Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/a49102-0612-47a0-8117-cb1125007dfb/1/iY_D7zhcUAD8_i90mzqrJAwAlT4.roa
File: iY_D7zhcUAD8_i90mzqrJAwAlT4.roa (raw, json)
Hash identifier: vouOJvimSP8DPaqCKUT//RwJp86l6fz66rAMcuQBnXY=
Subject key identifier: 89:8F:C3:EF:38:5C:50:00:FC:FE:2F:74:9B:3A:AB:24:0C:00:95:3E
Certificate issuer: /CN=94846741139263388d984db1e97e031669c6486e
Certificate serial: 018894F6A4C918CDA48D77205A6FB6904F86
Authority key identifier: 94:84:67:41:13:92:63:38:8D:98:4D:B1:E9:7E:03:16:69:C6:48:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lIRnQROSYziNmE2x6X4DFmnGSG4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/a49102-0612-47a0-8117-cb1125007dfb/1/iY_D7zhcUAD8_i90mzqrJAwAlT4.roa
Signing time: Wed 07 Jun 2023 08:26:11 +0000
ROA not before: Wed 07 Jun 2023 08:26:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34918
IP address blocks: 195.190.139.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:94:f6:a4:c9:18:cd:a4:8d:77:20:5a:6f:b6:90:4f:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94846741139263388d984db1e97e031669c6486e
Validity
Not Before: Jun 7 08:26:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=898fc3ef385c5000fcfe2f749b3aab240c00953e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:46:c5:71:2e:7b:68:ba:6a:34:fe:50:9a:84:
0c:77:88:ae:a5:35:28:08:34:c3:aa:b7:21:9d:27:
ee:e1:f2:62:c2:51:ba:f4:c8:d0:d5:5a:96:bf:b2:
21:95:4f:40:23:79:40:3b:85:b3:d4:80:d6:03:8b:
34:e0:d2:45:f7:ea:7a:3a:85:b5:0f:b7:16:2e:1b:
bf:9b:cc:ef:ab:44:4b:1c:10:1f:c0:63:6a:d4:11:
b0:bc:22:1c:e5:c4:6a:cf:99:64:55:00:17:a4:d0:
70:ce:56:b5:9f:d2:f7:c0:fb:9f:87:30:ad:ed:f9:
d0:3b:fa:d9:9e:ee:96:0b:35:8c:ee:31:75:aa:df:
eb:98:ab:4d:47:98:23:ce:12:ae:7d:74:b1:f7:eb:
05:e1:3d:82:97:eb:2d:9b:94:52:06:04:5f:cf:0c:
ba:a5:6f:d3:22:85:19:cc:5d:d7:42:87:ef:70:59:
42:cb:e1:74:93:6f:7c:4e:2f:bb:84:13:84:a8:c7:
f2:2d:39:93:11:9c:89:c4:37:48:ba:2a:6e:a4:33:
fd:0f:ec:d3:fa:cd:83:ab:bc:82:0b:eb:6a:f5:96:
be:b6:c9:6f:64:4a:86:19:82:14:48:ea:97:00:b3:
60:47:67:41:eb:86:90:5b:ff:2e:ce:6c:87:9e:d2:
86:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:8F:C3:EF:38:5C:50:00:FC:FE:2F:74:9B:3A:AB:24:0C:00:95:3E
X509v3 Authority Key Identifier:
keyid:94:84:67:41:13:92:63:38:8D:98:4D:B1:E9:7E:03:16:69:C6:48:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lIRnQROSYziNmE2x6X4DFmnGSG4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a49102-0612-47a0-8117-cb1125007dfb/1/iY_D7zhcUAD8_i90mzqrJAwAlT4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a49102-0612-47a0-8117-cb1125007dfb/1/lIRnQROSYziNmE2x6X4DFmnGSG4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.190.139.0/24
Signature Algorithm: sha256WithRSAEncryption
42:bf:88:9f:f5:e9:2d:65:fa:d8:1e:9c:79:39:d3:a1:2b:00:
93:39:2f:bc:53:16:80:2c:82:1c:66:fc:ec:87:bf:c6:7b:0a:
9d:cb:95:ee:88:87:db:b9:a6:9f:fb:01:be:0b:f9:39:2f:d1:
74:47:14:1c:39:c9:0d:1f:0f:14:77:60:b1:5d:fc:8c:04:59:
1e:d5:ee:fa:5c:f7:13:c5:25:af:70:52:d8:5c:83:d1:f1:67:
2a:a6:61:22:e5:94:ed:d6:0e:ff:ac:48:41:f0:7a:cb:ed:94:
a7:0c:31:99:41:5e:48:bf:4a:92:a0:c4:56:48:76:99:a9:9d:
64:72:20:39:92:c8:5d:2b:07:9b:3d:b6:52:9f:2f:db:c4:00:
6d:d3:b3:56:d6:b5:44:de:a1:73:2c:c2:40:4d:83:4c:32:a5:
d3:4a:0b:89:9e:62:70:d1:c4:56:c8:34:0f:84:36:5e:14:d8:
cc:0e:dc:04:a2:a7:78:7e:b1:57:b8:12:d0:46:d4:f3:57:fe:
68:4e:8c:81:c2:c9:4c:20:fc:9c:ab:b1:6c:4f:c9:67:67:c6:
78:b1:0a:2f:2d:5b:4d:48:d0:c5:29:08:64:35:7b:c8:f7:fe:
3b:02:dd:d1:73:38:1a:e5:41:fd:e8:d7:99:a1:b3:92:10:b4:
78:57:0a:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:00:16 2025 by rpki-client