Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/259ad9-3678-4318-8a09-faaf94fcc834/1/Fz2GUDVekYXrZkIMepAZVKqV_7A.roa
File: Fz2GUDVekYXrZkIMepAZVKqV_7A.roa (raw, json)
Hash identifier: OVZdzuAHH4BBo3jfPkG69PbdoYQ03KT4OUL5nkG2PCM=
Subject key identifier: 17:3D:86:50:35:5E:91:85:EB:66:42:0C:7A:90:19:54:AA:95:FF:B0
Certificate issuer: /CN=a1be907379f06beb4cb3512cc4aaee048134a3c6
Certificate serial: 01857343BEAEE7EC421EAEFF756B4B8B2CE0
Authority key identifier: A1:BE:90:73:79:F0:6B:EB:4C:B3:51:2C:C4:AA:EE:04:81:34:A3:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ob6Qc3nwa-tMs1EsxKruBIE0o8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/259ad9-3678-4318-8a09-faaf94fcc834/1/Fz2GUDVekYXrZkIMepAZVKqV_7A.roa
Signing time: Mon 02 Jan 2023 16:14:57 +0000
ROA not before: Mon 02 Jan 2023 16:14:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207906
IP address blocks: 195.189.184.0/23 maxlen: 24
195.189.190.0/23 maxlen: 24
2a0f:54c0::/29 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:43:be:ae:e7:ec:42:1e:ae:ff:75:6b:4b:8b:2c:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1be907379f06beb4cb3512cc4aaee048134a3c6
Validity
Not Before: Jan 2 16:14:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=173d8650355e9185eb66420c7a901954aa95ffb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:9a:62:59:75:e1:09:21:c5:46:f0:ff:a2:b9:
98:66:e4:2b:e8:ec:ba:a6:ec:bc:b7:40:08:c4:00:
37:59:b5:02:79:92:88:03:9d:1b:23:9d:e7:7c:ab:
7c:85:ad:4b:03:81:18:13:63:4a:8e:f5:5a:50:88:
90:18:0f:8a:cd:45:7d:50:e1:1a:98:bc:98:54:07:
c4:8f:5f:2d:aa:a8:d2:85:79:88:e4:cd:11:00:23:
15:da:9c:c3:de:8b:15:27:7b:6c:ed:f2:6e:b0:87:
e6:f2:ff:52:f1:ad:f8:13:0e:b6:36:9f:bd:09:ad:
c8:08:a6:4f:c2:a9:e9:67:76:25:3e:6d:7e:2e:3b:
e2:84:27:4c:03:92:a7:44:8c:de:02:2a:5e:fa:5b:
f3:e9:fc:d5:a3:03:61:78:20:25:cf:7e:10:26:6d:
6f:67:07:03:49:f8:b3:42:8e:e3:3d:5f:c9:6d:69:
72:d4:02:13:b5:4b:6f:fb:45:b1:d5:eb:7b:9b:e1:
a8:0d:e2:4f:31:b8:3d:f3:0a:9e:53:6c:41:26:70:
db:b2:75:8c:e2:0f:92:da:8c:97:60:f3:05:97:4e:
fd:85:fe:82:eb:e7:a9:6a:b6:5b:dd:5a:e5:9e:fe:
34:45:0b:01:1d:dc:f3:91:64:a2:47:2f:42:6f:cf:
c4:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:3D:86:50:35:5E:91:85:EB:66:42:0C:7A:90:19:54:AA:95:FF:B0
X509v3 Authority Key Identifier:
keyid:A1:BE:90:73:79:F0:6B:EB:4C:B3:51:2C:C4:AA:EE:04:81:34:A3:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ob6Qc3nwa-tMs1EsxKruBIE0o8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/259ad9-3678-4318-8a09-faaf94fcc834/1/Fz2GUDVekYXrZkIMepAZVKqV_7A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/259ad9-3678-4318-8a09-faaf94fcc834/1/ob6Qc3nwa-tMs1EsxKruBIE0o8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.189.184.0/23
195.189.190.0/23
IPv6:
2a0f:54c0::/29
Signature Algorithm: sha256WithRSAEncryption
49:aa:ca:38:50:b9:5a:b0:cb:23:05:1e:99:25:88:5b:6a:be:
ae:ae:c8:c1:c8:75:98:43:3c:ed:3e:b0:ce:f2:22:5e:e6:89:
43:5e:e2:c0:e7:c5:63:be:9c:1a:02:9e:a2:53:d0:68:b2:02:
4b:d5:e7:0a:13:33:eb:b5:58:b1:b1:00:0a:03:ee:2b:e1:80:
4a:4a:1e:98:42:9e:b4:19:bb:95:ca:d0:1e:d6:d4:cb:c9:09:
f5:15:38:9f:0a:59:01:c6:e6:fa:b6:2a:e0:06:2c:5c:2a:5a:
58:e6:67:ae:74:cb:57:f4:69:a5:a9:f6:ed:75:78:56:15:11:
56:c2:74:03:24:76:4c:6b:a0:2d:86:a1:8a:71:04:37:d1:49:
84:86:e9:bb:58:1f:f9:37:79:ab:32:4c:4b:ff:f7:7e:7f:d8:
af:ba:73:c9:b2:1a:4c:14:91:2e:19:a7:e0:99:05:16:62:08:
45:6b:07:a7:77:c3:e2:1b:92:bd:9f:08:75:96:52:b7:98:a1:
7b:f7:9c:56:2f:cd:a8:1f:5c:14:71:3f:70:a9:3f:b9:67:06:
b9:00:b5:53:79:c7:5b:ad:b2:c9:80:02:3c:67:15:95:a7:33:
66:0e:fa:c0:86:eb:e6:c8:a2:a6:4f:cc:e5:a3:b8:59:94:88:
d4:95:ad:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:39:49 2025 by rpki-client