Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/AujfRdIHwrSQY2RGhHPRhQQBirk.roa
File: AujfRdIHwrSQY2RGhHPRhQQBirk.roa (raw, json)
Hash identifier: mcX51wcA91BHrUBaKmjMN0DmNGWlE8TFJsU7nByHwwE=
Subject key identifier: 02:E8:DF:45:D2:07:C2:B4:90:63:64:46:84:73:D1:85:04:01:8A:B9
Certificate issuer: /CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Certificate serial: 0194A6B3288B63E93D293DDC9BFA80BE1F2E
Authority key identifier: 06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/AujfRdIHwrSQY2RGhHPRhQQBirk.roa
Signing time: Mon 27 Jan 2025 07:39:06 +0000
ROA not before: Mon 27 Jan 2025 07:39:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59432
IP address blocks: 195.114.205.0/24 maxlen: 24
213.220.20.0/24 maxlen: 24
213.220.62.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:a6:b3:28:8b:63:e9:3d:29:3d:dc:9b:fa:80:be:1f:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Validity
Not Before: Jan 27 07:39:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=02e8df45d207c2b4906364468473d18504018ab9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:d1:23:4f:ef:01:66:fe:56:a2:3d:c9:1a:e4:
4a:50:cd:8a:f7:f5:24:1a:4c:1d:ac:11:a0:71:48:
9d:fb:7d:a5:d6:8d:d7:b9:44:15:08:f5:81:e4:ee:
df:a2:c4:33:4a:2c:f9:dd:35:40:a7:13:2f:21:b2:
8a:13:6f:5a:ef:07:93:2a:90:b6:16:b0:f3:95:72:
2c:ca:67:61:56:e1:ef:b3:f2:40:98:86:dd:38:61:
e6:e3:26:c7:62:73:8c:a7:72:9d:fc:be:83:77:24:
62:40:8f:a9:be:56:a1:11:49:f2:c1:e4:e1:72:f5:
f1:85:fa:30:5b:68:56:e9:a3:8d:14:fb:8e:9d:e0:
64:5b:ed:c2:a2:26:f9:06:b0:f6:23:c2:c5:dc:c0:
a4:d1:79:f0:4b:1b:6b:f0:8f:5e:be:9b:f9:61:d8:
e3:f9:e7:40:ce:22:20:2e:d6:e2:b7:6f:05:fc:ed:
fe:b6:58:0b:1c:0e:cc:18:1f:07:81:07:8d:c5:39:
4f:c7:4a:da:02:8d:65:f0:87:4d:3b:46:71:3f:60:
09:42:0a:92:ec:34:15:99:2e:3f:c6:e0:cf:0f:96:
f1:e4:31:a7:6e:de:5a:21:d7:76:1d:16:bf:16:db:
92:4e:c6:cf:55:cf:6c:28:1f:6c:04:c2:c1:59:8b:
71:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:E8:DF:45:D2:07:C2:B4:90:63:64:46:84:73:D1:85:04:01:8A:B9
X509v3 Authority Key Identifier:
keyid:06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/AujfRdIHwrSQY2RGhHPRhQQBirk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.114.205.0/24
213.220.20.0/24
213.220.62.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:76:df:3d:0b:c7:b7:9c:77:14:ef:99:f9:bc:84:62:be:5f:
53:b2:52:95:58:b7:63:7c:06:c3:23:c2:8b:80:59:61:cf:72:
2f:13:89:e8:7b:a1:f0:e8:08:5d:be:85:7f:1b:7b:df:1c:f3:
ed:f9:2d:62:60:53:00:b2:0a:a6:d7:8e:98:7b:54:69:08:75:
53:94:75:a7:1a:c9:1d:ed:7d:8a:34:3d:36:78:87:e3:5e:ea:
fc:63:f7:c6:f5:45:fb:8b:c1:ea:a0:3a:91:80:dc:1c:24:31:
8e:1b:43:63:b0:94:24:6b:cf:0e:ef:e3:c9:20:2d:e3:57:b5:
cb:41:88:06:aa:fc:4f:c2:e6:68:48:bc:f1:48:b8:0e:35:5e:
71:d1:d4:cd:c3:6d:9b:1a:47:87:cd:a7:0c:b9:33:ba:a4:4a:
d0:90:b6:0c:1e:d0:54:ca:b9:48:c3:fc:2d:f2:5b:64:c7:6e:
32:32:3e:2f:52:a3:42:a8:0f:80:a6:19:81:dc:78:c4:6d:83:
96:ce:1b:e0:b1:89:5d:7e:9d:0e:ed:c6:96:08:46:f4:97:fd:
f8:25:60:13:89:83:1e:4b:a4:6b:64:d9:c8:f0:d9:4c:ec:49:
3c:b2:64:32:f1:83:a8:7b:b7:cf:d4:39:8d:9b:af:79:52:df:
3c:6b:c9:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:15:47 2025 by rpki-client