Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/a49102-0612-47a0-8117-cb1125007dfb/1/2GPjrPkEX8fd51Q66G_b08juTNw.roa
File: 2GPjrPkEX8fd51Q66G_b08juTNw.roa (raw, json)
Hash identifier: UhpRqUo4jtV55K8Qk5QO6RlfoY6/8VXKeeFYwXcZhKc=
Subject key identifier: D8:63:E3:AC:F9:04:5F:C7:DD:E7:54:3A:E8:6F:DB:D3:C8:EE:4C:DC
Certificate issuer: /CN=94846741139263388d984db1e97e031669c6486e
Certificate serial: 01857039926DD9DBF17563C1CF62FC9E4C9F
Authority key identifier: 94:84:67:41:13:92:63:38:8D:98:4D:B1:E9:7E:03:16:69:C6:48:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lIRnQROSYziNmE2x6X4DFmnGSG4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/a49102-0612-47a0-8117-cb1125007dfb/1/2GPjrPkEX8fd51Q66G_b08juTNw.roa
Signing time: Mon 02 Jan 2023 02:04:59 +0000
ROA not before: Mon 02 Jan 2023 02:04:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 400377
IP address blocks: 195.190.139.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:39:92:6d:d9:db:f1:75:63:c1:cf:62:fc:9e:4c:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94846741139263388d984db1e97e031669c6486e
Validity
Not Before: Jan 2 02:04:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d863e3acf9045fc7dde7543ae86fdbd3c8ee4cdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:36:23:31:00:0e:7d:27:0e:9b:c0:0c:cc:7e:
d6:3e:b8:c0:2d:05:99:e8:ab:4b:a8:c4:94:fd:e1:
68:73:90:84:1f:38:32:9c:ab:b8:df:bc:b8:2f:80:
3f:96:74:0b:f0:51:22:0c:01:11:c8:ba:a8:14:df:
42:32:ce:c8:ec:87:e3:26:56:26:f7:b7:d8:4c:dc:
65:c1:40:3a:9a:75:a2:1a:31:d8:91:0c:c6:1d:06:
ea:f8:68:a5:7d:3b:17:5f:c6:10:25:38:54:35:94:
56:c9:1f:24:d6:87:7c:00:86:35:a7:87:fa:73:df:
a3:51:3a:bb:53:36:f6:18:91:47:96:b9:0f:46:6f:
57:df:68:6c:ce:0f:97:af:ff:a4:3e:d1:b2:35:36:
a9:4a:1a:bf:d6:af:43:c9:9e:5a:3b:3b:a4:e2:74:
7a:aa:7c:60:a0:2d:b8:6f:4f:ff:b5:f3:60:19:31:
b1:a1:0f:46:55:42:df:de:36:b8:90:22:13:a0:29:
34:9a:55:54:22:0e:03:e2:e4:c8:54:f0:f4:dc:92:
b4:52:8a:73:88:a3:5e:13:0f:b4:16:8b:9b:ef:32:
1d:b1:92:80:cd:34:71:e8:bb:f8:c1:e1:de:49:ca:
1c:22:3c:7e:f4:9d:5c:4e:9b:41:64:2f:c7:a8:46:
ad:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:63:E3:AC:F9:04:5F:C7:DD:E7:54:3A:E8:6F:DB:D3:C8:EE:4C:DC
X509v3 Authority Key Identifier:
keyid:94:84:67:41:13:92:63:38:8D:98:4D:B1:E9:7E:03:16:69:C6:48:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lIRnQROSYziNmE2x6X4DFmnGSG4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a49102-0612-47a0-8117-cb1125007dfb/1/2GPjrPkEX8fd51Q66G_b08juTNw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a49102-0612-47a0-8117-cb1125007dfb/1/lIRnQROSYziNmE2x6X4DFmnGSG4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.190.139.0/24
Signature Algorithm: sha256WithRSAEncryption
22:bf:23:95:2c:8c:cc:fa:ea:80:92:63:bb:da:cf:c2:25:ec:
31:07:3f:8d:32:c7:19:62:9d:df:84:ca:e7:73:4d:fd:e5:4c:
ea:50:d5:24:f8:a4:5f:49:ae:1f:22:a0:bf:3c:71:1a:8c:9c:
e0:66:75:0d:3a:38:82:c5:21:f4:31:75:d7:ba:8b:82:a7:e0:
ef:3d:4a:7e:2b:6b:8c:88:39:24:d1:24:59:aa:c9:19:1b:94:
fb:de:cf:da:e1:9f:3a:32:e4:0b:dd:92:91:a5:bf:f7:e3:c5:
a8:b4:ce:f8:9b:84:60:94:a5:aa:c9:11:2f:18:ed:f2:66:f7:
fb:06:5d:cc:12:96:e0:0b:34:f0:ec:e6:e7:de:b9:77:a8:70:
12:64:e4:eb:5e:c0:6c:d7:d9:15:9a:f3:ac:bb:2f:d8:67:48:
44:f5:5e:9e:1f:dc:63:c4:bc:72:47:8d:89:71:42:09:3d:a9:
46:7d:c0:c8:91:3b:25:ae:18:e3:0e:ce:4d:fb:26:18:62:df:
30:68:bb:35:b2:44:ec:f5:48:bf:96:93:15:54:56:8a:30:22:
12:fd:56:0a:3e:97:70:8d:a5:bc:a3:20:e6:98:1d:e0:59:f8:
29:0f:99:99:db:46:64:d3:e3:b1:c3:68:0d:4e:69:8e:01:72:
40:ed:2e:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:02:43 2025 by rpki-client