Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/6aeda8-b75c-4bbb-8e7d-8feaafac7e89/1/4AsOQGuiDZc5hZNGi6a47qe4Byg.roa
File: 4AsOQGuiDZc5hZNGi6a47qe4Byg.roa (raw, json)
Hash identifier: gzuRMHM20TUjVP+HTFRYwZT9Edj7okeWTYb+j/LdgcU=
Subject key identifier: E0:0B:0E:40:6B:A2:0D:97:39:85:93:46:8B:A6:B8:EE:A7:B8:07:28
Certificate issuer: /CN=7383fa438a6fae62b35f9091876c44dedb9c0da3
Certificate serial: 01856F94CA34ACEDBCC6250BC837F3E3F998
Authority key identifier: 73:83:FA:43:8A:6F:AE:62:B3:5F:90:91:87:6C:44:DE:DB:9C:0D:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c4P6Q4pvrmKzX5CRh2xE3tucDaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/6aeda8-b75c-4bbb-8e7d-8feaafac7e89/1/4AsOQGuiDZc5hZNGi6a47qe4Byg.roa
Signing time: Sun 01 Jan 2023 23:05:00 +0000
ROA not before: Sun 01 Jan 2023 23:05:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42085
IP address blocks: 195.64.138.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:94:ca:34:ac:ed:bc:c6:25:0b:c8:37:f3:e3:f9:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7383fa438a6fae62b35f9091876c44dedb9c0da3
Validity
Not Before: Jan 1 23:05:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e00b0e406ba20d97398593468ba6b8eea7b80728
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:07:8f:f4:17:0f:47:95:ca:d8:f5:19:9d:d8:
09:8f:11:e3:84:ee:c2:21:4d:69:6c:0f:00:d7:e3:
07:e0:41:eb:89:4b:ee:c0:dd:d2:1b:73:ef:b7:86:
8a:8f:46:28:42:93:b8:bf:3b:6e:d3:f3:86:e4:c2:
48:e3:c2:08:da:07:58:bf:ee:83:78:c2:a9:63:d7:
eb:2c:a7:7b:1a:25:13:8a:50:6b:44:23:19:09:25:
da:bb:a6:71:51:ce:2c:84:3b:fb:a6:bb:1c:90:67:
c7:41:f7:d3:42:c0:37:b0:9f:a8:7c:db:86:f4:9f:
6a:e0:99:e2:ab:ff:45:43:8a:f9:12:ee:85:3f:35:
d0:0a:e9:f4:51:2e:73:74:8b:e3:90:5f:52:8e:ad:
91:07:b5:43:04:89:c8:c7:ad:2a:b1:06:1f:1f:a7:
ea:bf:68:00:19:be:50:f6:ec:e8:8a:6b:c8:fb:fe:
e5:06:2f:ce:9c:61:6d:4e:d7:b5:68:b0:ef:e8:2c:
48:ea:01:14:23:f0:e5:9a:36:47:1b:d2:eb:7e:33:
5d:33:90:a2:c4:94:9f:c6:17:df:fe:8a:5d:f1:9a:
12:57:23:d8:39:28:5d:95:9e:d2:91:b6:f9:2e:e2:
2b:9a:ac:97:97:c0:61:35:db:6f:17:59:6c:8f:23:
39:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:0B:0E:40:6B:A2:0D:97:39:85:93:46:8B:A6:B8:EE:A7:B8:07:28
X509v3 Authority Key Identifier:
keyid:73:83:FA:43:8A:6F:AE:62:B3:5F:90:91:87:6C:44:DE:DB:9C:0D:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4P6Q4pvrmKzX5CRh2xE3tucDaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6aeda8-b75c-4bbb-8e7d-8feaafac7e89/1/4AsOQGuiDZc5hZNGi6a47qe4Byg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6aeda8-b75c-4bbb-8e7d-8feaafac7e89/1/c4P6Q4pvrmKzX5CRh2xE3tucDaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.64.138.0/23
Signature Algorithm: sha256WithRSAEncryption
23:44:02:27:a7:f5:78:92:84:40:ed:bb:cc:ba:53:d8:b5:03:
60:07:0a:e8:9c:bb:12:e3:54:71:de:dc:ac:24:e9:b5:9c:9a:
63:7c:cc:ee:7e:78:f5:87:74:6a:69:a0:e1:1f:f5:92:27:2b:
c5:ce:7e:c8:2c:eb:7e:03:b9:1a:15:0c:a9:24:84:e7:b1:8b:
05:ea:94:4b:58:b5:fe:c2:d1:54:16:1c:5f:69:d5:2d:db:16:
2a:5b:1a:ab:fc:aa:09:14:ae:ea:50:81:c5:f3:21:80:f1:c2:
e1:08:0a:5b:bd:39:43:d1:7d:22:b4:2d:d3:36:b7:49:a0:5b:
36:79:54:f1:86:60:ea:eb:62:04:2a:eb:86:11:97:81:23:f8:
17:21:a4:0c:68:fa:2f:8f:85:9e:e9:9a:23:1e:7f:10:eb:bd:
71:8d:14:65:fd:b2:26:fc:94:57:94:f5:11:da:b5:f8:79:e0:
85:b8:06:d7:db:6c:3e:82:b1:03:f4:80:df:32:2c:b6:91:ef:
43:7a:cb:ae:2a:96:f1:44:ca:ae:57:44:78:81:5d:b9:2c:0e:
ed:b8:52:9a:f8:87:e1:ab:dd:85:67:7a:f8:52:c2:37:07:ae:
fb:84:8c:4a:2a:07:3c:30:c4:5b:01:b7:32:14:61:e5:ee:31:
f4:7d:01:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 11:01:08 2025 by rpki-client