Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/37e22e-e0d3-44ff-9237-37ba6cc4e43b/1/DIVsV7W5Ui41VFyHkKOpLzBxnuk.roa
File: DIVsV7W5Ui41VFyHkKOpLzBxnuk.roa (raw, json)
Hash identifier: SBfhF8FG8RnM3dEXzlUdTByp2QT+lsDtDIxon3p2/1M=
Subject key identifier: 0C:85:6C:57:B5:B9:52:2E:35:54:5C:87:90:A3:A9:2F:30:71:9E:E9
Certificate issuer: /CN=94e2bae3620405774916317c6792377eec4e196c
Certificate serial: 02FB1EB1
Authority key identifier: 94:E2:BA:E3:62:04:05:77:49:16:31:7C:67:92:37:7E:EC:4E:19:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lOK642IEBXdJFjF8Z5I3fuxOGWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/37e22e-e0d3-44ff-9237-37ba6cc4e43b/1/DIVsV7W5Ui41VFyHkKOpLzBxnuk.roa
Signing time: Sat 01 Jan 2022 01:55:40 +0000
ROA not before: Sat 01 Jan 2022 01:55:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206592
IP address blocks: 195.242.240.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 50011825 (0x2fb1eb1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94e2bae3620405774916317c6792377eec4e196c
Validity
Not Before: Jan 1 01:55:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0c856c57b5b9522e35545c8790a3a92f30719ee9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:13:bd:e8:a6:21:1f:79:b0:f4:04:97:f2:fb:
79:ea:f4:03:97:35:57:4b:05:49:0a:a5:ac:de:bd:
aa:e8:af:35:33:97:45:16:cf:cd:d7:48:59:17:35:
71:1e:f0:b1:66:89:a5:93:cf:05:f0:16:db:4a:ef:
87:7a:a1:4f:dc:a4:ba:02:3b:1d:23:71:e8:9b:f1:
e4:a3:4e:8f:8f:b3:7f:f9:4a:c5:ac:99:e7:57:d4:
b9:fb:5b:ef:a8:bc:00:9a:59:53:60:63:20:1e:78:
13:44:d2:18:54:02:84:1d:23:a2:2a:c1:65:2e:f9:
51:7d:2e:64:6a:03:70:ca:5c:2f:4d:da:c3:d2:91:
49:50:d2:4a:b8:3e:d6:83:72:f5:f9:61:7c:65:3f:
60:69:63:ee:8d:7f:12:47:8a:e3:64:77:4b:1f:fd:
27:d9:90:69:f1:4f:67:ba:98:4d:77:18:26:22:5a:
ad:6a:ac:2c:86:5c:08:01:06:86:0e:1e:74:04:74:
e8:77:93:ce:2b:ba:a9:ce:52:43:92:34:07:82:a6:
c5:2a:c5:2c:23:5c:56:f8:34:7b:46:e9:44:d0:ee:
eb:92:45:8c:c3:ef:b4:6b:bf:25:26:d9:db:2f:6b:
a1:f6:59:f3:f1:74:85:36:15:89:30:22:2f:77:72:
63:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:85:6C:57:B5:B9:52:2E:35:54:5C:87:90:A3:A9:2F:30:71:9E:E9
X509v3 Authority Key Identifier:
keyid:94:E2:BA:E3:62:04:05:77:49:16:31:7C:67:92:37:7E:EC:4E:19:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lOK642IEBXdJFjF8Z5I3fuxOGWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/37e22e-e0d3-44ff-9237-37ba6cc4e43b/1/DIVsV7W5Ui41VFyHkKOpLzBxnuk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/37e22e-e0d3-44ff-9237-37ba6cc4e43b/1/lOK642IEBXdJFjF8Z5I3fuxOGWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.242.240.0/22
Signature Algorithm: sha256WithRSAEncryption
ba:b8:17:1c:b5:a4:19:f2:25:96:32:c1:e3:d1:51:96:38:4b:
44:ac:84:7a:db:a4:3f:34:8d:15:42:02:17:a1:c3:29:4b:23:
b3:3d:f2:25:6a:ca:71:9e:27:2c:66:a4:c8:90:dd:8e:51:c0:
fa:7c:30:17:fd:f5:06:2e:57:37:ed:1d:f5:28:61:c6:3c:23:
e9:16:de:8a:86:9d:0e:7c:c1:4d:4d:b9:d2:db:27:69:18:7d:
bf:c4:47:b2:e7:82:d2:2d:a1:81:bb:8d:5a:eb:8f:7b:8c:9b:
a5:36:d5:72:c5:76:f8:bf:ea:3f:b1:f3:e6:4c:9b:99:8a:1e:
8f:55:00:63:d3:c8:00:73:7b:c4:0d:a8:c1:9d:27:12:ec:da:
d9:fc:72:71:28:97:58:4b:95:df:f9:ba:b3:d2:ef:da:6e:a6:
1a:1b:65:15:e1:22:2a:92:ba:c9:0c:06:77:99:21:23:21:8f:
7f:35:2a:94:da:44:a3:84:d8:26:10:b6:87:d6:d6:95:20:8f:
60:52:fe:21:63:2d:df:75:99:01:42:f9:a6:19:fd:72:8a:48:
02:67:77:5c:94:1a:66:1f:8c:dc:75:71:5b:e1:cc:43:d4:d5:
90:c6:ec:8e:a7:95:49:09:13:21:e3:80:fe:ff:9b:8e:47:9f:
32:9c:f3:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:36:55 2025 by rpki-client