Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/2fc150-ad36-4fe7-a6b0-d63b98ce1dd6/1/rOE4ugpbY9-fu5mANSvyKT0WVhk.roa
File: rOE4ugpbY9-fu5mANSvyKT0WVhk.roa (raw, json)
Hash identifier: GRgB5Y0IPO2DI+EdEKoDReQdsTF50GxktaLvUYiMwmM=
Subject key identifier: AC:E1:38:BA:0A:5B:63:DF:9F:BB:99:80:35:2B:F2:29:3D:16:56:19
Certificate issuer: /CN=1d7c51255cb0653562fb869911f05d45414e61c5
Certificate serial: 0185706745C1BF0E9F793082573FEDB6173F
Authority key identifier: 1D:7C:51:25:5C:B0:65:35:62:FB:86:99:11:F0:5D:45:41:4E:61:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HXxRJVywZTVi-4aZEfBdRUFOYcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/2fc150-ad36-4fe7-a6b0-d63b98ce1dd6/1/rOE4ugpbY9-fu5mANSvyKT0WVhk.roa
Signing time: Mon 02 Jan 2023 02:54:54 +0000
ROA not before: Mon 02 Jan 2023 02:54:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 188.95.67.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:67:45:c1:bf:0e:9f:79:30:82:57:3f:ed:b6:17:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d7c51255cb0653562fb869911f05d45414e61c5
Validity
Not Before: Jan 2 02:54:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ace138ba0a5b63df9fbb9980352bf2293d165619
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c7:93:84:d8:7f:96:14:cd:b0:23:7e:a2:cd:
a3:b5:16:27:bf:ed:26:0d:1b:95:7b:5c:54:92:b5:
05:9a:b3:f0:65:dd:85:29:ab:c0:6e:88:73:3b:12:
e6:74:b6:b6:30:c6:9d:1c:f0:87:72:44:2b:9a:13:
87:fd:cb:29:9f:12:7f:a9:fd:82:74:fe:c3:94:c8:
fe:c8:db:6b:84:b8:b2:7e:25:a9:7a:71:f4:f6:6c:
12:26:c3:61:20:69:6b:0b:f3:73:90:1d:0f:8c:54:
ee:43:99:b4:ce:6a:26:af:f3:e1:66:39:ca:35:66:
d4:bb:4e:87:43:6c:0a:93:64:af:58:86:23:a6:86:
c5:37:1d:12:05:b5:52:bf:05:37:61:8c:09:b3:ec:
fa:c4:54:83:86:89:3c:1b:36:29:76:82:8c:6b:ae:
60:3b:24:6d:ed:bf:ca:6b:71:92:ea:3d:ec:8b:66:
d1:32:02:a1:ff:d0:bd:d0:ab:e2:67:68:0f:90:3a:
0a:0d:e9:b9:12:87:03:55:fb:9d:8b:43:87:8b:c6:
3c:f7:82:29:4e:b0:9d:6d:67:5f:0b:f8:8b:88:49:
c2:f1:03:59:8e:3b:7c:0b:c4:7c:15:4a:33:7e:c9:
89:04:f0:de:d3:f2:b6:d6:8f:e9:8a:5a:f0:92:29:
4f:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:E1:38:BA:0A:5B:63:DF:9F:BB:99:80:35:2B:F2:29:3D:16:56:19
X509v3 Authority Key Identifier:
keyid:1D:7C:51:25:5C:B0:65:35:62:FB:86:99:11:F0:5D:45:41:4E:61:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HXxRJVywZTVi-4aZEfBdRUFOYcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/2fc150-ad36-4fe7-a6b0-d63b98ce1dd6/1/rOE4ugpbY9-fu5mANSvyKT0WVhk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/2fc150-ad36-4fe7-a6b0-d63b98ce1dd6/1/HXxRJVywZTVi-4aZEfBdRUFOYcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.95.67.0/24
