Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/3aa0f5-eae5-49a3-8ee9-0df7df4d5b01/1/EQou6BPzQKkpgjTIlX9cVjZvh18.roa
File: EQou6BPzQKkpgjTIlX9cVjZvh18.roa (raw, json)
Hash identifier: 7YXYr+7MlXL1fllsaO5BCAQjfwm1sEvIt5Fslo91iWM=
Subject key identifier: 11:0A:2E:E8:13:F3:40:A9:29:82:34:C8:95:7F:5C:56:36:6F:87:5F
Certificate issuer: /CN=01292e03a731796e1d7b148b1dd235d144352f5d
Certificate serial: 0194221FEE8C2CF8E0B69B22F5569E8597EE
Authority key identifier: 01:29:2E:03:A7:31:79:6E:1D:7B:14:8B:1D:D2:35:D1:44:35:2F:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ASkuA6cxeW4dexSLHdI10UQ1L10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/3aa0f5-eae5-49a3-8ee9-0df7df4d5b01/1/EQou6BPzQKkpgjTIlX9cVjZvh18.roa
Signing time: Wed 01 Jan 2025 13:48:25 +0000
ROA not before: Wed 01 Jan 2025 13:48:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42337
IP address blocks: 195.96.153.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:ee:8c:2c:f8:e0:b6:9b:22:f5:56:9e:85:97:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01292e03a731796e1d7b148b1dd235d144352f5d
Validity
Not Before: Jan 1 13:48:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=110a2ee813f340a9298234c8957f5c56366f875f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:45:d3:c6:82:a8:02:f6:d0:61:52:cc:d2:bd:
0a:7e:4d:06:c0:cf:75:a2:bb:e8:1e:dd:da:86:69:
d0:de:c3:10:2f:12:be:d2:f6:e5:e5:90:d1:2d:16:
a1:56:79:c0:25:ea:aa:89:6e:13:97:28:4a:fe:11:
8b:2e:bc:14:40:2c:25:14:47:a5:7f:4d:27:41:0a:
0a:0c:a8:83:1b:47:81:57:22:b6:5a:52:47:0a:32:
49:61:df:07:d1:63:86:3a:16:27:d2:45:e2:2b:57:
7b:48:7f:8c:29:47:d9:6a:8f:b7:5c:44:fc:23:90:
7a:de:ba:08:19:a0:39:e3:61:48:a9:03:b4:72:d5:
00:f4:18:d6:18:40:29:33:6d:f2:7c:54:9b:06:10:
c9:02:02:1d:b2:5b:8d:c9:a1:cf:07:0f:9b:f7:f7:
ac:8c:9a:a0:69:39:0a:65:ad:df:2d:59:ee:04:49:
c3:c3:64:5a:2c:85:6c:96:99:70:dd:cf:a8:f9:fd:
2f:bf:6f:35:69:95:eb:d6:d0:dd:dc:a5:48:d6:0d:
15:bf:d1:85:00:20:a0:44:a9:a3:51:3c:64:5a:c2:
50:c5:ea:b9:a3:49:43:65:19:19:2a:7a:80:74:33:
d0:a7:e2:88:97:1f:a1:06:1b:7a:44:45:0c:6f:33:
b5:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:0A:2E:E8:13:F3:40:A9:29:82:34:C8:95:7F:5C:56:36:6F:87:5F
X509v3 Authority Key Identifier:
keyid:01:29:2E:03:A7:31:79:6E:1D:7B:14:8B:1D:D2:35:D1:44:35:2F:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ASkuA6cxeW4dexSLHdI10UQ1L10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/3aa0f5-eae5-49a3-8ee9-0df7df4d5b01/1/EQou6BPzQKkpgjTIlX9cVjZvh18.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/3aa0f5-eae5-49a3-8ee9-0df7df4d5b01/1/ASkuA6cxeW4dexSLHdI10UQ1L10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.96.153.0/24
