Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/2cf81e-2877-4dcf-a8e1-89a4f2c01fa4/1/e05pM1Ov-13_Q4Vwu9OVwHfK41Y.roa
File: e05pM1Ov-13_Q4Vwu9OVwHfK41Y.roa (raw, json)
Hash identifier: OTFzove1jz1EUSwlVXJh+SC6mpl5u21u13cgxRp4F74=
Subject key identifier: 7B:4E:69:33:53:AF:FB:5D:FF:43:85:70:BB:D3:95:C0:77:CA:E3:56
Certificate issuer: /CN=907b9d22c4730d56b62a4bedca00d9d6c44bd56f
Certificate serial: 9070A0
Authority key identifier: 90:7B:9D:22:C4:73:0D:56:B6:2A:4B:ED:CA:00:D9:D6:C4:4B:D5:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kHudIsRzDVa2KkvtygDZ1sRL1W8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/2cf81e-2877-4dcf-a8e1-89a4f2c01fa4/1/e05pM1Ov-13_Q4Vwu9OVwHfK41Y.roa
Signing time: Sat 01 Jan 2022 01:03:25 +0000
ROA not before: Sat 01 Jan 2022 01:03:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50340
IP address blocks: 195.96.154.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9466016 (0x9070a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=907b9d22c4730d56b62a4bedca00d9d6c44bd56f
Validity
Not Before: Jan 1 01:03:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7b4e693353affb5dff438570bbd395c077cae356
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:55:22:61:b2:41:fc:06:0f:b2:c9:42:d3:62:
cc:26:e0:75:0f:d0:10:61:a5:22:99:7f:44:a2:be:
33:7b:62:d5:61:4d:6a:d2:a9:f8:aa:36:c5:0a:d9:
56:57:58:a9:92:d4:31:9c:a1:07:23:34:65:94:95:
cb:de:f4:bb:3b:ae:82:46:24:fd:34:08:60:b5:e6:
72:d9:5d:74:3f:09:54:e9:f7:06:7f:8f:ea:5b:7f:
7b:d1:e6:79:88:22:26:3f:43:33:ae:f8:45:81:6a:
6b:90:fa:e3:98:4a:7e:0c:21:8e:66:43:11:ff:cb:
98:d3:fd:a0:bb:bb:f9:38:a1:ac:60:cf:8f:6a:a2:
94:49:b2:f6:10:87:10:77:26:f3:73:1a:26:fa:71:
e0:a0:30:2b:87:80:a0:2f:6e:4b:e0:22:eb:60:a2:
f9:e0:fd:31:f4:f8:0a:a0:ba:7d:58:1b:2e:a1:0b:
33:bd:0a:7c:5d:07:df:2b:3d:a9:d8:4e:f0:47:5e:
73:7c:c6:60:26:c1:32:7c:9b:6b:10:f7:f6:1a:1c:
4e:85:1e:6a:8d:62:b7:21:38:17:55:c0:ff:c6:46:
d3:5b:3b:78:66:25:b5:de:5b:b4:39:5d:20:18:e4:
bc:a6:bf:21:a8:80:e9:f7:da:d1:dc:1e:03:45:95:
a2:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:4E:69:33:53:AF:FB:5D:FF:43:85:70:BB:D3:95:C0:77:CA:E3:56
X509v3 Authority Key Identifier:
keyid:90:7B:9D:22:C4:73:0D:56:B6:2A:4B:ED:CA:00:D9:D6:C4:4B:D5:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kHudIsRzDVa2KkvtygDZ1sRL1W8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/2cf81e-2877-4dcf-a8e1-89a4f2c01fa4/1/e05pM1Ov-13_Q4Vwu9OVwHfK41Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/2cf81e-2877-4dcf-a8e1-89a4f2c01fa4/1/kHudIsRzDVa2KkvtygDZ1sRL1W8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.96.154.0/24
Signature Algorithm: sha256WithRSAEncryption
68:50:da:10:f0:64:c0:da:49:75:b9:72:62:f5:ad:4c:ff:19:
cf:4f:c0:89:c5:eb:3f:73:ed:d6:81:15:21:3d:da:21:bc:23:
08:a0:d7:d4:92:ec:e8:12:5e:f4:ab:1a:78:49:37:b2:ff:e5:
c6:45:ff:81:1b:b6:04:4c:dd:1f:16:93:6f:e9:31:19:a9:2d:
fb:53:5d:28:64:8b:14:29:b5:4a:55:3e:21:33:24:c0:64:63:
b3:42:7b:85:ad:8e:b2:cb:d9:6e:42:f4:4d:94:37:98:78:72:
d6:35:94:de:35:9d:9c:67:8f:fe:6a:3c:89:48:8f:4e:26:5f:
f3:a4:a1:86:df:56:4b:b6:a3:c4:ee:f1:fe:10:e8:ba:c5:2d:
c4:fe:78:c7:81:6a:d2:2b:fd:a2:86:99:6c:5c:2b:ce:9e:b6:
a6:b8:1a:9c:ac:56:6e:26:a6:d0:8c:e1:4f:2f:03:bd:38:84:
b2:82:ab:0e:74:b9:66:f5:2e:df:7f:7b:8a:ca:b7:fc:bc:22:
8a:d6:ba:c9:6f:97:29:20:8a:3b:1e:97:31:71:0a:9b:bd:30:
e0:c3:de:a7:37:b9:3c:b4:0f:31:26:41:8b:98:52:d3:e8:7d:
bb:6c:42:07:4a:fa:03:98:5e:fd:4f:b5:ca:97:e1:85:83:51:
a4:6e:59:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:12:56 2025 by rpki-client