Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/d30eef-495e-43bd-919c-a2a0e2db49d0/1/20Dw3EtRjT0VsUf9XJsc0R3Ci-Y.roa
File: 20Dw3EtRjT0VsUf9XJsc0R3Ci-Y.roa (raw, json)
Hash identifier: eYk/5sRuyCDN9GA+BHkMTQtHbaoi0rArz9DpKNEObWk=
Subject key identifier: DB:40:F0:DC:4B:51:8D:3D:15:B1:47:FD:5C:9B:1C:D1:1D:C2:8B:E6
Certificate issuer: /CN=d99a47cdc89f46342f90b0da3c30d9ec5fd63238
Certificate serial: 01941FFA0AA36D4C43AEC47C1A3E22B299C5
Authority key identifier: D9:9A:47:CD:C8:9F:46:34:2F:90:B0:DA:3C:30:D9:EC:5F:D6:32:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ZpHzcifRjQvkLDaPDDZ7F_WMjg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/d30eef-495e-43bd-919c-a2a0e2db49d0/1/20Dw3EtRjT0VsUf9XJsc0R3Ci-Y.roa
Signing time: Wed 01 Jan 2025 03:47:47 +0000
ROA not before: Wed 01 Jan 2025 03:47:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205005
IP address blocks: 195.32.32.0/21 maxlen: 21
195.32.40.0/21 maxlen: 21
195.32.48.0/21 maxlen: 21
195.32.56.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:0a:a3:6d:4c:43:ae:c4:7c:1a:3e:22:b2:99:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d99a47cdc89f46342f90b0da3c30d9ec5fd63238
Validity
Not Before: Jan 1 03:47:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=db40f0dc4b518d3d15b147fd5c9b1cd11dc28be6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:33:eb:b3:9f:2b:f5:c2:c0:09:1a:bb:45:c5:
47:39:5a:c6:41:dc:39:b0:4d:5f:0c:dc:b6:9e:84:
b1:0b:82:37:7b:25:ac:51:22:13:84:dc:1f:fd:f3:
10:6f:46:32:2f:5f:63:ee:c2:dc:af:56:5d:ba:cf:
6d:44:e6:b4:75:b5:1b:04:7b:64:4b:86:c9:b0:36:
8f:96:9d:0f:d7:8f:7b:95:3c:fe:6b:d4:43:67:c1:
da:54:55:f6:5e:e2:1b:22:22:0c:79:61:39:f9:d4:
10:8d:df:ff:6d:a1:e9:05:61:90:b1:cf:97:0d:bd:
2c:0b:7f:11:1a:db:7d:43:24:e1:d4:61:5e:e3:ea:
9b:fb:0c:bd:cb:1e:68:46:07:b5:a5:af:25:fc:66:
fb:e8:4c:39:cb:5c:1a:70:d7:7a:c3:af:c7:19:06:
99:fc:36:e6:ed:a0:f8:0a:68:c2:4d:78:ea:78:77:
a7:6c:45:4d:11:49:e5:c3:67:2c:6f:a1:46:e5:c4:
bd:b6:62:23:3b:a0:bc:a0:d7:ab:40:d8:38:09:fd:
8e:e7:df:d4:3f:f2:7e:d7:df:98:37:21:84:19:60:
28:99:9c:82:8a:18:5f:57:08:9a:3b:3a:c2:5a:84:
52:69:c5:fd:1f:c1:30:0a:63:dc:5d:79:bc:9a:73:
4a:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:40:F0:DC:4B:51:8D:3D:15:B1:47:FD:5C:9B:1C:D1:1D:C2:8B:E6
X509v3 Authority Key Identifier:
keyid:D9:9A:47:CD:C8:9F:46:34:2F:90:B0:DA:3C:30:D9:EC:5F:D6:32:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ZpHzcifRjQvkLDaPDDZ7F_WMjg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d30eef-495e-43bd-919c-a2a0e2db49d0/1/20Dw3EtRjT0VsUf9XJsc0R3Ci-Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d30eef-495e-43bd-919c-a2a0e2db49d0/1/2ZpHzcifRjQvkLDaPDDZ7F_WMjg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.32.32.0/19
Signature Algorithm: sha256WithRSAEncryption
92:d4:9b:ba:48:93:84:4d:81:6a:1c:a3:25:d4:92:d3:83:ad:
14:db:11:0d:99:c9:ff:b1:a7:1a:0f:c3:41:aa:c5:b3:50:10:
d9:59:ed:3e:34:ff:7f:75:bc:90:c8:63:16:39:54:97:91:e3:
6d:b2:ba:31:0f:67:17:cd:a6:6d:3d:59:04:97:5d:f5:99:9b:
36:cf:7f:ef:fe:37:7f:f0:6a:72:7c:59:c9:40:0b:df:dc:4e:
44:8e:3a:a0:46:99:9c:dc:60:3f:9a:c6:69:08:6d:1a:1e:37:
e6:71:38:a9:1d:4f:03:1c:60:8e:6b:ff:fb:e1:ba:c6:db:4f:
e2:8a:77:3f:3a:65:48:5d:9e:ef:c9:38:2d:c4:72:25:55:0a:
18:ce:c6:2a:07:31:c8:23:b6:73:78:c9:04:50:e8:69:f6:8d:
fe:3a:55:80:6a:10:2d:c4:f3:40:23:34:5b:c3:ce:71:13:eb:
c7:fd:83:14:19:12:b5:65:bd:16:4d:2f:13:48:6d:7a:36:00:
ae:4d:58:53:64:30:e8:d2:da:b6:79:51:03:5d:82:19:9b:64:
6f:99:82:1c:e4:32:0f:0a:23:b3:df:63:e5:f4:48:8e:92:08:
a8:b4:de:a2:11:82:c7:ef:10:c9:7e:8c:34:74:78:b3:c6:4e:
a2:d0:69:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:09 2025 by rpki-client on console.sobornost.net