Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/3GveApo-JpfMFQELlia0S9ujMCs.roa
File: 3GveApo-JpfMFQELlia0S9ujMCs.roa (raw, json)
Hash identifier: irpIqB2pSiEnMlpLiyBol7Ul8AnrgubHiW4wpNkIyS0=
Subject key identifier: DC:6B:DE:02:9A:3E:26:97:CC:15:01:0B:96:26:B4:4B:DB:A3:30:2B
Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial: 018570F09B89B485D7B0496E9DD66571F4F2
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/3GveApo-JpfMFQELlia0S9ujMCs.roa
Signing time: Mon 02 Jan 2023 05:24:54 +0000
ROA not before: Mon 02 Jan 2023 05:24:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25070
IP address blocks: 195.136.174.0/24 maxlen: 24
195.136.182.0/23 maxlen: 23
195.136.180.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:f0:9b:89:b4:85:d7:b0:49:6e:9d:d6:65:71:f4:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Validity
Not Before: Jan 2 05:24:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dc6bde029a3e2697cc15010b9626b44bdba3302b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:ca:9b:05:88:e5:a5:d2:e9:3c:bd:34:29:e0:
aa:69:17:05:f1:d1:00:d7:c3:9f:67:65:e5:49:00:
81:27:6a:68:7d:e3:ff:4e:4d:da:e6:08:c9:80:b6:
46:96:12:ae:3b:49:01:e6:70:62:9f:83:16:99:b5:
18:38:0a:bf:a6:2e:80:42:3f:1a:f7:35:50:81:87:
09:7f:ad:1a:0c:40:04:db:fe:98:af:bb:e5:2e:51:
43:6a:09:9d:da:5e:5c:99:7e:72:79:35:bb:95:7d:
fd:7e:ab:39:fe:ab:76:86:38:3c:c3:40:05:62:ae:
d6:33:ad:c4:10:e1:dc:62:25:02:cd:e0:c7:d7:36:
25:81:84:0e:0f:a3:2c:be:b7:18:18:c9:48:55:05:
85:68:8c:69:fc:09:48:f8:20:be:40:2f:7f:6a:e9:
7a:42:d5:fd:92:45:bf:13:62:41:ac:35:15:a5:ae:
dd:5a:35:80:65:78:c3:cf:69:b9:4a:9c:4e:e8:ec:
a5:1b:c5:77:3d:d6:2e:55:39:39:30:8c:f2:a6:79:
6f:84:1b:6a:32:45:14:c0:91:44:d9:b6:8c:3d:13:
a6:39:f6:bb:49:c9:af:97:1c:57:bb:22:df:73:a4:
6f:ab:ac:d6:fb:80:97:b5:1c:fa:a0:52:84:ea:1f:
d1:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:6B:DE:02:9A:3E:26:97:CC:15:01:0B:96:26:B4:4B:DB:A3:30:2B
X509v3 Authority Key Identifier:
keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/3GveApo-JpfMFQELlia0S9ujMCs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.136.174.0/24
195.136.180.0/22
Signature Algorithm: sha256WithRSAEncryption
73:9e:1d:93:3c:bd:56:1d:cf:37:82:49:58:72:cf:b7:89:1d:
f6:e9:a5:cd:be:76:47:14:c0:25:57:d6:3d:8a:b6:fc:ba:b5:
36:d2:93:2c:6e:0f:61:99:84:25:e4:36:00:4b:1c:1f:d8:cd:
43:9a:f3:41:35:53:61:52:3a:aa:23:76:c2:9a:d8:ba:e7:7f:
ae:37:bf:4e:14:d7:ff:26:74:5c:4e:fc:85:ed:f1:52:e0:4e:
2c:cc:88:b7:d3:41:27:a8:9c:03:68:d7:fc:a6:d3:54:84:cc:
c2:2d:c3:43:e3:b1:87:0e:14:60:e4:c1:11:4c:f1:11:57:47:
5b:93:4b:10:ac:8b:7e:90:d1:22:33:53:08:5a:17:4e:05:f5:
9c:21:0c:e8:90:df:d4:80:c1:c0:01:2d:9c:cc:a6:ad:07:6e:
52:c1:84:b9:3e:fe:ff:3f:24:ac:66:db:70:ca:17:27:10:5d:
11:aa:61:6f:18:fc:5b:90:80:14:39:eb:92:a0:b4:ef:c3:b2:
ea:05:ca:7e:ba:32:79:6a:5a:fb:1b:e2:aa:62:d4:4d:e4:db:
41:91:22:c2:b5:e7:43:12:56:8f:a9:bb:a0:b3:be:2d:20:fc:
b3:88:0b:c1:c3:f1:f8:86:ee:ab:21:c3:d4:b5:fc:b6:80:5e:
46:17:2e:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:08:42 2025 by rpki-client