Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/qhvZKiHX9UC0r6EgLRypaCA-AYw.roa
File: qhvZKiHX9UC0r6EgLRypaCA-AYw.roa (raw, json)
Hash identifier: ErbEonCxrw1AOw+bq/KA+PV7dHUmSSzEm2H4xXmGYws=
Subject key identifier: AA:1B:D9:2A:21:D7:F5:40:B4:AF:A1:20:2D:1C:A9:68:20:3E:01:8C
Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial: 0187279914FD7DA738D542EA4A95578EEE60
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/qhvZKiHX9UC0r6EgLRypaCA-AYw.roa
Signing time: Tue 28 Mar 2023 09:42:36 +0000
ROA not before: Tue 28 Mar 2023 09:42:36 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43153
IP address blocks: 195.136.160.0/24 maxlen: 24
195.136.160.0/23 maxlen: 23
195.136.192.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:27:99:14:fd:7d:a7:38:d5:42:ea:4a:95:57:8e:ee:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Validity
Not Before: Mar 28 09:42:36 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aa1bd92a21d7f540b4afa1202d1ca968203e018c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:4a:bf:1f:ca:be:40:a1:68:ef:32:08:a1:6d:
2b:5f:16:e9:0b:cd:42:b5:f1:8d:50:4c:13:d9:45:
ae:3e:0c:06:e3:f7:d3:9b:34:18:79:dd:c6:25:3c:
99:d3:a8:2c:2f:22:75:60:00:99:32:0c:bf:6e:99:
ab:b6:1e:2b:aa:7b:6e:dd:8c:98:2f:ce:dd:e3:e9:
0c:0e:bd:e4:a1:f9:e4:72:da:99:55:69:0c:bc:24:
ad:3d:82:f5:5c:8a:bc:dd:12:bd:87:94:04:85:81:
51:38:da:83:2c:53:59:09:21:5f:20:0d:d3:66:13:
3f:2e:d5:db:ac:d5:83:35:18:64:4e:dc:56:68:c5:
3b:f3:e4:0e:6e:ae:b9:5b:cb:88:60:b5:88:d7:b8:
1b:61:32:ae:f5:a3:d8:36:5d:5f:dd:b1:50:4f:35:
f6:5d:a5:b7:b3:e3:0c:fa:75:37:80:46:fe:64:a9:
9a:70:2b:79:59:16:37:d6:d2:02:e1:55:95:b4:1d:
32:e3:6c:ee:27:a4:b4:1a:9e:1e:b5:97:56:a3:12:
74:d0:7f:34:e1:9c:52:64:0c:f4:b3:a1:a0:03:84:
45:a2:ea:f6:f1:5f:19:70:df:24:4c:d6:58:6d:c7:
00:32:cb:11:53:fa:e7:3f:c9:a7:f7:e1:44:9c:24:
66:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:1B:D9:2A:21:D7:F5:40:B4:AF:A1:20:2D:1C:A9:68:20:3E:01:8C
X509v3 Authority Key Identifier:
keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/qhvZKiHX9UC0r6EgLRypaCA-AYw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.136.160.0/23
195.136.192.0/23
Signature Algorithm: sha256WithRSAEncryption
08:9e:1a:a1:06:9e:69:64:32:2e:20:21:94:ba:58:97:8e:70:
8f:6a:40:51:9f:69:e2:ef:6f:2b:9f:19:d8:b4:77:99:a8:88:
a9:21:2e:05:f8:db:82:80:9a:eb:57:06:da:3a:5e:64:4c:24:
b9:bc:8a:0f:42:ca:13:5f:cc:a3:61:ff:99:40:d1:04:2c:41:
bb:81:8d:a7:cd:4d:08:57:19:3e:58:36:90:d9:a7:b1:a8:e5:
aa:4c:26:3d:c7:2d:32:d2:28:7f:9b:54:98:61:db:b1:b8:59:
28:91:75:4e:bd:be:12:c5:b2:02:1d:b8:df:ef:26:09:89:6a:
c6:14:95:f1:2f:7e:9c:d2:3c:d8:d0:ed:6b:52:9f:15:12:bd:
07:d9:c6:4a:dc:47:fd:e5:ea:86:fa:89:46:5f:4d:dc:4a:26:
c7:84:37:ce:e3:b3:db:98:20:88:78:56:83:59:77:8a:e8:4e:
2e:b8:60:f0:9c:18:6c:d4:8e:5d:22:9a:38:7b:55:51:05:ad:
04:3f:ca:15:b1:43:12:19:4f:91:6c:87:dd:94:14:29:a9:65:
3c:08:c3:3e:81:a9:f7:d4:ca:e0:9d:29:13:15:d8:7a:e8:a1:
1c:65:a1:c0:be:06:ff:54:77:09:bf:8d:1e:a6:50:2d:c0:cd:
c2:eb:c1:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:56:57 2025 by rpki-client