Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/1cd683-3105-4b31-927e-f35845bac915/1/eAoQif0mp2QUao1a1-nRLUnSS28.roa
File: eAoQif0mp2QUao1a1-nRLUnSS28.roa (raw, json)
Hash identifier: SqNK0F8RLBja6KNt7l26SibVXF8+9FiZvu7TgOwsCDA=
Subject key identifier: 78:0A:10:89:FD:26:A7:64:14:6A:8D:5A:D7:E9:D1:2D:49:D2:4B:6F
Certificate issuer: /CN=4b9d1ed66df01a1e4992a745ffdbbcd5a9e608cb
Certificate serial: 02F6D3B8
Authority key identifier: 4B:9D:1E:D6:6D:F0:1A:1E:49:92:A7:45:FF:DB:BC:D5:A9:E6:08:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S50e1m3wGh5JkqdF_9u81anmCMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/1cd683-3105-4b31-927e-f35845bac915/1/eAoQif0mp2QUao1a1-nRLUnSS28.roa
Signing time: Mon 23 May 2022 12:31:29 +0000
ROA not before: Mon 23 May 2022 12:31:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35782
IP address blocks: 195.10.202.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 49730488 (0x2f6d3b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b9d1ed66df01a1e4992a745ffdbbcd5a9e608cb
Validity
Not Before: May 23 12:31:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=780a1089fd26a764146a8d5ad7e9d12d49d24b6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:6e:8f:17:ad:19:e5:c2:3d:50:6a:c9:c7:f3:
cc:6e:8b:52:b7:4d:fa:52:41:76:00:ec:45:92:a9:
37:32:b7:0a:5e:d8:74:1b:c3:86:f9:bb:5b:32:1f:
b4:32:3e:07:db:ee:5b:dd:39:57:b1:8f:60:67:8c:
64:51:5a:d7:56:2f:69:43:07:3c:32:df:16:3e:f5:
61:ec:46:34:f1:a9:a1:0d:98:13:7f:a8:c0:b2:0d:
bf:36:b0:f2:18:8d:95:6f:66:0e:72:03:31:8d:e1:
5f:36:86:8e:c8:7f:ef:21:59:28:72:d3:39:1f:bc:
2b:af:68:5a:8c:2d:63:c2:ef:7a:31:a3:68:ef:2a:
38:b1:54:8c:bc:52:23:f8:b9:8f:7d:5e:a4:55:81:
ec:36:7e:b5:99:20:3d:b4:67:a1:c4:c0:85:75:5e:
93:1d:38:87:a1:92:f5:51:4d:04:e3:d5:f2:94:e1:
b0:61:5e:e2:40:f9:5e:3e:68:1e:6c:56:71:54:8b:
3e:7a:12:d4:45:d6:8b:d2:58:15:14:f7:5e:e1:7a:
9a:61:d8:64:0a:42:a3:2a:6d:37:64:d8:e4:34:3a:
1d:34:0f:bf:6d:54:bb:39:f8:d1:06:d4:26:dd:a1:
12:e8:09:96:3a:ac:2f:64:ad:61:aa:27:61:a3:a7:
5a:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:0A:10:89:FD:26:A7:64:14:6A:8D:5A:D7:E9:D1:2D:49:D2:4B:6F
X509v3 Authority Key Identifier:
keyid:4B:9D:1E:D6:6D:F0:1A:1E:49:92:A7:45:FF:DB:BC:D5:A9:E6:08:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S50e1m3wGh5JkqdF_9u81anmCMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/1cd683-3105-4b31-927e-f35845bac915/1/eAoQif0mp2QUao1a1-nRLUnSS28.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/1cd683-3105-4b31-927e-f35845bac915/1/S50e1m3wGh5JkqdF_9u81anmCMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.10.202.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:c9:9e:f2:f8:5b:2e:fb:90:e3:d8:b8:c1:07:28:11:a5:00:
5c:66:eb:30:08:74:31:36:df:cc:83:f1:11:eb:fd:33:37:77:
c0:12:10:ce:7e:0a:de:db:f8:ea:d9:30:32:ea:4a:53:d7:2c:
cf:83:33:44:b1:3a:51:4e:a0:9c:f6:1f:e9:84:00:d5:1c:79:
49:f4:2e:a9:8f:05:56:fe:e9:78:79:27:73:0d:dd:d7:9b:0e:
49:c2:43:b3:38:d5:93:c5:be:d2:f5:91:7b:12:aa:6c:23:55:
e6:07:e8:4c:ab:02:1f:4e:25:ad:8a:b2:47:89:80:83:3a:21:
ce:6c:b2:d5:0f:37:90:74:ca:c5:45:d8:a9:91:75:1b:aa:50:
49:79:0b:0b:28:4b:26:74:b1:b7:52:39:a7:d9:4b:ec:fb:fb:
63:33:d6:bf:55:98:a0:a3:35:38:c3:09:8e:cb:4c:ff:6f:06:
61:24:fd:bf:d6:4d:b8:ad:55:24:78:ba:d8:3d:1f:b2:68:f2:
ad:66:23:24:46:70:ee:14:68:81:c9:e7:ed:c2:d7:21:4c:3a:
1f:a2:0f:88:40:fb:81:a5:eb:a4:9b:ee:d4:35:26:cb:1b:a4:
f4:b4:a1:3e:ca:b9:af:ca:c8:d2:e1:9f:d5:a9:9c:18:8d:73:
f2:e5:f9:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:55:22 2025 by rpki-client