Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/rR0LSXdhP_halXzP90K_2n8UJwQ.roa
File: rR0LSXdhP_halXzP90K_2n8UJwQ.roa (raw, json)
Hash identifier: 423PbO+Wc9uZdLM/5sCNsO34trv6N+AyiOmx6OgEqe4=
Subject key identifier: AD:1D:0B:49:77:61:3F:F8:5A:95:7C:CF:F7:42:BF:DA:7F:14:27:04
Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial: 018570F0AB6204CDF69AE0A138DCB6961D31
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/rR0LSXdhP_halXzP90K_2n8UJwQ.roa
Signing time: Mon 02 Jan 2023 05:24:58 +0000
ROA not before: Mon 02 Jan 2023 05:24:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51393
IP address blocks: 195.136.2.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:f0:ab:62:04:cd:f6:9a:e0:a1:38:dc:b6:96:1d:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Validity
Not Before: Jan 2 05:24:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ad1d0b4977613ff85a957ccff742bfda7f142704
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:f5:f7:49:1e:67:57:3e:2e:fd:d6:82:ba:a2:
42:a9:fd:c9:b1:18:cc:ea:ef:ce:3c:0f:19:97:31:
f7:f7:9e:40:94:92:0c:f4:fe:0e:47:31:70:b8:39:
5d:e0:e2:09:9e:e0:2c:3e:e2:fd:ce:08:bd:64:b5:
64:00:fc:c2:29:31:5d:e5:23:17:58:bc:9c:15:9a:
5e:f1:93:b1:82:96:30:bb:0f:c9:92:29:e0:98:cc:
8b:89:70:25:7d:8e:2a:bf:75:93:0b:0e:40:76:b7:
dd:d4:61:25:e2:a7:d0:f4:d1:fd:05:e8:b5:11:d1:
5f:87:a4:0a:4c:96:23:3f:9f:32:ad:ca:06:01:5b:
86:9e:6e:35:6a:32:81:1c:1a:82:db:cf:69:66:7c:
2a:72:01:3f:25:98:c0:1e:20:4f:95:48:5f:a8:5b:
f4:cb:b6:f2:85:b3:4d:69:9e:38:32:04:76:18:c6:
40:cc:49:15:b0:46:2f:c5:10:c1:35:b6:4d:36:c3:
23:4d:4b:f4:ea:64:2a:0b:8f:ca:13:ba:4a:3a:cb:
83:a1:b4:40:e3:d5:07:f6:32:33:9e:2f:aa:a5:fc:
7e:f1:98:e9:61:5b:60:53:48:ab:5e:4c:f7:1a:56:
26:8c:bd:3b:12:f0:7b:9f:81:5f:ab:c9:20:9c:e3:
52:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:1D:0B:49:77:61:3F:F8:5A:95:7C:CF:F7:42:BF:DA:7F:14:27:04
X509v3 Authority Key Identifier:
keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/rR0LSXdhP_halXzP90K_2n8UJwQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.136.2.0/23
Signature Algorithm: sha256WithRSAEncryption
0f:2c:50:a8:f1:fd:2d:3e:97:22:ae:df:dd:9f:57:c5:66:3e:
45:5e:28:56:2d:ba:0d:55:a2:3f:df:6b:6f:9a:61:4e:40:98:
5c:dd:d6:6c:86:12:25:30:30:55:7d:92:18:36:28:5e:41:58:
87:f1:3b:c6:7a:76:54:78:b3:aa:24:bb:1c:7e:35:df:21:f8:
ac:4a:b0:fc:08:03:24:b3:8c:7d:35:d4:8b:5e:d9:8c:3a:cf:
5d:06:0d:21:2d:8c:c9:18:10:99:e4:10:a8:f8:9f:25:14:31:
da:31:e8:64:5b:82:c7:ab:30:31:c5:66:2c:aa:4c:a4:61:dd:
24:97:7d:10:fb:ea:0d:41:97:37:6d:d4:84:dc:48:ab:51:79:
77:e4:d5:78:f4:70:80:5a:6e:50:e4:6a:e9:d1:82:f1:d1:33:
93:47:c5:1e:14:d1:39:28:7c:65:00:b5:64:6f:42:b3:c1:9a:
c7:cf:f4:88:e2:f5:b8:aa:f7:42:ad:9a:10:18:1c:1f:e2:6b:
8f:a5:5a:3f:38:51:98:34:7d:2e:98:ba:e1:b5:e8:97:e7:00:
1b:58:94:ee:4c:8f:a3:cd:98:d7:4d:96:ef:27:43:d0:b7:15:
78:ef:0f:68:53:4c:76:e3:da:af:d1:1f:1d:4d:69:56:80:29:
b4:f8:81:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:03:29 2025 by rpki-client