Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/146078-f9b2-4163-af1a-8e93cb5c5355/1/aHuPxYoxTVBAD5qRwAIntTvBYUo.roa
File: aHuPxYoxTVBAD5qRwAIntTvBYUo.roa (raw, json)
Hash identifier: jE0S/EIIiLy8A4TT+0QWlg16D+11OM3xpNzdkTsYxVw=
Subject key identifier: 68:7B:8F:C5:8A:31:4D:50:40:0F:9A:91:C0:02:27:B5:3B:C1:61:4A
Certificate issuer: /CN=81fa48f40bc84540c46bd23be9b90897aa184f4d
Certificate serial: 01941FFA6804721B195294AC1630C1965622
Authority key identifier: 81:FA:48:F4:0B:C8:45:40:C4:6B:D2:3B:E9:B9:08:97:AA:18:4F:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gfpI9AvIRUDEa9I76bkIl6oYT00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/146078-f9b2-4163-af1a-8e93cb5c5355/1/aHuPxYoxTVBAD5qRwAIntTvBYUo.roa
Signing time: Wed 01 Jan 2025 03:48:11 +0000
ROA not before: Wed 01 Jan 2025 03:48:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50115
IP address blocks: 195.64.232.0/22 maxlen: 22
195.64.240.0/22 maxlen: 23
195.64.253.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:68:04:72:1b:19:52:94:ac:16:30:c1:96:56:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81fa48f40bc84540c46bd23be9b90897aa184f4d
Validity
Not Before: Jan 1 03:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=687b8fc58a314d50400f9a91c00227b53bc1614a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:8e:9f:9c:eb:d9:a0:93:49:23:2e:59:80:e7:
35:ab:e0:b1:af:2f:2c:d7:c5:b3:00:2b:43:21:f1:
be:b0:e9:23:de:88:64:a3:32:31:ba:14:d1:55:df:
89:b7:cb:15:de:81:02:53:30:d7:62:38:ac:18:fa:
2c:07:6d:d7:7d:bc:87:25:a9:0d:82:03:34:76:73:
ef:30:5d:0c:30:ee:be:1e:ec:5e:ee:a0:54:88:8a:
7d:82:92:35:02:19:c5:35:3b:80:30:ea:35:6f:55:
36:7b:15:49:4c:b0:eb:b5:59:67:3e:41:b7:c8:3c:
07:2c:78:a9:b0:a7:c6:57:e0:11:a0:8d:9a:2d:82:
f5:c9:7c:b3:da:90:09:b0:8c:5d:4e:12:da:08:94:
42:dc:2e:6a:64:74:ef:79:42:a7:f8:3a:ba:ee:77:
b8:db:e5:ee:85:41:1d:a4:fc:3c:3f:28:24:28:f6:
e2:82:10:4d:5b:ca:a5:77:80:b4:41:3d:e5:82:24:
a4:39:c8:a7:e1:ea:1b:6e:6f:41:a8:c9:81:52:e1:
20:f0:9b:a2:26:dc:60:0a:af:39:2c:d2:5e:b0:94:
30:ee:ab:52:51:c8:85:c1:74:95:bf:9d:26:d3:b2:
c1:29:89:df:4b:64:c9:a0:5b:ca:cc:24:2e:94:ea:
0d:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:7B:8F:C5:8A:31:4D:50:40:0F:9A:91:C0:02:27:B5:3B:C1:61:4A
X509v3 Authority Key Identifier:
keyid:81:FA:48:F4:0B:C8:45:40:C4:6B:D2:3B:E9:B9:08:97:AA:18:4F:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gfpI9AvIRUDEa9I76bkIl6oYT00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/146078-f9b2-4163-af1a-8e93cb5c5355/1/aHuPxYoxTVBAD5qRwAIntTvBYUo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/146078-f9b2-4163-af1a-8e93cb5c5355/1/gfpI9AvIRUDEa9I76bkIl6oYT00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.64.232.0/22
