Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/67d3b8-c43d-44b7-afa6-8b9cddb73408/1/EgdR_cAQwU1jkppeeXaCo7L2NuI.roa
File: EgdR_cAQwU1jkppeeXaCo7L2NuI.roa (raw, json)
Hash identifier: 9pjaVvY/k2/H7Rf2leiAcTaKkb4lwQiV96t7CGZgDlw=
Subject key identifier: 12:07:51:FD:C0:10:C1:4D:63:92:9A:5E:79:76:82:A3:B2:F6:36:E2
Certificate issuer: /CN=38401e58890bf230dcae5d0305119ff2c2b8d433
Certificate serial: 018CCA990FE591E47A00C5BA94D7C96E7A15
Authority key identifier: 38:40:1E:58:89:0B:F2:30:DC:AE:5D:03:05:11:9F:F2:C2:B8:D4:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OEAeWIkL8jDcrl0DBRGf8sK41DM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/67d3b8-c43d-44b7-afa6-8b9cddb73408/1/EgdR_cAQwU1jkppeeXaCo7L2NuI.roa
Signing time: Tue 02 Jan 2024 14:34:37 +0000
ROA not before: Tue 02 Jan 2024 14:34:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 64493
IP address blocks: 195.128.133.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:99:0f:e5:91:e4:7a:00:c5:ba:94:d7:c9:6e:7a:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38401e58890bf230dcae5d0305119ff2c2b8d433
Validity
Not Before: Jan 2 14:34:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=120751fdc010c14d63929a5e797682a3b2f636e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d2:61:bb:ac:c7:81:e1:43:da:fa:03:25:e9:
f6:4b:8c:b9:8f:ba:93:53:c1:fe:5b:77:e0:11:c7:
65:e7:58:4b:72:93:1f:bb:e3:39:03:e2:ae:a7:16:
e4:01:a6:eb:95:73:f2:c1:a7:94:12:26:b2:c8:1f:
58:07:cb:ee:19:f9:1c:b1:8f:70:dc:31:99:69:ab:
a6:4f:47:26:cd:fe:e0:17:6c:4b:45:c3:62:ba:31:
ac:d5:e5:40:61:79:03:eb:78:b1:76:29:0b:fc:76:
88:42:e9:86:ef:4e:a4:0f:1a:75:c7:a8:ef:96:ee:
25:cc:99:ce:ce:f5:c9:8d:98:ed:f6:e5:d4:48:bb:
2e:fb:90:bc:ed:44:6e:25:15:d3:4b:4c:e4:fe:f1:
48:22:d4:49:33:02:54:cb:6c:1e:ed:68:c0:f9:2c:
05:cf:8f:54:ec:52:4d:a3:b6:62:63:d9:66:74:fb:
ce:5d:aa:d0:e6:42:c7:11:42:3a:9b:7f:1d:a0:8e:
36:a5:a2:17:b4:7b:82:77:9d:a4:b5:df:09:3c:26:
46:bf:3a:3c:1f:2e:5e:63:5c:ca:9f:2f:ec:95:52:
d6:eb:ba:75:32:86:52:71:f1:77:fd:a5:57:d9:5a:
de:5f:90:a7:ac:58:8f:18:44:85:c8:dd:e1:ce:5f:
32:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:07:51:FD:C0:10:C1:4D:63:92:9A:5E:79:76:82:A3:B2:F6:36:E2
X509v3 Authority Key Identifier:
keyid:38:40:1E:58:89:0B:F2:30:DC:AE:5D:03:05:11:9F:F2:C2:B8:D4:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OEAeWIkL8jDcrl0DBRGf8sK41DM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/67d3b8-c43d-44b7-afa6-8b9cddb73408/1/EgdR_cAQwU1jkppeeXaCo7L2NuI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/67d3b8-c43d-44b7-afa6-8b9cddb73408/1/OEAeWIkL8jDcrl0DBRGf8sK41DM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.128.133.0/24
Signature Algorithm: sha256WithRSAEncryption
50:b8:02:86:e7:50:ac:79:f0:0b:30:42:59:7b:1b:a0:b7:27:
98:e3:d1:ef:dd:83:f0:4a:27:ac:6a:3d:f7:2b:ff:89:69:14:
08:0f:ce:8a:b5:71:fc:e4:e5:0b:6d:83:57:99:4d:85:cd:54:
4f:68:cf:6f:8d:7d:5f:c1:35:92:34:26:35:64:7f:34:7e:89:
1b:37:a6:8d:19:3d:ef:22:74:f5:bf:b2:c0:4d:ee:fd:56:05:
05:bb:69:23:fd:ee:55:fd:eb:be:2b:3d:54:6b:53:88:1c:7a:
e8:fb:d6:aa:b3:5e:e5:07:ed:55:41:07:19:6e:80:34:0d:aa:
42:45:05:f3:c6:51:d1:7b:a4:5c:fa:05:cc:f3:34:69:e9:55:
8d:0d:26:40:7a:fb:9b:2f:43:d9:ef:43:2d:24:20:2c:57:9b:
4d:43:4b:ae:2a:eb:87:6c:12:cf:33:76:e5:f4:19:10:b8:e7:
15:11:fe:ba:f4:71:d3:4a:ba:15:c6:2d:e2:ce:a9:21:30:a0:
1d:d5:a2:61:c4:6d:02:c1:57:81:43:ac:cc:64:13:40:48:a0:
c9:7a:bb:df:4d:c6:49:ff:15:d9:36:ba:be:ca:90:06:fd:56:
a1:7c:67:a5:bf:d0:07:40:64:da:33:04:ee:58:c4:24:ca:6e:
4e:50:ec:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:20:20 2025 by rpki-client