Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/249bca-68fe-4cd5-adfb-64e57838af60/1/zgYuqghaMuCTrmMFjqhkua5Hekw.roa
File: zgYuqghaMuCTrmMFjqhkua5Hekw.roa (raw, json)
Hash identifier: bvDfGxTQqRlbfjesjPyVNJLRrYncmDJhBxh4CPllrZo=
Subject key identifier: CE:06:2E:AA:08:5A:32:E0:93:AE:63:05:8E:A8:64:B9:AE:47:7A:4C
Certificate issuer: /CN=4f9c7182fb49b2d98e06038cb4f8dc21c7171b85
Certificate serial: 037D7D88
Authority key identifier: 4F:9C:71:82:FB:49:B2:D9:8E:06:03:8C:B4:F8:DC:21:C7:17:1B:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5xxgvtJstmOBgOMtPjcIccXG4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/249bca-68fe-4cd5-adfb-64e57838af60/1/zgYuqghaMuCTrmMFjqhkua5Hekw.roa
Signing time: Sat 01 Jan 2022 09:58:06 +0000
ROA not before: Sat 01 Jan 2022 09:58:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 196924
IP address blocks: 195.191.126.0/24 maxlen: 24
195.191.127.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58555784 (0x37d7d88)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9c7182fb49b2d98e06038cb4f8dc21c7171b85
Validity
Not Before: Jan 1 09:58:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ce062eaa085a32e093ae63058ea864b9ae477a4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:3e:5d:34:28:96:ab:5f:f6:30:a0:1a:9f:97:
d2:27:2d:1a:24:8a:69:e2:15:cf:78:cd:de:c4:1a:
c1:55:8b:b5:d1:b3:ac:7e:62:e4:e7:18:00:52:0a:
41:95:a5:ea:22:dc:93:0c:d0:fd:ea:8d:be:c3:a2:
c3:38:56:8c:b4:66:9e:ba:2a:ea:46:06:d4:cb:f5:
f9:7a:24:69:d4:1b:03:24:9c:5e:b7:ec:58:32:cd:
a1:dc:30:e2:9c:79:0c:7b:30:f9:d4:43:e8:59:f1:
71:14:19:73:4a:e9:5c:b5:18:5c:c0:51:34:ea:04:
69:0f:28:e1:d3:ee:ca:25:d7:aa:23:4c:9e:29:f6:
29:e6:97:0f:d0:76:5a:bd:f1:29:a5:26:3c:a4:bc:
bb:32:78:15:ac:73:3a:b8:7a:7b:61:cd:87:a6:cf:
a1:11:8f:0f:0a:68:88:09:bd:4a:7b:69:27:be:f7:
ad:c4:ac:8b:c3:e1:29:7b:33:14:f9:4a:1c:2c:79:
63:06:67:c9:9d:cd:84:0a:6e:dc:d5:ff:11:d5:b4:
01:ce:5e:6a:b7:15:dd:8a:7d:00:0e:8d:55:81:f3:
4d:56:90:b6:13:94:ae:61:26:29:13:3c:7b:90:4f:
f1:75:24:99:c9:97:3e:0a:ca:e1:f6:01:6b:9a:5e:
75:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:06:2E:AA:08:5A:32:E0:93:AE:63:05:8E:A8:64:B9:AE:47:7A:4C
X509v3 Authority Key Identifier:
keyid:4F:9C:71:82:FB:49:B2:D9:8E:06:03:8C:B4:F8:DC:21:C7:17:1B:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5xxgvtJstmOBgOMtPjcIccXG4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/249bca-68fe-4cd5-adfb-64e57838af60/1/zgYuqghaMuCTrmMFjqhkua5Hekw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/249bca-68fe-4cd5-adfb-64e57838af60/1/T5xxgvtJstmOBgOMtPjcIccXG4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.191.126.0/23
Signature Algorithm: sha256WithRSAEncryption
09:e5:4e:41:f5:41:6e:db:9b:d8:8f:8b:ac:c1:3c:8d:58:61:
f5:87:3e:6d:c3:c1:01:15:30:8a:eb:f7:a1:62:20:98:f9:ac:
b6:bd:fa:1a:7f:dc:6f:3f:10:76:5e:7d:c1:5f:cc:29:fd:6c:
1e:c1:1d:96:c5:91:d5:66:82:6d:d6:11:d3:98:1e:74:f1:ad:
23:dc:18:4c:d5:69:95:84:52:1c:d7:62:14:2e:74:9f:b9:9b:
3e:e1:df:65:7e:6a:10:e2:05:ad:9e:5c:e2:83:81:d0:0a:18:
b1:93:5d:8a:ea:92:0b:92:2c:54:9b:dd:dc:c6:cd:31:ca:4e:
66:1a:01:0e:7f:e2:aa:b1:49:84:d3:9a:36:a3:17:52:4d:53:
6e:3d:9d:df:53:15:38:6a:1f:4b:d6:23:fb:8d:20:1b:67:90:
7d:40:87:6a:15:ca:19:64:66:3d:be:0c:71:38:ee:ba:52:2d:
f4:62:6f:12:86:3b:72:f4:1a:f7:3c:58:a4:b9:77:41:09:53:
73:6d:df:d7:7a:4f:34:9c:44:eb:34:f2:66:cb:b5:86:1d:53:
20:44:47:d0:2a:ec:f2:a2:8c:bd:33:74:6f:30:73:c9:0c:71:
8a:27:c6:fc:41:d7:e6:67:8c:10:20:9d:11:00:af:b6:74:07:
cb:03:a0:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:22:02 2025 by rpki-client