Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/AqE-r-b2Os_yhkUikR6Ok3pHBlI.roa
File: AqE-r-b2Os_yhkUikR6Ok3pHBlI.roa (raw, json)
Hash identifier: g7FayHIWx87wQD/YlWVDh4+yYoWyDcQVZW6yrOVuNv4=
Subject key identifier: 02:A1:3E:AF:E6:F6:3A:CF:F2:86:45:22:91:1E:8E:93:7A:47:06:52
Certificate issuer: /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial: 0183EB0848F99536904C453D97BCBA2CB04C
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/AqE-r-b2Os_yhkUikR6Ok3pHBlI.roa
Signing time: Tue 18 Oct 2022 12:18:52 +0000
ROA not before: Tue 18 Oct 2022 12:18:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207459
IP address blocks: 195.206.234.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:eb:08:48:f9:95:36:90:4c:45:3d:97:bc:ba:2c:b0:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Validity
Not Before: Oct 18 12:18:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=02a13eafe6f63acff2864522911e8e937a470652
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:be:a6:c8:dc:25:91:09:3e:8a:60:6f:49:0e:
f5:33:01:6b:bf:58:0f:00:ec:86:e9:90:cf:69:b4:
23:48:fb:8f:21:a9:9f:96:d1:e3:3d:e7:c6:df:ce:
93:78:44:b8:32:e7:d2:17:40:a8:0c:04:c0:cf:7f:
71:8d:03:88:16:fb:0f:34:3a:ef:fe:a6:8c:b2:fb:
d6:2c:a7:d9:1a:44:94:cd:dd:7b:db:48:99:11:05:
62:b9:d2:a3:2d:c6:c8:fd:8a:e4:9c:4c:7b:ba:82:
16:8e:71:48:f4:73:b3:b2:da:22:58:14:55:83:43:
ab:08:4c:24:23:16:d0:98:45:7c:4c:d0:c1:56:1b:
65:52:e9:e0:16:c1:6e:75:2a:c5:d2:ee:5a:00:5c:
7c:d0:af:5d:21:b0:c5:8c:57:e8:52:9b:0f:1b:f9:
b5:90:77:ce:06:d5:a7:37:67:69:13:68:0a:dc:2d:
df:16:29:34:fa:a1:ce:40:cd:c3:4c:c6:f9:2f:3b:
b0:3d:63:1f:c3:0b:ff:41:4e:2c:9e:c3:42:27:5d:
70:be:9b:1f:00:12:ed:6b:fb:4c:9f:63:cf:e2:a9:
98:3d:79:65:1b:7d:72:cd:68:14:b5:a5:f5:08:f3:
13:1a:20:62:c6:fe:de:6b:44:db:04:2d:05:2d:3c:
01:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:A1:3E:AF:E6:F6:3A:CF:F2:86:45:22:91:1E:8E:93:7A:47:06:52
X509v3 Authority Key Identifier:
keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/AqE-r-b2Os_yhkUikR6Ok3pHBlI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.206.234.0/24
Signature Algorithm: sha256WithRSAEncryption
c0:42:50:e6:1e:38:f2:06:ef:9a:f4:ec:fe:10:b2:8c:a5:5d:
0a:b3:da:dc:97:85:cc:5e:a6:82:df:d8:53:fb:de:22:2c:29:
f2:69:a5:f9:0f:d5:c4:73:fb:94:fc:2b:46:fe:2a:84:8a:19:
af:bd:41:26:db:62:33:21:da:cf:b6:17:18:96:31:f3:82:50:
f1:07:cb:d2:e6:e4:46:a0:89:45:7e:05:eb:7f:e9:ee:a1:40:
0f:59:68:71:35:29:0f:79:03:93:c6:46:26:3f:24:ae:b2:cc:
0e:2f:cb:3b:68:13:4d:88:fc:1f:b5:a3:21:f7:0b:16:33:d9:
0d:87:6c:21:2a:d8:6c:b3:4e:4f:40:ba:99:13:19:44:b5:20:
80:c1:66:8e:42:f0:85:6f:f2:c3:9d:a4:36:91:db:02:04:4d:
50:0d:06:5c:88:13:a2:59:f4:5c:af:80:f5:ab:83:a8:73:36:
af:7c:48:62:f2:e4:49:59:e5:dc:b7:7d:96:9a:e0:04:b7:a6:
30:7a:aa:c9:5a:38:8b:05:d6:6b:e1:25:da:2e:ba:8b:fa:81:
52:f5:d8:c7:7d:c1:df:fb:28:c1:6a:31:9c:7a:9d:c2:c4:94:
2b:d4:5d:bc:17:45:bb:fd:11:a4:85:8b:ac:3c:9b:cc:8e:1c:
07:c3:6e:58
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYPrCEj5lTaQTEU9l7y6LLBMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyZWQ0YTJmYjE4MGRmNWY5OWQ0YmY4Yzc3Y2M5YTA2ZWYy
NjA1OGMwHhcNMjIxMDE4MTIxODUyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMmExM2VhZmU2ZjYzYWNmZjI4NjQ1MjI5MTFlOGU5MzdhNDcwNjUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAor6myNwlkQk+imBvSQ71MwFrv1gP
AOyG6ZDPabQjSPuPIamfltHjPefG386TeES4MufSF0CoDATAz39xjQOIFvsPNDrv
/qaMsvvWLKfZGkSUzd1720iZEQViudKjLcbI/YrknEx7uoIWjnFI9HOzstoiWBRV
g0OrCEwkIxbQmEV8TNDBVhtlUungFsFudSrF0u5aAFx80K9dIbDFjFfoUpsPG/m1
kHfOBtWnN2dpE2gK3C3fFik0+qHOQM3DTMb5LzuwPWMfwwv/QU4snsNCJ11wvpsf
ABLta/tMn2PP4qmYPXllG31yzWgUtaX1CPMTGiBixv7ea0TbBC0FLTwB6wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAKhPq/m9jrP8oZFIpEejpN6RwZSMB8GA1UdIwQY
MBaAFILtSi+xgN9fmdS/jHfMmgbvJgWMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3UxS0w3R0EzMS1aMUwtTWQ4eWFCdThtQll3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS8wMzAxYmMtYzdmZS00NmU5LWI3YTAt
NDUyNmY2MjYzYmNlLzEvQXFFLXItYjJPc195aGtVaWtSNk9rM3BIQmxJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS8wMzAxYmMtYzdmZS00NmU5LWI3YTAtNDUyNmY2MjYzYmNl
LzEvZ3UxS0w3R0EzMS1aMUwtTWQ4eWFCdThtQll3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw87qMA0G
CSqGSIb3DQEBCwUAA4IBAQDAQlDmHjjyBu+a9Oz+ELKMpV0Ks9rcl4XMXqaC39hT
+94iLCnyaaX5D9XEc/uU/CtG/iqEihmvvUEm22IzIdrPthcYljHzglDxB8vS5uRG
oIlFfgXrf+nuoUAPWWhxNSkPeQOTxkYmPySusswOL8s7aBNNiPwftaMh9wsWM9kN
h2whKthss05PQLqZExlEtSCAwWaOQvCFb/LDnaQ2kdsCBE1QDQZciBOiWfRcr4D1
q4OoczavfEhi8uRJWeXct32WmuAEt6YweqrJWjiLBdZr4SXaLrqL+oFS9djHfcHf
+yjBajGcep3CxJQr1F28F0W7/RGkhYusPJvMjhwHw25Y
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:36:07 2025 by rpki-client