Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/68707f-f2a8-4f53-ba5c-31dfbbb914ed/1/wLU49kROQIsV48YURsbjkTTOy8w.roa
File: wLU49kROQIsV48YURsbjkTTOy8w.roa (raw, json)
Hash identifier: WqiL1u21zapAUmAg1kCUaIBvFtWJ+ptxDFVRJ5L625M=
Subject key identifier: C0:B5:38:F6:44:4E:40:8B:15:E3:C6:14:46:C6:E3:91:34:CE:CB:CC
Certificate issuer: /CN=ed77ba4f32f2426170afc9e25914c13490ff5db6
Certificate serial: 017220
Authority key identifier: ED:77:BA:4F:32:F2:42:61:70:AF:C9:E2:59:14:C1:34:90:FF:5D:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Xe6TzLyQmFwr8niWRTBNJD_XbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/68707f-f2a8-4f53-ba5c-31dfbbb914ed/1/wLU49kROQIsV48YURsbjkTTOy8w.roa
Signing time: Fri 11 Mar 2022 15:00:25 +0000
ROA not before: Fri 11 Mar 2022 15:00:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 398464
IP address blocks: 195.64.124.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94752 (0x17220)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed77ba4f32f2426170afc9e25914c13490ff5db6
Validity
Not Before: Mar 11 15:00:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c0b538f6444e408b15e3c61446c6e39134cecbcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:cb:77:02:83:72:65:98:b8:02:03:53:0e:05:
c0:b2:99:31:5f:1b:a6:03:f0:2c:14:71:4b:6d:af:
e0:39:28:c2:d0:15:ba:d6:d0:60:46:79:1c:fc:db:
7c:e3:ff:34:31:5a:23:64:a0:86:c3:58:c2:8d:9c:
90:4b:12:ff:82:33:cb:5a:50:12:5d:74:c4:1c:7b:
9d:43:8b:1b:4f:32:0b:aa:0a:e4:2a:c9:e5:89:86:
32:a4:09:a0:b7:2e:91:4f:d5:6a:70:62:58:ab:68:
13:14:41:29:ae:76:08:92:6c:54:07:d0:6b:2f:7d:
ec:21:32:03:fe:93:40:f8:7f:a7:1e:fc:25:e3:95:
59:bd:e5:31:66:83:9c:34:3e:29:bd:cf:58:8f:de:
ff:b3:e1:eb:cb:5e:e0:e0:67:a8:37:15:3e:99:e3:
62:22:11:43:87:c8:18:ce:eb:07:5e:77:42:13:8a:
94:9b:43:d1:0f:db:8d:bb:66:37:ce:e6:e2:77:4d:
57:67:8b:7f:da:9a:37:36:4f:65:c4:24:4f:07:00:
a2:86:9d:3d:bc:a0:79:94:96:93:d1:e0:fa:da:88:
1d:03:b2:f2:98:14:2d:1f:00:86:59:0a:99:88:bc:
97:0d:16:9c:5b:00:ee:a0:d3:dc:ce:d0:a2:62:28:
f4:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:B5:38:F6:44:4E:40:8B:15:E3:C6:14:46:C6:E3:91:34:CE:CB:CC
X509v3 Authority Key Identifier:
keyid:ED:77:BA:4F:32:F2:42:61:70:AF:C9:E2:59:14:C1:34:90:FF:5D:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Xe6TzLyQmFwr8niWRTBNJD_XbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/68707f-f2a8-4f53-ba5c-31dfbbb914ed/1/wLU49kROQIsV48YURsbjkTTOy8w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/68707f-f2a8-4f53-ba5c-31dfbbb914ed/1/7Xe6TzLyQmFwr8niWRTBNJD_XbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.64.124.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:7d:1e:f0:95:56:5a:4c:d5:bc:14:bf:b9:cf:fa:cc:30:0e:
bd:41:91:e6:41:9f:a2:5f:03:e0:96:82:b1:ac:07:23:52:78:
6a:ed:05:3c:4d:87:f0:e0:f3:d0:91:1b:94:dd:2c:f2:df:0f:
d4:f4:6e:4d:91:47:49:df:f1:7c:5f:da:04:77:a9:b1:c8:17:
82:9f:6f:00:a3:d1:d6:39:48:d7:49:0e:88:75:d0:68:a3:39:
74:b3:df:6c:4e:e9:2d:ff:d5:0d:fb:86:d1:b4:84:e6:50:24:
bd:7f:03:d3:8a:0a:1a:25:23:3b:88:f5:3d:bf:35:0e:c1:22:
69:9d:97:0c:e9:5c:bd:49:57:c2:a7:4d:a5:17:8e:45:a3:7e:
3e:f9:dc:af:6c:b9:5d:92:16:36:27:07:eb:f3:41:93:62:56:
d3:bf:e0:c1:3e:3b:d1:76:ae:f9:12:5a:71:72:41:83:37:b9:
d7:f4:8f:86:67:48:a8:28:6c:5c:d1:4d:b7:5a:44:fb:a3:5f:
bd:cf:b9:32:63:73:90:f2:e7:11:cc:90:43:8a:fe:8b:c6:9c:
9b:de:3b:38:24:43:ab:de:f9:a4:40:17:e8:39:29:20:0b:99:
88:3d:c8:0e:21:9f:d8:a4:e5:e5:6c:58:ee:59:ba:7e:32:ac:
9b:28:89:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:00:01 2025 by rpki-client