Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/a49102-0612-47a0-8117-cb1125007dfb/1/4KqRmWKB1pH2zdmH1eQJxDywbFQ.roa
File: 4KqRmWKB1pH2zdmH1eQJxDywbFQ.roa (raw, json)
Hash identifier: RcJiuxoZdMPcBI57HWU9qX9mvNTEIkmscCxUd4vUBPs=
Subject key identifier: E0:AA:91:99:62:81:D6:91:F6:CD:D9:87:D5:E4:09:C4:3C:B0:6C:54
Certificate issuer: /CN=94846741139263388d984db1e97e031669c6486e
Certificate serial: 0185703990AA838749FD7B4E1A6AA9C1647B
Authority key identifier: 94:84:67:41:13:92:63:38:8D:98:4D:B1:E9:7E:03:16:69:C6:48:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lIRnQROSYziNmE2x6X4DFmnGSG4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/a49102-0612-47a0-8117-cb1125007dfb/1/4KqRmWKB1pH2zdmH1eQJxDywbFQ.roa
Signing time: Mon 02 Jan 2023 02:04:58 +0000
ROA not before: Mon 02 Jan 2023 02:04:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209279
IP address blocks: 195.182.38.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:39:90:aa:83:87:49:fd:7b:4e:1a:6a:a9:c1:64:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94846741139263388d984db1e97e031669c6486e
Validity
Not Before: Jan 2 02:04:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e0aa91996281d691f6cdd987d5e409c43cb06c54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a0:db:fb:3e:ca:a8:21:3f:77:61:06:36:cb:
a5:01:20:69:67:d4:f3:1f:41:b6:e2:7f:32:e8:77:
17:ba:4d:20:85:3c:76:e9:60:4b:af:7a:a9:a6:1d:
0f:7a:5b:a4:10:65:8f:4e:1a:75:c1:20:f7:c3:61:
50:10:b4:17:1f:53:ae:66:53:f3:e4:c1:3c:43:84:
6e:e3:b9:f5:03:9f:68:3a:09:60:f1:45:3d:d4:9d:
1e:c3:29:90:e8:8b:2e:6b:31:9b:95:a4:85:7f:69:
9c:51:6b:82:63:c1:86:66:d8:62:59:cb:f1:8d:b6:
17:7d:99:ba:8a:be:2f:39:4e:13:15:85:d1:80:7f:
40:40:3c:1f:a7:12:db:9e:f7:52:c8:d3:94:5e:dc:
07:ac:20:c5:90:5a:dc:5d:ac:ec:66:d9:f1:19:ff:
ab:10:77:d7:a0:1c:9f:00:8d:f1:19:06:a8:f7:28:
f9:a3:b3:07:39:fc:ba:7b:ac:25:1c:a4:1a:e3:bf:
41:cb:28:1d:c6:7a:f4:dd:7c:75:6c:c9:3e:b8:ee:
ee:cb:94:44:e8:0a:6b:10:8d:cc:79:d3:e6:23:19:
58:c9:48:ee:57:a2:c2:b1:30:5e:4f:dc:bd:c8:a4:
45:a6:ef:9b:b0:08:f8:6d:b2:7b:77:93:4b:8b:2b:
9d:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:AA:91:99:62:81:D6:91:F6:CD:D9:87:D5:E4:09:C4:3C:B0:6C:54
X509v3 Authority Key Identifier:
keyid:94:84:67:41:13:92:63:38:8D:98:4D:B1:E9:7E:03:16:69:C6:48:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lIRnQROSYziNmE2x6X4DFmnGSG4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a49102-0612-47a0-8117-cb1125007dfb/1/4KqRmWKB1pH2zdmH1eQJxDywbFQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a49102-0612-47a0-8117-cb1125007dfb/1/lIRnQROSYziNmE2x6X4DFmnGSG4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.182.38.0/24
Signature Algorithm: sha256WithRSAEncryption
68:98:8d:3a:92:98:bb:7f:99:c2:60:66:5b:5a:03:c2:49:19:
a2:2e:41:d7:55:30:03:1d:62:a5:bf:b0:b7:2d:33:c4:0f:45:
3f:21:fa:fb:0b:e6:47:bc:e7:0e:03:99:5f:e4:5b:ed:65:3d:
70:9d:e0:29:ef:55:65:c1:2f:1f:99:c4:ba:76:e0:28:ae:56:
0c:bf:0c:82:4b:3c:2e:ae:66:db:a7:e3:ed:1a:86:27:3b:4d:
84:44:7c:f9:9e:04:ba:7e:94:92:ff:3a:13:5d:ad:c5:72:54:
24:dc:2d:d0:99:f0:28:cc:52:b8:93:62:a3:6a:c5:74:de:3c:
75:21:b6:76:e6:66:c7:e7:19:b4:51:fb:3d:37:a8:54:4b:3f:
90:ce:0f:24:bd:29:2b:af:ec:9f:91:5a:01:32:f3:0f:1e:45:
75:39:63:80:7d:9a:6d:8c:8b:a7:32:46:c0:ee:33:7c:ad:a0:
d2:f6:56:cc:f3:da:53:29:f3:1b:63:56:cc:fb:4d:4f:cd:93:
29:be:05:e3:b6:c4:7e:da:8a:3e:54:35:f3:64:24:dc:fa:80:
c2:05:4f:7b:7d:9a:cb:b0:bf:c5:ed:34:ed:28:df:60:ec:c6:
46:0c:e3:f1:6d:f3:92:4d:e0:30:3b:8d:a9:36:9a:9f:89:f2:
5f:42:16:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:20:21 2025 by rpki-client