Signature Algorithm: sha256WithRSAEncryption
18:d7:11:92:b5:3a:d9:35:b9:77:76:c3:79:ae:ce:a5:30:9c:
cc:80:79:e1:e2:d9:20:49:ed:b7:2c:57:09:79:95:2d:d6:ac:
57:2d:6a:77:62:e0:93:19:a2:86:ef:3b:e8:5e:75:f7:04:d1:
a3:9e:29:ef:4c:fa:f0:77:7b:76:e2:be:62:f2:81:88:22:da:
0f:4d:ce:67:51:ea:8d:9c:34:f3:99:ab:73:57:79:6f:b2:bb:
63:cb:da:52:b8:9c:98:ab:f1:c6:47:32:99:45:2d:fe:d8:e3:
69:79:b1:f7:4b:c9:15:d8:38:05:53:f3:2b:0c:9c:95:5f:b6:
30:36:dd:a0:94:4f:93:3d:25:be:43:a1:76:32:c5:5b:1d:0d:
4f:9d:e9:05:8f:6a:47:c9:20:bf:ca:0a:4c:0b:40:56:78:5b:
1e:fe:de:04:a4:77:3e:8c:bb:57:ef:e6:ac:ef:59:58:ab:fc:
d9:de:d9:18:5a:12:5e:8f:b0:51:b4:b4:c9:1e:49:77:d9:aa:
eb:db:1e:67:fb:54:43:87:38:fb:81:bf:ad:89:4f:ac:cb:f6:
8a:4c:d9:bd:91:c8:3c:93:dc:3d:05:67:3f:21:e2:de:9f:6d:
12:af:b4:ce:f1:45:fd:bf:63:af:2f:09:21:1b:89:e4:13:90:
7b:5a:79:9c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVwZ0XBvw6feTCCVz/tthc/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkN2M1MTI1NWNiMDY1MzU2MmZiODY5OTExZjA1ZDQ1NDE0
ZTYxYzUwHhcNMjMwMTAyMDI1NDU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhY2UxMzhiYTBhNWI2M2RmOWZiYjk5ODAzNTJiZjIyOTNkMTY1NjE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoceThNh/lhTNsCN+os2jtRYnv+0m
DRuVe1xUkrUFmrPwZd2FKavAbohzOxLmdLa2MMadHPCHckQrmhOH/cspnxJ/qf2C
dP7DlMj+yNtrhLiyfiWpenH09mwSJsNhIGlrC/NzkB0PjFTuQ5m0zmomr/PhZjnK
NWbUu06HQ2wKk2SvWIYjpobFNx0SBbVSvwU3YYwJs+z6xFSDhok8GzYpdoKMa65g
OyRt7b/Ka3GS6j3si2bRMgKh/9C90KviZ2gPkDoKDem5EocDVfudi0OHi8Y894Ip
TrCdbWdfC/iLiEnC8QNZjjt8C8R8FUozfsmJBPDe0/K21o/pilrwkilPmwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKzhOLoKW2Pfn7uZgDUr8ik9FlYZMB8GA1UdIwQY
MBaAFB18USVcsGU1YvuGmRHwXUVBTmHFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSFh4UkpWeXdaVFZpLTRhWkVmQmRSVUZPWWNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC8yZmMxNTAtYWQzNi00ZmU3LWE2YjAt
ZDYzYjk4Y2UxZGQ2LzEvck9FNHVncGJZOS1mdTVtQU5TdnlLVDBXVmhrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC8yZmMxNTAtYWQzNi00ZmU3LWE2YjAtZDYzYjk4Y2UxZGQ2
LzEvSFh4UkpWeXdaVFZpLTRhWkVmQmRSVUZPWWNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvF9DMA0G
CSqGSIb3DQEBCwUAA4IBAQAY1xGStTrZNbl3dsN5rs6lMJzMgHnh4tkgSe23LFcJ
eZUt1qxXLWp3YuCTGaKG7zvoXnX3BNGjninvTPrwd3t24r5i8oGIItoPTc5nUeqN
nDTzmatzV3lvsrtjy9pSuJyYq/HGRzKZRS3+2ONpebH3S8kV2DgFU/MrDJyVX7Yw
Nt2glE+TPSW+Q6F2MsVbHQ1PnekFj2pHySC/ygpMC0BWeFse/t4EpHc+jLtX7+as
71lYq/zZ3tkYWhJej7BRtLTJHkl32arr2x5n+1RDhzj7gb+tiU+sy/aKTNm9kcg8
k9w9BWc/IeLen20Sr7TO8UX9v2OvLwkhG4nkE5B7Wnmc
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:32:51 2025 by rpki-client