:E4:EA:E4:12:E3:E6
Certificate issuer: /CN=8efc610ce7bcf479651fd9518c28894ed1eb5a84
Certificate serial: 019426D998BDCDEDAF6CB224E5AB0A7E959A
Authority key identifier: 8E:FC:61:0C:E7:BC:F4:79:65:1F:D9:51:8C:28:89:4E:D1:EB:5A:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jvxhDOe89HllH9lRjCiJTtHrWoQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/2894d7-14ee-46ab-882a-21272b87728b/1/pVboDUVcCgIOSYeEdNLk6uQS4-Y.roa
Signing time: Thu 02 Jan 2025 11:49:42 +0000
ROA not before: Thu 02 Jan 2025 11:49:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203701
IP address blocks: 195.54.166.0/24 maxlen: 24
195.54.167.0/24 maxlen: 24
202.122.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:98:bd:cd:ed:af:6c:b2:24:e5:ab:0a:7e:95:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8efc610ce7bcf479651fd9518c28894ed1eb5a84
Validity
Not Before: Jan 2 11:49:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a556e80d455c0a020e49878474d2e4eae412e3e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:4d:61:e6:02:c0:55:1e:77:a3:38:f6:38:e3:
4e:6c:74:15:ca:15:e3:56:b1:98:5e:d3:40:8f:3b:
c7:0a:80:aa:19:74:90:7c:23:db:76:b0:46:05:c1:
8d:43:87:42:62:e1:46:2e:30:6a:f3:42:e1:01:04:
9d:74:c6:da:f0:f3:10:46:7a:89:53:ba:fe:6e:8b:
5f:1b:47:59:16:89:e0:b1:2e:3b:34:32:f3:d3:ea:
80:eb:2e:cc:da:10:21:6a:78:73:2a:83:d6:a7:75:
96:0d:92:c8:44:5c:fb:59:ee:89:b5:cf:c1:f6:7e:
e0:f4:37:a0:7e:4c:a1:2d:99:e1:4b:50:aa:b2:30:
61:a2:09:e2:8c:4e:41:f7:89:ce:32:44:96:b5:92:
6f:a7:ab:16:d4:7f:30:2f:bc:d3:1f:ef:89:81:78:
2b:52:8b:9f:55:f4:37:6b:5a:54:b4:92:d2:a6:89:
98:4d:fd:5d:20:38:74:f3:5c:04:cf:f7:10:66:f1:
2d:73:4e:86:69:af:e9:25:8c:2f:ba:c4:5f:32:2a:
75:b2:27:68:09:4d:14:ec:df:f9:93:5d:ea:b1:c6:
e7:09:39:ee:aa:35:47:87:db:df:5f:50:07:e2:89:
bb:b9:97:aa:5e:38:79:f6:aa:99:2f:d0:dd:7e:ec:
46:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:56:E8:0D:45:5C:0A:02:0E:49:87:84:74:D2:E4:EA:E4:12:E3:E6
X509v3 Authority Key Identifier:
keyid:8E:FC:61:0C:E7:BC:F4:79:65:1F:D9:51:8C:28:89:4E:D1:EB:5A:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jvxhDOe89HllH9lRjCiJTtHrWoQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/2894d7-14ee-46ab-882a-21272b87728b/1/pVboDUVcCgIOSYeEdNLk6uQS4-Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/2894d7-14ee-46ab-882a-21272b87728b/1/jvxhDOe89HllH9lRjCiJTtHrWoQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.54.166.0/23
202.122.129.0/24
Signature Algorithm: sha256WithRSAEncryption
15:3f:a8:9c:9a:0b:aa:47:70:10:1a:15:db:0a:07:c4:eb:db:
84:40:07:3d:b7:2a:90:26:fc:8d:9f:f3:e3:34:27:39:10:54:
cb:89:1b:77:0f:8d:75:55:c0:45:03:d0:21:72:1e:01:85:92:
2c:ac:f0:c2:4d:29:66:f3:2a:5d:0f:79:34:64:84:95:6f:11:
bf:f5:d8:b6:3b:20:b2:25:0a:16:f5:08:40:3e:94:61:80:0c:
b6:17:b7:a3:a2:d9:52:e6:bf:62:45:d6:a6:94:55:06:28:22:
9f:ef:33:45:24:fc:0b:41:6f:d8:f0:21:c5:db:ce:6c:7e:4a:
39:9b:d1:d3:ec:97:38:bd:6d:34:27:59:08:b9:22:2c:b1:f3:
76:c2:54:d9:c4:bf:ee:e5:8a:f3:0a:4e:10:a7:3b:5f:d3:9c:
aa:aa:38:17:da:66:e0:03:11:2a:12:95:6a:6d:7a:59:ea:5f:
ae:a1:78:a6:81:b0:ea:45:4f:21:ff:4e:b7:0a:69:ff:60:b8:
4c:35:3c:33:92:0f:c0:df:e4:ad:e8:d3:ba:02:80:a9:4e:97:
48:82:f3:65:f7:f5:71:62:3e:9d:82:a3:38:c1:b1:77:a3:ed:
af:89:f1:c0:7a:40:7f:e7:42:0e:91:69:53:3c:58:5e:a3:90:
a9:25:92:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:53:17 2025 by rpki-client