Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/4d9c83-f960-48ac-bbf5-9dca5cc80dd9/1/asHOk92nEQdrA8kG1RzUPuElHIs.roa
File: asHOk92nEQdrA8kG1RzUPuElHIs.roa (raw, json)
Hash identifier: Bdn7BKICOrC/wBSU74hIScdBDmMC3VmUhW1hWTywPms=
Subject key identifier: 6A:C1:CE:93:DD:A7:11:07:6B:03:C9:06:D5:1C:D4:3E:E1:25:1C:8B
Certificate issuer: /CN=1ed3d8e29e063b9d2740ab3de6c72255ec8d0557
Certificate serial: 01942521EBFDAA5E38D935572D1E7CA270DE
Authority key identifier: 1E:D3:D8:E2:9E:06:3B:9D:27:40:AB:3D:E6:C7:22:55:EC:8D:05:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HtPY4p4GO50nQKs95sciVeyNBVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/4d9c83-f960-48ac-bbf5-9dca5cc80dd9/1/asHOk92nEQdrA8kG1RzUPuElHIs.roa
Signing time: Thu 02 Jan 2025 03:49:27 +0000
ROA not before: Thu 02 Jan 2025 03:49:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3300
IP address blocks: 195.206.69.0/24 maxlen: 24
195.206.70.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:eb:fd:aa:5e:38:d9:35:57:2d:1e:7c:a2:70:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ed3d8e29e063b9d2740ab3de6c72255ec8d0557
Validity
Not Before: Jan 2 03:49:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6ac1ce93dda711076b03c906d51cd43ee1251c8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:97:16:f3:c8:96:a7:67:f3:5e:4e:2b:06:68:
4a:b2:fb:d9:ad:a4:ab:89:3e:d3:b4:18:1d:5d:74:
1b:fd:16:c9:78:97:d0:5b:53:dd:dd:fc:35:34:c3:
b8:a6:72:52:a9:04:d0:ca:b6:37:ca:08:fb:7e:13:
50:a9:dc:34:fd:e5:cd:e6:e0:76:3e:d2:23:a3:da:
c6:a7:08:ea:8b:cd:05:4c:f6:08:ac:6a:93:10:5b:
3f:ff:7d:2c:aa:e9:3e:c0:8c:59:eb:16:07:5f:34:
1f:3a:4a:23:94:b7:f3:d8:92:5c:38:7a:72:aa:b7:
6f:36:ed:87:8c:23:c1:69:a5:c6:54:69:7c:e2:4e:
24:34:64:7f:d5:eb:b1:f6:63:8f:b4:cb:da:8a:f6:
2c:ec:f9:72:91:b3:d8:cb:52:24:dc:98:4c:84:09:
ab:52:71:c0:3b:f7:23:72:b3:cf:13:02:42:26:b2:
79:8b:91:79:a0:a8:0a:12:6f:cd:5e:df:b7:ae:3c:
84:86:95:76:c2:7c:0c:e2:0f:4d:18:c3:ca:3e:e7:
7b:67:7a:96:f1:b3:74:e4:e9:06:69:2e:d9:3f:db:
e4:72:25:c4:f3:64:7e:9b:98:62:81:c6:4f:ee:02:
09:40:53:6e:2a:29:af:e1:54:84:63:94:65:ed:ab:
9d:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:C1:CE:93:DD:A7:11:07:6B:03:C9:06:D5:1C:D4:3E:E1:25:1C:8B
X509v3 Authority Key Identifier:
keyid:1E:D3:D8:E2:9E:06:3B:9D:27:40:AB:3D:E6:C7:22:55:EC:8D:05:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HtPY4p4GO50nQKs95sciVeyNBVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/4d9c83-f960-48ac-bbf5-9dca5cc80dd9/1/asHOk92nEQdrA8kG1RzUPuElHIs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/4d9c83-f960-48ac-bbf5-9dca5cc80dd9/1/HtPY4p4GO50nQKs95sciVeyNBVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.206.69.0-195.206.70.255
Signature Algorithm: sha256WithRSAEncryption
2d:bb:8f:4e:9d:e8:ef:e3:3d:49:47:4a:39:70:64:95:71:14:
30:11:c0:cf:b7:3a:f3:8e:96:ba:69:1e:ff:ce:61:a0:d2:cb:
25:67:5b:77:b3:a9:a4:4f:cd:7f:df:31:9e:e7:b7:32:52:55:
08:30:cd:b0:9a:ea:7d:6e:16:08:a9:eb:93:48:47:80:58:c9:
02:2c:95:0f:b8:ed:83:f1:73:6f:b4:cb:3c:ff:4a:18:8a:95:
f7:4e:f0:c3:0b:70:91:d7:a7:97:9d:dc:56:1e:16:ab:67:08:
eb:fd:fa:af:31:24:f7:ae:34:f2:7f:66:a8:d6:97:7e:c2:5e:
4d:bf:41:03:c7:de:f5:2e:37:14:32:0d:0a:41:ef:55:55:29:
b2:52:3c:90:a1:af:6e:99:b6:71:60:01:23:e2:26:c7:dc:f6:
a1:8c:e0:74:a7:72:c1:33:56:b0:a0:8d:e6:a3:0b:ce:c5:c8:
86:fa:4a:1b:7e:e5:43:29:37:e2:b9:33:ab:50:37:95:7f:38:
09:2f:c6:fd:34:6f:50:34:1d:97:83:59:37:ba:95:4e:e0:b0:
48:fe:02:98:54:dc:b0:ff:e9:a7:d6:d1:6e:28:c4:50:91:db:
cf:9a:a4:ae:31:aa:da:e0:82:f5:24:31:3a:0e:68:ed:4e:ab:
9e:f3:67:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:54 2025 by rpki-client on console.sobornost.net