Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/JCe7UmV6f4hP15X4smOcCYZv2xs.roa
File: JCe7UmV6f4hP15X4smOcCYZv2xs.roa (raw, json)
Hash identifier: SZ+O96rEdPgSiFZsmgGoUfQmIBFS0TKzLQTnyh84nD4=
Subject key identifier: 24:27:BB:52:65:7A:7F:88:4F:D7:95:F8:B2:63:9C:09:86:6F:DB:1B
Certificate issuer: /CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
Certificate serial: 0934D48C
Authority key identifier: 08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/JCe7UmV6f4hP15X4smOcCYZv2xs.roa
Signing time: Sat 01 Jan 2022 12:58:49 +0000
ROA not before: Sat 01 Jan 2022 12:58:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42031
IP address blocks: 195.91.142.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 154457228 (0x934d48c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
Validity
Not Before: Jan 1 12:58:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2427bb52657a7f884fd795f8b2639c09866fdb1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:3f:58:e7:bb:54:80:79:aa:9b:cb:b5:a9:9c:
be:7c:9f:37:b2:46:a1:56:33:92:08:fd:44:b4:a7:
af:8f:97:91:5d:6a:9b:c6:b7:80:11:93:43:45:30:
1c:97:8b:8c:ac:86:d4:b4:25:9b:2d:0e:51:66:6e:
c7:1d:cc:c0:ff:99:6a:f5:b5:2a:c2:35:c0:09:69:
79:68:c1:7b:23:97:37:59:f0:e4:ff:9b:34:60:e6:
20:02:e1:c0:e7:fa:de:10:78:43:6b:6c:d7:be:71:
ea:70:c0:a1:b7:a2:b8:5c:5e:d0:3e:64:fb:c6:51:
07:98:b9:a0:d2:7b:b1:06:3a:86:a3:5b:b9:23:26:
40:9a:34:2d:32:fe:47:9d:d9:be:41:45:7f:2e:0e:
05:5c:8b:dd:db:67:4e:44:49:d5:68:e6:69:7b:78:
10:a3:9c:34:61:5e:56:4c:d1:5d:25:88:52:8e:6f:
f5:e8:c0:9c:d3:df:54:07:09:f7:38:48:b9:16:57:
c9:df:63:75:b7:e3:fa:ae:a8:75:cb:00:93:47:be:
5b:ef:3b:11:29:b4:ce:20:5f:f6:8c:4b:94:4a:a9:
2a:26:a2:84:f1:df:f9:75:6d:5b:0e:25:6e:ab:98:
83:bb:21:af:c6:5e:01:e9:f2:2c:a5:c2:1b:d1:39:
61:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:27:BB:52:65:7A:7F:88:4F:D7:95:F8:B2:63:9C:09:86:6F:DB:1B
X509v3 Authority Key Identifier:
keyid:08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/JCe7UmV6f4hP15X4smOcCYZv2xs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.91.142.0/23
Signature Algorithm: sha256WithRSAEncryption
cd:98:5c:b8:82:b8:63:29:1c:e8:7a:eb:d8:6b:ce:f8:6a:b7:
ff:b9:2d:4e:fb:af:22:e4:46:56:34:40:fb:3c:c5:07:55:50:
92:9d:5d:ab:99:09:de:d3:9f:25:55:cd:18:40:ea:69:1d:44:
a9:68:8b:67:45:b8:45:eb:ac:09:b0:ac:01:58:72:13:1f:5f:
cb:d9:dd:aa:c8:f4:e6:2b:eb:c5:59:d6:e9:36:07:b7:03:25:
04:44:86:64:dc:7a:72:28:85:3e:92:bb:e5:26:af:23:dc:4b:
d1:98:53:16:06:63:10:26:76:f0:ff:85:05:7b:9b:c4:4a:dc:
85:5f:31:bd:b6:94:28:e0:c9:c4:ad:3f:94:2d:52:3f:7b:b5:
07:82:9f:10:91:eb:5f:66:bf:fb:9f:e7:6a:f2:5c:ae:47:4e:
de:af:cd:d4:60:c4:86:1a:25:ac:7c:b5:91:08:65:a5:a7:a0:
93:67:53:38:a6:69:a6:1f:46:a7:98:77:72:8c:ac:ff:61:53:
1a:fc:06:19:c4:32:84:4a:f0:1e:96:fc:0d:97:9f:93:a1:c9:
b6:ad:1f:fe:a9:c0:7e:29:27:5c:2f:de:53:2b:a5:4a:7a:1a:
88:c4:f1:f4:2e:10:91:f3:2f:32:a0:fa:69:07:30:df:cd:ef:
5a:c6:51:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:41:02 2025 by rpki-client