Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/q0UTKgC4PFzydB7NP-rl9j24a_I.roa
File: q0UTKgC4PFzydB7NP-rl9j24a_I.roa (raw, json)
Hash identifier: c9s5cDY6q/ZHGwpLSwnToVt1OP6ItXZzlNUUCiyufI0=
Subject key identifier: AB:45:13:2A:00:B8:3C:5C:F2:74:1E:CD:3F:EA:E5:F6:3D:B8:6B:F2
Certificate issuer: /CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Certificate serial: 01941F8C93C99207E8C7B467EB27C5CA1955
Authority key identifier: 06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/q0UTKgC4PFzydB7NP-rl9j24a_I.roa
Signing time: Wed 01 Jan 2025 01:48:14 +0000
ROA not before: Wed 01 Jan 2025 01:48:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25198
IP address blocks: 195.114.195.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:93:c9:92:07:e8:c7:b4:67:eb:27:c5:ca:19:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Validity
Not Before: Jan 1 01:48:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ab45132a00b83c5cf2741ecd3feae5f63db86bf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:36:4c:57:31:08:07:59:69:0c:f4:2c:a2:9b:
0b:1e:11:40:8e:cb:0e:8a:64:0f:0a:cd:78:14:6a:
e3:f5:90:a4:e3:0e:72:24:3e:2a:c8:48:25:e0:8a:
5a:3f:14:3b:ca:01:85:a4:23:5c:42:3d:9c:d8:a8:
77:ac:00:f8:20:6e:e6:56:9e:0f:54:4b:e0:42:16:
fe:2a:5d:27:cf:bd:8f:b4:d0:92:87:86:9d:37:75:
56:4a:1d:aa:d7:84:1d:69:46:69:ca:4d:e7:33:33:
30:f2:1d:c0:8c:82:27:42:98:40:97:23:ff:06:ca:
b6:c4:0f:04:6c:92:69:c7:43:4b:9f:27:94:36:af:
bd:da:40:28:40:1d:28:47:82:ee:18:27:21:c9:0e:
5e:11:25:b0:20:c5:e7:a3:5a:99:4b:10:44:b8:8e:
99:b1:0a:27:cf:8a:ae:4b:6e:21:2f:2d:db:dd:47:
4b:76:4c:ab:62:f2:a5:c9:d4:c8:05:9a:00:00:30:
c5:2a:7e:86:cf:0b:f3:db:46:98:dc:5a:01:e7:6d:
2a:bb:da:b7:84:2d:7f:23:20:d9:0f:91:c8:78:da:
ca:85:35:ab:11:4a:92:49:6f:54:cf:5e:83:4e:de:
e0:60:49:8a:e5:a4:a0:e7:db:ae:16:cf:9e:bd:ee:
fd:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:45:13:2A:00:B8:3C:5C:F2:74:1E:CD:3F:EA:E5:F6:3D:B8:6B:F2
X509v3 Authority Key Identifier:
keyid:06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/q0UTKgC4PFzydB7NP-rl9j24a_I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.114.195.0/24
Signature Algorithm: sha256WithRSAEncryption
06:d0:0e:bd:0f:8e:62:34:b3:18:51:36:1a:58:5e:b2:6b:15:
46:1e:9f:09:f3:54:3c:46:bf:1c:57:b7:33:83:2e:f4:ca:d0:
2d:a2:56:ad:e9:57:d6:cb:27:75:d4:d2:e9:9a:e0:1d:b7:d6:
b1:6b:00:e5:f2:1b:04:58:30:ea:67:0e:7d:8c:d5:c1:ab:7f:
47:25:64:5d:fa:03:39:b8:f6:9b:63:71:26:9b:89:c6:4b:45:
54:df:82:68:b1:7a:47:9e:f8:82:84:4b:6f:f2:7c:0d:8e:d5:
70:51:36:e8:25:21:a1:43:70:30:0a:9c:bb:5c:28:9c:2b:2f:
a0:b2:de:dd:ca:99:33:83:d6:d1:59:1d:33:0a:20:44:1e:72:
bc:e5:e4:30:a4:a4:89:10:29:1c:f0:8d:b5:bd:6b:4f:e2:f4:
02:26:5c:55:8e:82:9c:c5:af:e6:35:fe:9d:d9:0b:35:fb:b0:
e1:61:e2:df:04:d2:e8:4e:f7:7c:0a:ca:c6:7d:ca:b2:c4:32:
1a:2d:16:7d:3c:6d:62:15:f2:be:c4:ba:11:4e:b9:b5:60:c7:
a9:30:29:a6:b9:47:aa:72:d7:49:3e:30:a1:ad:5f:19:52:8b:
c2:11:4e:1c:45:cd:b4:a6:94:85:60:19:ba:1e:3a:25:43:69:
8f:8b:15:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:21:18 2025 by rpki-client