Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/dd09dc-2472-4517-9e2d-ea412f21e230/1/Fz9hTfFHhAMq4tYm7nsQNjhQYUg.roa
File: Fz9hTfFHhAMq4tYm7nsQNjhQYUg.roa (raw, json)
Hash identifier: zJnW8DaIWc1dq7ayUKVLGQZdvdGjuRWFC+qwv53W7mg=
Subject key identifier: 17:3F:61:4D:F1:47:84:03:2A:E2:D6:26:EE:7B:10:36:38:50:61:48
Certificate issuer: /CN=aea03201cda6a8adbde4fe8046ec65f96ac6a96c
Certificate serial: 0195B7BCAB483BFD93DAC1C7079647306D8B
Authority key identifier: AE:A0:32:01:CD:A6:A8:AD:BD:E4:FE:80:46:EC:65:F9:6A:C6:A9:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rqAyAc2mqK295P6ARuxl-WrGqWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/dd09dc-2472-4517-9e2d-ea412f21e230/1/Fz9hTfFHhAMq4tYm7nsQNjhQYUg.roa
Signing time: Fri 21 Mar 2025 08:05:49 +0000
ROA not before: Fri 21 Mar 2025 08:05:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47274
IP address blocks: 195.62.80.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:b7:bc:ab:48:3b:fd:93:da:c1:c7:07:96:47:30:6d:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aea03201cda6a8adbde4fe8046ec65f96ac6a96c
Validity
Not Before: Mar 21 08:05:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=173f614df14784032ae2d626ee7b103638506148
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:11:97:c8:5e:39:3a:34:d2:9d:2f:2b:aa:bf:
35:71:a8:47:38:66:65:00:77:68:6b:8a:1e:22:f9:
dc:64:ed:4d:a4:ec:85:46:f1:83:e1:57:ad:a8:06:
09:c3:4a:2f:c1:f3:fd:aa:ff:ba:a9:c0:3f:c3:36:
2d:1b:d3:4f:8b:41:ff:9c:67:4a:2d:9a:7f:a3:0c:
c9:cb:c9:f1:ae:cd:5a:7e:cd:22:61:51:97:92:c4:
56:ff:8f:4a:ad:c9:01:49:eb:d6:49:f8:ab:ae:f5:
60:1a:48:4e:4e:13:8c:73:db:a2:d2:ba:0e:85:84:
c6:39:75:c4:76:1a:3f:f4:a8:0b:0b:49:23:16:1c:
65:86:b7:40:fb:11:04:bd:3c:bc:c9:94:bf:a0:d9:
35:c8:70:98:46:d2:bc:02:3c:b5:8d:1e:59:06:34:
25:2f:89:56:75:24:e2:c0:53:56:30:34:32:f7:3d:
42:69:f6:36:01:ed:55:04:32:01:ab:18:11:50:8a:
77:d5:6a:0a:ec:4a:a9:74:04:d1:a1:df:bf:d1:fa:
0a:d5:94:b8:8f:ce:83:3b:9c:e1:b9:85:10:70:25:
8d:11:9f:2d:76:ec:6d:34:96:b8:78:22:cd:10:48:
0a:ea:f4:96:d3:9f:cc:b5:74:42:c4:a6:06:22:0a:
e7:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:3F:61:4D:F1:47:84:03:2A:E2:D6:26:EE:7B:10:36:38:50:61:48
X509v3 Authority Key Identifier:
keyid:AE:A0:32:01:CD:A6:A8:AD:BD:E4:FE:80:46:EC:65:F9:6A:C6:A9:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rqAyAc2mqK295P6ARuxl-WrGqWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/dd09dc-2472-4517-9e2d-ea412f21e230/1/Fz9hTfFHhAMq4tYm7nsQNjhQYUg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/dd09dc-2472-4517-9e2d-ea412f21e230/1/rqAyAc2mqK295P6ARuxl-WrGqWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.62.80.0/23
Signature Algorithm: sha256WithRSAEncryption
59:71:ad:ed:88:df:8e:d6:49:3c:c0:53:2b:ff:cc:9d:fa:18:
13:43:b7:d4:df:9c:7b:6f:8b:61:0d:e0:60:2e:e3:3b:4a:e9:
50:76:31:8e:2c:fd:37:38:36:ea:21:3a:56:e1:d9:3d:c4:73:
76:08:0d:c7:6b:6b:70:0d:56:33:a4:5c:e1:75:5b:c5:15:20:
0e:8d:82:f6:37:4b:08:31:fe:fc:6d:c5:db:52:5b:58:ca:44:
57:0f:b4:62:93:66:89:da:2f:a2:01:ad:c4:66:81:bd:f2:06:
3a:f4:4b:d9:8c:0c:9c:74:72:44:72:b7:a6:1f:e5:39:a6:03:
b8:27:2d:f4:d6:9d:5d:2b:12:6b:5d:86:da:24:a7:27:a3:71:
3b:46:d5:5a:e7:16:ee:fb:5b:ab:54:08:d9:e9:66:25:0c:d0:
4c:0b:2e:ea:09:9c:c1:d2:e5:76:7a:25:69:8e:2c:6e:98:3b:
3a:04:0d:37:8f:a5:8c:a9:47:93:b0:2f:cf:b2:d2:f5:51:32:
d3:9e:1a:65:31:ca:45:8a:a4:61:36:b5:f7:4d:9f:e6:a6:c4:
df:c0:51:44:75:10:d9:56:63:f9:c2:77:e8:b3:2a:43:7a:8c:
06:ab:48:1a:6c:2e:9c:f9:74:6d:42:e4:87:71:9c:c7:73:bd:
f2:e9:b3:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 25 22:18:40 2025 by rpki-client on console.sobornost.net