Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/pF23HI1TjyCDRG3Ur7-n2f3RtEQ.roa
File: pF23HI1TjyCDRG3Ur7-n2f3RtEQ.roa (raw, json)
Hash identifier: QOUp6RW2VEgrbrGPr/1yWxLOJVT4GRhQPUYwgVEKYCw=
Subject key identifier: A4:5D:B7:1C:8D:53:8F:20:83:44:6D:D4:AF:BF:A7:D9:FD:D1:B4:44
Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial: 018570F0C735703EC8F8A606ACFFA51DD38F
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/pF23HI1TjyCDRG3Ur7-n2f3RtEQ.roa
Signing time: Mon 02 Jan 2023 05:25:05 +0000
ROA not before: Mon 02 Jan 2023 05:25:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206781
IP address blocks: 195.136.28.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:f0:c7:35:70:3e:c8:f8:a6:06:ac:ff:a5:1d:d3:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Validity
Not Before: Jan 2 05:25:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a45db71c8d538f2083446dd4afbfa7d9fdd1b444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:10:c5:20:35:84:9f:bb:15:1b:68:13:e5:13:
1b:97:37:a1:2c:94:da:0a:95:36:ce:cd:69:19:d1:
06:57:85:31:ea:2c:44:c6:d9:bc:b9:4e:bb:da:68:
bb:e1:c9:57:23:92:16:63:66:6b:1c:cd:5b:f0:48:
25:73:91:39:d0:ed:c8:2a:c4:82:48:b2:35:b3:de:
70:52:92:a2:83:3f:df:00:ca:ec:94:8e:59:5b:6d:
60:53:5b:0d:e6:67:61:79:b8:5e:38:e9:8c:3f:32:
de:b0:98:0c:51:e6:5e:6d:23:f4:86:c3:d2:e3:6b:
fb:09:1a:49:53:da:7a:3b:a7:22:fd:e6:59:52:b2:
93:cc:19:9d:76:b5:37:6d:5a:1d:ea:0d:1f:af:1d:
08:ec:6a:d7:23:49:92:65:b4:69:f0:41:8e:96:e2:
f9:3e:49:c0:1a:f9:16:ed:8b:86:ef:d8:9b:55:6e:
59:60:5f:90:d5:ae:17:1e:70:cf:84:08:9b:99:cb:
c8:95:8d:23:87:a3:aa:7b:0a:d1:27:68:8b:ae:d1:
c9:22:67:b0:cd:7e:e7:d8:0c:38:cc:4b:c2:20:be:
ee:f6:37:e8:2f:20:97:75:43:2d:54:33:d2:90:36:
94:72:d4:bb:93:0a:ca:40:e1:a9:51:6e:0f:bb:33:
b2:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:5D:B7:1C:8D:53:8F:20:83:44:6D:D4:AF:BF:A7:D9:FD:D1:B4:44
X509v3 Authority Key Identifier:
keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/pF23HI1TjyCDRG3Ur7-n2f3RtEQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.136.28.0/22
Signature Algorithm: sha256WithRSAEncryption
b4:47:47:70:81:f1:c0:ea:99:dd:d4:65:4c:fd:58:3b:95:ac:
c3:80:25:ce:1b:ff:d0:42:e4:83:f0:32:e7:f4:1d:27:bf:ea:
15:7d:08:b7:c1:66:d6:40:56:55:92:2f:30:6c:7c:2a:24:46:
f8:2e:19:a6:29:bb:cd:6c:db:e3:4f:0d:f9:d5:b9:6f:7c:00:
58:58:93:dd:4c:70:5d:9e:d8:bc:a3:47:93:6e:d4:15:bd:85:
6a:53:10:30:2a:a3:3a:33:2c:4a:0e:9a:80:58:cd:a8:84:cc:
a0:44:df:3f:8c:2a:8f:10:30:e4:6c:b3:cf:d6:87:6f:aa:d7:
0b:f6:48:70:4c:fb:33:f1:7d:c8:02:67:20:ad:a4:41:26:13:
e5:77:56:e7:99:76:70:ad:69:1b:4c:af:d8:f0:1f:7c:af:b8:
17:e3:72:ca:66:90:43:99:f4:70:5a:bc:df:0b:16:8f:7b:d7:
6c:97:e5:04:2d:c3:59:97:8c:8b:15:e7:d8:c6:42:2a:e4:08:
c2:c2:ce:30:ad:3a:8f:71:b7:04:e5:a6:a3:ba:79:fa:0d:dc:
69:9f:c5:1e:f7:5c:31:0e:3b:84:82:93:72:10:8e:c9:6b:5c:
7f:cf:84:86:74:fc:2c:c3:26:27:12:0e:4e:f2:6f:83:d3:6f:
2f:bc:8a:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:08:14 2025 by rpki-client