Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/FHkoO7XNkteJ4lMzdWqpwrbfn6o.roa
File: FHkoO7XNkteJ4lMzdWqpwrbfn6o.roa (raw, json)
Hash identifier: KtPxEg4nocbiHa7YGZeKQLqn2ZWTSJ/vzeJ1pn8OsX0=
Subject key identifier: 14:79:28:3B:B5:CD:92:D7:89:E2:53:33:75:6A:A9:C2:B6:DF:9F:AA
Certificate issuer: /CN=222c4585bd88fb27cadf29ee5bb95d6575fcef83
Certificate serial: 0185737AB95BE00B8479D6F378DA760195AC
Authority key identifier: 22:2C:45:85:BD:88:FB:27:CA:DF:29:EE:5B:B9:5D:65:75:FC:EF:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IixFhb2I-yfK3ynuW7ldZXX874M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/FHkoO7XNkteJ4lMzdWqpwrbfn6o.roa
Signing time: Mon 02 Jan 2023 17:15:00 +0000
ROA not before: Mon 02 Jan 2023 17:15:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57169
IP address blocks: 195.254.132.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:7a:b9:5b:e0:0b:84:79:d6:f3:78:da:76:01:95:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=222c4585bd88fb27cadf29ee5bb95d6575fcef83
Validity
Not Before: Jan 2 17:15:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1479283bb5cd92d789e25333756aa9c2b6df9faa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:33:de:1d:98:24:8b:a3:0b:8e:a3:1b:6a:d1:
0c:8e:4e:3d:4e:5d:f5:9f:eb:f2:ab:73:93:80:ba:
0e:6e:de:96:79:79:b4:d2:05:cc:d4:e1:3c:c3:0a:
34:f5:c3:da:99:90:e1:a9:9f:fa:1a:ae:0e:eb:05:
73:bf:20:63:88:99:6c:cf:50:4a:aa:b0:f3:15:97:
4b:28:6d:bc:c0:a5:28:7d:6e:46:47:9b:3f:b1:f3:
28:60:75:a7:90:24:f7:05:24:bc:0e:a8:ef:9a:f7:
fd:a4:52:2f:e4:34:b3:ee:1d:3f:dc:b4:13:f4:38:
80:f0:38:38:f6:ce:05:66:c2:f8:db:eb:b0:ec:62:
77:51:19:ec:8b:0a:93:8f:71:d1:13:0a:4b:ac:64:
89:93:1c:8d:d1:6f:4b:eb:47:00:04:b9:ef:09:1c:
73:0f:4a:12:87:ed:57:8d:8a:f5:d5:95:76:d2:27:
5b:fd:5a:88:ba:05:3d:65:1d:11:18:f2:4a:7a:40:
db:01:96:a2:2f:65:fd:ea:0f:52:b6:5f:69:9a:be:
dd:50:bc:74:39:76:d5:61:dc:8e:3a:36:0a:ea:d0:
05:f4:5c:83:fe:9e:42:61:35:62:5c:6f:8d:29:27:
84:f9:ea:cc:57:e8:69:52:6a:db:44:eb:c4:d9:ad:
6c:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:79:28:3B:B5:CD:92:D7:89:E2:53:33:75:6A:A9:C2:B6:DF:9F:AA
X509v3 Authority Key Identifier:
keyid:22:2C:45:85:BD:88:FB:27:CA:DF:29:EE:5B:B9:5D:65:75:FC:EF:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IixFhb2I-yfK3ynuW7ldZXX874M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/FHkoO7XNkteJ4lMzdWqpwrbfn6o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.254.132.0/24
Signature Algorithm: sha256WithRSAEncryption
45:cf:45:88:8e:0c:4a:50:dd:24:7a:e8:35:4e:39:6e:40:8a:
cf:e9:21:b4:7d:0f:25:10:ab:29:5e:f9:4e:ca:16:55:64:2c:
5b:d5:5b:bf:88:87:2e:d1:49:da:57:a5:df:46:e8:f8:71:a7:
32:10:d7:80:20:5c:30:c3:e3:07:34:1c:17:17:96:b5:76:6c:
81:90:97:0b:1e:97:83:be:78:25:2e:3c:80:42:98:63:3f:f6:
a3:f9:24:54:09:d0:ef:5a:d4:59:01:d8:94:7e:a2:8c:10:ae:
66:9b:94:a1:ca:fb:1c:a8:dd:cc:0a:36:71:4e:ac:3e:ba:30:
6a:f6:9d:f6:1c:fe:d7:23:aa:3c:93:71:b5:bf:25:13:f7:7d:
65:73:11:59:4c:12:b1:f9:35:5d:1c:91:a4:d9:69:2d:b4:c4:
2c:46:f3:57:93:ba:0c:01:88:cf:5b:7b:fc:cd:a7:2b:22:94:
b0:84:82:82:3d:00:89:53:77:72:8f:f6:8f:9f:27:fc:b2:90:
e7:59:26:14:82:20:12:6d:a7:bb:0b:e7:1f:7e:88:62:33:0d:
e8:7a:81:be:fb:cf:cc:96:e3:4c:6d:0c:85:65:ea:ff:27:bd:
1b:12:34:96:2f:c0:c5:3e:a1:26:96:a8:5c:a2:f7:22:66:c8:
00:e6:65:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:08:06 2025 by rpki-client