Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/a49102-0612-47a0-8117-cb1125007dfb/1/U06s1z4qZg2D91bT1Gfe4rJSEYI.roa
File: U06s1z4qZg2D91bT1Gfe4rJSEYI.roa (raw, json)
Hash identifier: 4kdDyAbvMjz+IRVWxvnHnIq665qqaruVMf4Ai8iXfyE=
Subject key identifier: 53:4E:AC:D7:3E:2A:66:0D:83:F7:56:D3:D4:67:DE:E2:B2:52:11:82
Certificate issuer: /CN=94846741139263388d984db1e97e031669c6486e
Certificate serial: 0188B8B709DEAE84F09D540DB50E9CF812CB
Authority key identifier: 94:84:67:41:13:92:63:38:8D:98:4D:B1:E9:7E:03:16:69:C6:48:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lIRnQROSYziNmE2x6X4DFmnGSG4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/a49102-0612-47a0-8117-cb1125007dfb/1/U06s1z4qZg2D91bT1Gfe4rJSEYI.roa
Signing time: Wed 14 Jun 2023 07:03:03 +0000
ROA not before: Wed 14 Jun 2023 07:03:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198154
IP address blocks: 195.190.139.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:b8:b7:09:de:ae:84:f0:9d:54:0d:b5:0e:9c:f8:12:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94846741139263388d984db1e97e031669c6486e
Validity
Not Before: Jun 14 07:03:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=534eacd73e2a660d83f756d3d467dee2b2521182
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:fa:43:d3:fd:5b:65:8d:35:a8:06:ec:60:4a:
6f:ff:6a:c3:f7:d5:d8:83:da:68:14:93:04:a8:53:
ae:80:7d:e7:0b:cd:fe:1c:b1:a0:af:82:13:91:a9:
d8:c7:78:3c:97:85:95:b1:e1:37:15:3f:e6:22:49:
57:84:82:35:44:1a:e0:63:6c:c9:6c:1d:c2:83:d7:
82:18:ee:1a:f3:d6:c8:a8:54:b2:04:91:2d:25:f9:
b1:0d:9e:c2:b7:e4:a6:04:1d:f7:f1:c9:b8:19:0b:
6e:b2:c6:de:24:35:ec:f2:48:42:88:c1:4f:16:06:
b5:43:0a:92:81:19:77:3d:22:a9:34:ae:25:2b:b0:
0d:9d:c8:93:ef:a9:71:8a:aa:2d:91:f2:86:28:cf:
57:cd:5a:1f:58:ff:aa:3f:18:52:46:65:9b:26:58:
6c:74:5d:4a:93:c2:7b:99:4b:80:77:2c:c7:4e:15:
52:27:09:58:45:cd:ad:89:7d:6b:13:65:05:77:05:
43:64:0b:d3:0d:af:d7:85:bd:99:15:84:13:e2:10:
76:8a:53:1c:f5:b4:69:29:18:2a:7e:fb:bb:c3:1c:
87:47:e6:93:e9:75:b2:4b:7e:12:b8:c4:8c:b6:b0:
cd:d5:32:83:63:40:1c:52:d3:9b:b0:a8:fe:d6:fc:
1f:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:4E:AC:D7:3E:2A:66:0D:83:F7:56:D3:D4:67:DE:E2:B2:52:11:82
X509v3 Authority Key Identifier:
keyid:94:84:67:41:13:92:63:38:8D:98:4D:B1:E9:7E:03:16:69:C6:48:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lIRnQROSYziNmE2x6X4DFmnGSG4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a49102-0612-47a0-8117-cb1125007dfb/1/U06s1z4qZg2D91bT1Gfe4rJSEYI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a49102-0612-47a0-8117-cb1125007dfb/1/lIRnQROSYziNmE2x6X4DFmnGSG4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.190.139.0/24
Signature Algorithm: sha256WithRSAEncryption
25:07:b2:ea:f6:a8:3d:37:67:01:6e:99:bd:7c:6e:22:d2:33:
ca:3d:55:8f:ea:85:d2:a8:96:57:05:de:60:65:ec:6f:cb:e8:
6c:8c:0e:ef:17:2f:d3:3a:be:58:f5:4a:00:3e:3b:16:15:8b:
de:a1:83:1f:84:de:09:2f:8f:f8:b6:bd:0a:d8:06:1f:b7:d2:
17:13:0f:fb:38:c9:5b:6f:a6:73:e7:5e:ea:98:ad:39:09:fc:
13:39:af:8e:35:54:42:1b:d9:a3:db:44:f3:21:b9:44:42:80:
cf:8d:29:f6:d7:6e:20:b9:87:aa:f7:c8:f5:de:ce:c5:a3:81:
f9:68:cb:c2:5f:eb:6a:3c:8b:a5:50:b6:31:63:a6:17:ed:67:
f6:56:26:16:af:08:cf:3d:41:b4:6f:a3:a1:20:9a:f0:51:97:
82:81:fb:02:aa:ce:2c:38:9e:40:cf:3c:97:83:0f:67:f3:28:
a8:84:83:72:1f:82:c0:ae:e6:d3:e5:b9:ac:df:f3:de:a2:ce:
40:e7:11:cb:c9:a2:c5:f9:8d:6f:04:ae:48:7e:45:cb:b8:46:
55:2a:c6:94:a3:1b:0c:7f:79:50:9d:83:e4:20:26:e8:ab:15:
60:93:07:ca:94:2d:86:70:53:ab:03:60:48:59:13:a0:73:01:
9d:26:b4:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:56:36 2025 by rpki-client