Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/1-gshxtWdOLj6Bhob-jR390XvJMs.roa
File: 1-gshxtWdOLj6Bhob-jR390XvJMs.roa (raw, json)
Hash identifier: dBB2EEhSWFS0F5xkK0StIseu/fd8t0zEPOQGG/KRwzE=
Subject key identifier: FA:0B:21:C6:D5:9D:38:B8:FA:06:1A:1B:FA:34:77:F7:45:EF:24:CB
Certificate issuer: /CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Certificate serial: 0CC5EF3E
Authority key identifier: D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/1-gshxtWdOLj6Bhob-jR390XvJMs.roa
Signing time: Wed 06 Apr 2022 06:01:45 +0000
ROA not before: Wed 06 Apr 2022 06:01:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 399045
IP address blocks: 194.163.95.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 214298430 (0xcc5ef3e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Validity
Not Before: Apr 6 06:01:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fa0b21c6d59d38b8fa061a1bfa3477f745ef24cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c0:3b:e4:2a:11:b6:88:08:f5:a6:c1:f6:a1:
90:70:e3:5e:80:5f:74:d7:e9:af:4b:77:e0:e0:8b:
72:a4:72:53:1b:9f:46:54:83:0a:35:5f:43:f3:0b:
97:d9:21:37:13:1d:62:2c:7d:51:31:e9:16:aa:01:
aa:cd:f1:66:2b:86:37:3c:69:6e:20:f2:06:f6:bc:
8a:ec:fb:ae:4a:78:d0:36:19:cb:0c:12:58:2b:2c:
ca:74:88:fe:8e:8e:6b:05:e4:c0:93:aa:ae:64:20:
34:7b:77:5d:2d:52:06:93:4c:25:6d:a8:28:7a:67:
fd:34:d1:fb:49:a8:3a:41:40:2c:c2:3d:b0:de:cf:
7c:2f:cc:ba:f0:42:61:2e:0d:98:8e:7d:5b:c0:9e:
23:ff:44:18:a4:12:e4:3b:61:d8:f7:8a:13:26:bc:
f1:49:55:ee:64:d7:84:cb:47:30:f2:4b:68:ce:91:
d1:30:d7:17:7b:6f:b0:8c:9a:c4:51:ce:f0:86:f0:
61:ac:de:ff:e9:66:da:ab:3d:a6:4e:7e:0a:4f:0e:
55:9d:62:7f:89:1e:e9:2a:f4:e5:ef:e4:c7:d5:91:
23:41:26:29:14:f6:04:00:a5:69:3c:0a:cc:01:e9:
d4:77:5a:96:6f:a2:bd:1f:bd:93:a8:91:08:01:b2:
97:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:0B:21:C6:D5:9D:38:B8:FA:06:1A:1B:FA:34:77:F7:45:EF:24:CB
X509v3 Authority Key Identifier:
keyid:D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/1-gshxtWdOLj6Bhob-jR390XvJMs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.163.95.0/24
Signature Algorithm: sha256WithRSAEncryption
40:b8:57:ae:91:49:0e:4c:09:be:ca:5c:57:7a:11:c4:fb:5e:
be:22:8e:63:b2:1f:1a:36:5b:c0:b1:3d:f6:58:fa:eb:a0:44:
df:41:b3:74:bf:0d:5d:2b:03:57:e5:14:d9:31:4c:72:47:89:
ee:64:d8:32:69:df:ba:0d:f0:ba:11:3f:44:37:d9:12:69:08:
b1:74:95:5a:dd:96:df:87:fe:9f:0a:d8:8a:8a:83:60:29:a4:
9b:b5:0a:02:a2:17:15:d9:f9:be:11:6f:8a:b8:fa:9a:3b:ab:
28:26:44:a7:50:fb:ec:9a:ec:51:2b:62:11:30:75:6d:34:87:
21:dd:25:e3:1f:c9:86:b7:14:24:ae:df:54:0e:f1:e9:6d:e5:
b7:a7:3a:e5:f7:dd:89:d6:46:67:58:e8:80:e7:5e:62:3d:7b:
d7:05:64:4f:28:58:9d:f2:20:0b:72:9f:dd:d4:69:cc:40:77:
ee:80:30:b2:d0:63:68:6e:59:b3:b0:f0:9e:e2:31:32:70:f3:
ab:85:11:f7:83:2b:ef:a7:ec:e2:89:6f:49:66:71:cf:c0:91:
d1:01:ec:4d:cf:18:0b:e6:58:20:d1:02:b7:9f:8e:b4:89:0f:
46:b2:8b:84:5c:ca:bf:ba:ea:9c:e4:2e:4f:64:f6:c1:6a:d1:
de:25:b6:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:00:37 2025 by rpki-client