Signature Algorithm: sha256WithRSAEncryption
52:1c:34:bd:0e:c3:cb:2c:05:0a:dc:40:45:d1:66:2d:b9:c0:
d9:76:16:55:5f:14:9a:3f:75:2a:34:9a:76:88:75:72:82:7e:
e6:9b:95:d8:9b:96:37:6b:28:2f:bc:a8:75:c3:e3:58:69:60:
db:e7:6b:59:a6:b8:35:34:63:c6:8f:43:d7:d8:b5:ee:c7:17:
0b:b1:cc:75:fa:44:e6:a0:be:5d:42:31:7e:8c:ee:1b:b0:70:
b3:0d:eb:b6:27:63:f9:e2:53:ae:77:51:7c:4a:d8:29:26:e3:
6b:75:46:10:32:27:39:8e:da:a7:f6:9e:58:87:37:57:84:0e:
74:59:ea:39:dc:ef:ae:43:21:77:47:59:04:1b:bf:8d:8f:c7:
03:43:60:ad:28:d9:6a:96:bd:fb:67:24:a9:31:4a:06:69:d0:
a8:59:ef:93:e4:79:9c:b6:3d:d5:1f:c6:48:61:f4:38:ee:82:
5a:bc:4b:60:34:05:7c:e8:03:03:4a:b4:3a:4c:71:bb:7e:45:
b4:ac:4c:5c:23:71:c9:c0:fc:bc:9f:0f:3b:67:84:84:62:e0:
87:1a:18:22:ff:b5:d2:2e:75:1d:ad:b8:11:d1:5d:51:d2:6f:
c0:dc:74:76:bd:2a:7e:fc:86:7e:93:c1:a5:57:a7:07:09:a7:
96:aa:17:d3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQiH+6MLPjgtpsi9VaehZfuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxMjkyZTAzYTczMTc5NmUxZDdiMTQ4YjFkZDIzNWQxNDQz
NTJmNWQwHhcNMjUwMTAxMTM0ODI1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMTBhMmVlODEzZjM0MGE5Mjk4MjM0Yzg5NTdmNWM1NjM2NmY4NzVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuEXTxoKoAvbQYVLM0r0Kfk0GwM91
orvoHt3ahmnQ3sMQLxK+0vbl5ZDRLRahVnnAJeqqiW4TlyhK/hGLLrwUQCwlFEel
f00nQQoKDKiDG0eBVyK2WlJHCjJJYd8H0WOGOhYn0kXiK1d7SH+MKUfZao+3XET8
I5B63roIGaA542FIqQO0ctUA9BjWGEApM23yfFSbBhDJAgIdsluNyaHPBw+b9/es
jJqgaTkKZa3fLVnuBEnDw2RaLIVslplw3c+o+f0vv281aZXr1tDd3KVI1g0Vv9GF
ACCgRKmjUTxkWsJQxeq5o0lDZRkZKnqAdDPQp+KIlx+hBht6REUMbzO1zwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBEKLugT80CpKYI0yJV/XFY2b4dfMB8GA1UdIwQY
MBaAFAEpLgOnMXluHXsUix3SNdFENS9dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVNrdUE2Y3hlVzRkZXhTTEhkSTEwVVExTDEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC8zYWEwZjUtZWFlNS00OWEzLThlZTkt
MGRmN2RmNGQ1YjAxLzEvRVFvdTZCUHpRS2twZ2pUSWxYOWNWalp2aDE4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC8zYWEwZjUtZWFlNS00OWEzLThlZTktMGRmN2RmNGQ1YjAx
LzEvQVNrdUE2Y3hlVzRkZXhTTEhkSTEwVVExTDEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw2CZMA0G
CSqGSIb3DQEBCwUAA4IBAQBSHDS9DsPLLAUK3EBF0WYtucDZdhZVXxSaP3UqNJp2
iHVygn7mm5XYm5Y3aygvvKh1w+NYaWDb52tZprg1NGPGj0PX2LXuxxcLscx1+kTm
oL5dQjF+jO4bsHCzDeu2J2P54lOud1F8StgpJuNrdUYQMic5jtqn9p5YhzdXhA50
Weo53O+uQyF3R1kEG7+Nj8cDQ2CtKNlqlr37ZySpMUoGadCoWe+T5Hmctj3VH8ZI
YfQ47oJavEtgNAV86AMDSrQ6THG7fkW0rExcI3HJwPy8nw87Z4SEYuCHGhgi/7XS
LnUdrbgR0V1R0m/A3HR2vSp+/IZ+k8GlV6cHCaeWqhfT
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:47 2025 by rpki-client on console.sobornost.net