195.64.240.0/22
195.64.253.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:14:38:d9:14:8f:e2:3a:56:5b:c8:6a:80:9c:df:6d:1e:5f:
29:aa:49:56:1e:80:92:98:8a:7e:2f:fd:0a:df:63:d1:4a:15:
ef:c6:86:2a:f6:b0:83:bc:84:d7:c9:45:3f:57:3a:3b:e9:23:
f6:bb:39:4e:e4:3b:4a:b8:38:64:9a:66:b2:f8:9f:6c:df:7b:
d2:48:81:98:69:c3:26:c2:87:98:b2:87:d4:28:a2:61:53:46:
ad:94:71:2f:b2:ba:34:52:fd:9e:39:42:ba:91:93:04:e1:b2:
a3:a0:88:48:ab:0c:74:bd:2e:1b:1a:91:32:29:e2:52:ca:73:
29:84:42:27:b8:d3:37:3e:73:6a:3f:a8:db:5e:71:90:25:2c:
ff:61:5d:5f:7f:55:79:3b:1b:b1:11:a1:cc:88:af:f9:b6:1a:
5d:65:6d:c7:0f:7e:ec:73:88:df:e3:10:97:e2:de:f6:8b:4b:
eb:99:ec:82:13:6c:65:8a:ae:26:ab:a8:3f:ed:f7:13:a3:2d:
74:a9:c6:38:44:8b:a3:34:0d:90:fd:dc:4f:af:91:34:11:39:
29:ea:6c:98:cd:2c:c6:b6:8b:c8:68:b1:ee:ae:2d:25:f7:b6:
6b:4b:df:f9:ca:c6:d3:61:1b:0f:9f:5c:ab:4b:d3:26:20:a8:
f9:40:ee:63
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZQf+mgEchsZUpSsFjDBllYiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxZmE0OGY0MGJjODQ1NDBjNDZiZDIzYmU5YjkwODk3YWEx
ODRmNGQwHhcNMjUwMTAxMDM0ODExWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ODdiOGZjNThhMzE0ZDUwNDAwZjlhOTFjMDAyMjdiNTNiYzE2MTRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtI6fnOvZoJNJIy5ZgOc1q+Cxry8s
18WzACtDIfG+sOkj3ohkozIxuhTRVd+Jt8sV3oECUzDXYjisGPosB23XfbyHJakN
ggM0dnPvMF0MMO6+Huxe7qBUiIp9gpI1AhnFNTuAMOo1b1U2exVJTLDrtVlnPkG3
yDwHLHipsKfGV+ARoI2aLYL1yXyz2pAJsIxdThLaCJRC3C5qZHTveUKn+Dq67ne4
2+XuhUEdpPw8PygkKPbighBNW8qld4C0QT3lgiSkOcin4eobbm9BqMmBUuEg8Jui
JtxgCq85LNJesJQw7qtSUciFwXSVv50m07LBKYnfS2TJoFvKzCQulOoNOQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFGh7j8WKMU1QQA+akcACJ7U7wWFKMB8GA1UdIwQY
MBaAFIH6SPQLyEVAxGvSO+m5CJeqGE9NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ2ZwSTlBdklSVURFYTlJNzZia0lsNm9ZVDAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My8xNDYwNzgtZjliMi00MTYzLWFmMWEt
OGU5M2NiNWM1MzU1LzEvYUh1UHhZb3hUVkJBRDVxUndBSW50VHZCWVVvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83My8xNDYwNzgtZjliMi00MTYzLWFmMWEtOGU5M2NiNWM1MzU1
LzEvZ2ZwSTlBdklSVURFYTlJNzZia0lsNm9ZVDAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCw0DoAwQC
w0DwAwQAw0D9MA0GCSqGSIb3DQEBCwUAA4IBAQCxFDjZFI/iOlZbyGqAnN9tHl8p
qklWHoCSmIp+L/0K32PRShXvxoYq9rCDvITXyUU/Vzo76SP2uzlO5DtKuDhkmmay
+J9s33vSSIGYacMmwoeYsofUKKJhU0atlHEvsro0Uv2eOUK6kZME4bKjoIhIqwx0
vS4bGpEyKeJSynMphEInuNM3PnNqP6jbXnGQJSz/YV1ff1V5OxuxEaHMiK/5thpd
ZW3HD37sc4jf4xCX4t72i0vrmeyCE2xliq4mq6g/7fcToy10qcY4RIujNA2Q/dxP
r5E0ETkp6myYzSzGtovIaLHuri0l97ZrS9/5ysbTYRsPn1yrS9MmIKj5QO5j
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:55 2025 by rpki-client on console.sobornost.net