Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/32169a-4a5a-411b-b006-318c71b119f7/1/pXv8FGbLwxECE7IPZwLe-oIEhlQ.roa
File: pXv8FGbLwxECE7IPZwLe-oIEhlQ.roa (raw, json)
Hash identifier: lA0EoJbAgOHytg/Q3yX/rveAnxbQAYlQALMvfLmzZeY=
Subject key identifier: A5:7B:FC:14:66:CB:C3:11:02:13:B2:0F:67:02:DE:FA:82:04:86:54
Certificate issuer: /CN=6e542cede53a0c57145a6aff2f58196f02d4a12e
Certificate serial: 01942827E286ABFD4BE654072810667183EA
Authority key identifier: 6E:54:2C:ED:E5:3A:0C:57:14:5A:6A:FF:2F:58:19:6F:02:D4:A1:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/blQs7eU6DFcUWmr_L1gZbwLUoS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/32169a-4a5a-411b-b006-318c71b119f7/1/pXv8FGbLwxECE7IPZwLe-oIEhlQ.roa
Signing time: Thu 02 Jan 2025 17:54:50 +0000
ROA not before: Thu 02 Jan 2025 17:54:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207327
IP address blocks: 195.226.218.0/24 maxlen: 24
2a10:2d80::/29 maxlen: 56
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:e2:86:ab:fd:4b:e6:54:07:28:10:66:71:83:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e542cede53a0c57145a6aff2f58196f02d4a12e
Validity
Not Before: Jan 2 17:54:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a57bfc1466cbc3110213b20f6702defa82048654
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f0:a2:ae:06:9c:ee:39:67:60:8c:7e:da:d2:
0b:29:e9:d0:ab:0f:62:c6:6c:42:48:9d:3a:5b:4b:
a5:f0:68:9a:8c:fa:ae:4b:e1:95:58:c2:f0:f4:77:
e1:d1:b3:39:e5:ab:4a:c6:57:54:9a:c6:04:09:cd:
57:f1:1d:01:89:7b:c0:d5:bb:47:52:ed:d6:d9:90:
dd:ac:34:5a:35:33:29:38:92:80:97:84:db:d8:77:
a0:e4:0e:7c:c7:b0:bb:28:81:0c:ca:e1:ab:21:4e:
9c:75:3d:f3:d5:16:fd:a7:03:d3:07:e8:1e:97:24:
36:78:d6:98:b5:b6:f0:8a:91:32:29:34:fb:8b:a5:
e2:c2:e8:b9:33:39:99:f1:89:1c:8a:3c:ac:9d:bf:
a9:bc:07:85:ae:a4:01:34:cf:4f:42:22:aa:ff:49:
9b:86:61:93:9f:84:71:10:91:83:36:76:e1:18:f1:
ab:25:ae:ff:5d:4b:7e:85:af:cb:ba:8e:58:f9:4b:
40:83:76:84:82:22:84:1c:b0:03:fa:d0:37:15:12:
80:73:59:f6:c4:39:3e:7d:e0:9d:25:43:cb:b7:3e:
0f:01:42:6c:d0:0b:8e:dc:8d:4a:d9:b3:ef:4c:e6:
96:6d:7d:ec:8f:01:cd:85:6e:4b:22:fc:7a:9e:27:
10:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:7B:FC:14:66:CB:C3:11:02:13:B2:0F:67:02:DE:FA:82:04:86:54
X509v3 Authority Key Identifier:
keyid:6E:54:2C:ED:E5:3A:0C:57:14:5A:6A:FF:2F:58:19:6F:02:D4:A1:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/blQs7eU6DFcUWmr_L1gZbwLUoS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/32169a-4a5a-411b-b006-318c71b119f7/1/pXv8FGbLwxECE7IPZwLe-oIEhlQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/32169a-4a5a-411b-b006-318c71b119f7/1/blQs7eU6DFcUWmr_L1gZbwLUoS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.226.218.0/24
IPv6:
2a10:2d80::/29
Signature Algorithm: sha256WithRSAEncryption
5f:c3:02:96:e8:d9:1a:6a:4d:fb:3e:fe:54:47:e2:b1:c9:93:
66:e0:09:07:9e:08:d9:77:b8:a1:0d:32:4e:e0:30:5b:51:5b:
33:b7:cb:ce:0f:86:27:32:a6:14:a3:df:f4:68:5d:cb:f2:85:
89:bb:ef:24:2a:d2:14:f3:c7:07:55:e3:01:86:75:d5:c2:c8:
1b:97:19:0a:bc:ea:4c:56:9c:09:64:1c:55:46:eb:38:da:7b:
e4:54:52:9f:71:df:54:52:c1:49:36:e2:d7:52:77:58:90:e5:
cf:4b:11:75:6b:73:9f:ed:61:1c:36:a8:70:52:12:4d:29:ce:
28:32:2a:3d:8c:ca:bc:8e:a8:c5:45:1c:ee:98:42:3f:12:9f:
97:a2:9a:05:2f:a5:fe:c9:66:de:07:17:92:fd:33:90:f3:7c:
a4:6e:40:ad:75:6c:85:a5:c2:9c:4c:e0:25:39:02:8a:d1:2a:
d5:a6:67:d3:ae:0a:4b:55:9c:88:6c:2b:86:96:b6:39:48:4d:
7b:28:1b:89:f9:ec:28:ab:24:d4:96:cb:33:3f:13:c2:6a:03:
9b:04:e8:e6:4e:7d:fa:96:c9:72:1b:35:60:32:a8:74:5b:f5:
63:bb:3e:9b:19:fb:52:0c:ec:bd:2b:ea:f1:5b:05:44:1f:dd:
6a:06:f7:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:11:35 2025 by rpki-client