Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/3aa0f5-eae5-49a3-8ee9-0df7df4d5b01/1/v6HTtOPpswbVJ_lSlYV-_O_3MwA.roa
File: v6HTtOPpswbVJ_lSlYV-_O_3MwA.roa (raw, json)
Hash identifier: TUy20gRu1AXwcpH6OpFA+n1Rp3szdF8pZ4NPkSVx+cY=
Subject key identifier: BF:A1:D3:B4:E3:E9:B3:06:D5:27:F9:52:95:85:7E:FC:EF:F7:33:00
Certificate issuer: /CN=01292e03a731796e1d7b148b1dd235d144352f5d
Certificate serial: 0194221FEFB3717507207CFCCFD61FF47F63
Authority key identifier: 01:29:2E:03:A7:31:79:6E:1D:7B:14:8B:1D:D2:35:D1:44:35:2F:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ASkuA6cxeW4dexSLHdI10UQ1L10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/3aa0f5-eae5-49a3-8ee9-0df7df4d5b01/1/v6HTtOPpswbVJ_lSlYV-_O_3MwA.roa
Signing time: Wed 01 Jan 2025 13:48:25 +0000
ROA not before: Wed 01 Jan 2025 13:48:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210547
IP address blocks: 195.96.153.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:ef:b3:71:75:07:20:7c:fc:cf:d6:1f:f4:7f:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01292e03a731796e1d7b148b1dd235d144352f5d
Validity
Not Before: Jan 1 13:48:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bfa1d3b4e3e9b306d527f95295857efceff73300
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:fc:b7:f8:e8:1e:24:47:88:e4:8f:d3:68:c3:
02:dd:e8:c7:f3:8b:fa:22:54:4f:5d:48:cc:5a:e9:
70:8a:bc:91:a0:ac:3e:d2:36:2d:aa:11:27:12:63:
ac:d3:f9:7d:cb:f6:98:87:4f:51:0c:88:d9:20:de:
1f:26:be:cb:c0:ad:f9:40:95:90:b8:17:52:09:fc:
f1:c4:33:0c:5d:84:0e:65:f2:72:6d:87:18:f6:9b:
89:44:54:a2:d5:50:78:47:86:a2:47:22:37:9a:11:
58:a6:d5:31:f2:37:61:dc:7a:7f:a6:1f:ca:f3:8d:
ea:3a:da:fe:96:93:e1:4b:ce:7e:bb:96:94:74:57:
5a:81:4f:ae:6c:43:73:a5:b5:e8:cd:24:06:fb:81:
98:c5:fc:cb:7a:00:af:9f:e0:c6:a2:09:d6:97:5e:
be:c5:a9:c4:78:23:b5:c6:b8:f9:0b:8e:50:5d:c8:
42:aa:7c:ff:6e:80:7f:f8:6b:db:e8:ed:50:bc:db:
72:50:c4:6c:b8:ea:e9:27:11:34:53:3e:47:be:46:
c7:b3:ce:f8:df:0d:da:a1:e6:1b:48:79:6b:9b:0c:
3d:78:9a:e0:e9:d0:69:5f:4f:4c:99:ca:2e:c7:51:
8a:c3:6a:75:9c:0f:49:33:a6:85:dd:a8:40:ce:b6:
c8:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:A1:D3:B4:E3:E9:B3:06:D5:27:F9:52:95:85:7E:FC:EF:F7:33:00
X509v3 Authority Key Identifier:
keyid:01:29:2E:03:A7:31:79:6E:1D:7B:14:8B:1D:D2:35:D1:44:35:2F:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ASkuA6cxeW4dexSLHdI10UQ1L10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/3aa0f5-eae5-49a3-8ee9-0df7df4d5b01/1/v6HTtOPpswbVJ_lSlYV-_O_3MwA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/3aa0f5-eae5-49a3-8ee9-0df7df4d5b01/1/ASkuA6cxeW4dexSLHdI10UQ1L10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.96.153.0/24
Signature Algorithm: sha256WithRSAEncryption
00:86:91:1d:d8:25:ba:44:b6:cf:1d:b1:5b:c6:da:7d:a6:c4:
03:4d:61:c1:f8:c6:a5:c5:5c:3f:56:00:d5:5a:0a:35:c3:f8:
62:d9:33:ff:51:35:80:5d:48:01:69:40:00:12:44:ef:84:b0:
a1:1d:d0:96:a5:25:84:f8:d2:cc:33:4a:fd:2a:2d:10:6a:a5:
2e:52:39:c1:93:02:be:03:3c:4d:a9:3b:04:bd:14:ca:1d:68:
66:7d:6b:52:25:3f:29:33:ec:5d:3d:fc:70:4b:21:4a:ef:02:
39:e5:e0:ec:25:58:eb:6a:5e:f2:c9:00:37:cb:1a:a7:c7:74:
69:13:e9:74:79:2e:9b:54:4d:c0:75:e4:63:2d:92:a9:92:85:
3f:26:4e:bb:cf:e9:df:71:ff:3c:9c:58:cf:c7:41:8f:0a:27:
51:de:16:e9:00:f4:4e:77:cd:21:fb:bc:91:f3:ed:fd:01:76:
0c:95:22:9d:1d:48:43:46:a6:00:2a:84:5f:f9:a7:2a:61:ab:
e9:66:fb:fa:40:9f:14:42:dc:b7:18:8c:bb:09:35:3b:c9:30:
ca:46:de:73:ca:15:6a:8e:47:6d:37:c3:19:e3:e1:c0:bb:54:
b8:17:85:9a:81:3d:ef:b4:4d:3d:df:d3:8d:92:e2:75:1d:e5:
33:80:b4:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:38:16 2025 by rpki-client