Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/a2f211-8618-43c3-9117-7aeee3ad7436/1/OVZNKEszVhAJh-vQbtUO6A7beTM.roa
File: OVZNKEszVhAJh-vQbtUO6A7beTM.roa (raw, json)
Hash identifier: oJbZ8tXjE9kGmveOiLsoY0EtqEnPlkhAWmkwOC/wslw=
Subject key identifier: 39:56:4D:28:4B:33:56:10:09:87:EB:D0:6E:D5:0E:E8:0E:DB:79:33
Certificate issuer: /CN=215c52ef97e3d55798efe83474d2030082b9b3a2
Certificate serial: 0194228DF36C0E13613421500F330B3B5841
Authority key identifier: 21:5C:52:EF:97:E3:D5:57:98:EF:E8:34:74:D2:03:00:82:B9:B3:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IVxS75fj1VeY7-g0dNIDAIK5s6I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/a2f211-8618-43c3-9117-7aeee3ad7436/1/OVZNKEszVhAJh-vQbtUO6A7beTM.roa
Signing time: Wed 01 Jan 2025 15:48:35 +0000
ROA not before: Wed 01 Jan 2025 15:48:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16354
IP address blocks: 195.160.182.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:f3:6c:0e:13:61:34:21:50:0f:33:0b:3b:58:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=215c52ef97e3d55798efe83474d2030082b9b3a2
Validity
Not Before: Jan 1 15:48:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=39564d284b3356100987ebd06ed50ee80edb7933
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:e5:12:46:b3:64:e9:92:db:8f:25:04:ed:df:
82:60:39:9a:64:a6:1c:dd:c8:02:47:47:01:59:c0:
c3:cf:82:f6:7a:5e:46:aa:6f:2e:d2:05:ca:97:10:
44:98:89:d3:fa:29:e5:c2:5b:ee:51:0c:8c:ce:4f:
6c:7a:da:e9:ea:bf:7b:62:6b:9d:d9:45:a5:a4:31:
e6:ac:2a:81:04:7b:63:ad:99:64:40:d3:83:c7:c8:
47:2d:f3:16:b2:b6:cf:55:13:05:c3:e5:c4:28:d2:
08:63:bf:bf:56:c4:54:ad:7e:00:f8:44:94:eb:e1:
07:91:47:c5:99:51:01:ff:d3:60:49:f0:6d:74:1c:
29:98:86:97:07:f1:30:ff:ed:a0:2b:34:20:0e:2c:
be:fd:b2:07:a9:ee:ac:d4:66:d1:a8:06:52:51:35:
45:27:32:e1:4c:66:63:f6:61:60:37:8b:1b:cd:5b:
5e:49:4b:f4:b3:ef:08:c9:a1:0c:11:c9:1b:1f:11:
eb:4d:ff:e2:e6:a9:db:29:9b:ee:75:be:4e:c9:27:
2f:67:0d:62:06:eb:a8:7a:38:e9:98:d9:51:b4:4c:
64:40:87:2a:2a:2f:bc:4e:93:43:47:fa:d4:6f:ba:
dc:2c:01:75:49:7a:2b:fe:af:6a:7b:85:18:da:63:
22:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:56:4D:28:4B:33:56:10:09:87:EB:D0:6E:D5:0E:E8:0E:DB:79:33
X509v3 Authority Key Identifier:
keyid:21:5C:52:EF:97:E3:D5:57:98:EF:E8:34:74:D2:03:00:82:B9:B3:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IVxS75fj1VeY7-g0dNIDAIK5s6I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/a2f211-8618-43c3-9117-7aeee3ad7436/1/OVZNKEszVhAJh-vQbtUO6A7beTM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/a2f211-8618-43c3-9117-7aeee3ad7436/1/IVxS75fj1VeY7-g0dNIDAIK5s6I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.160.182.0/23
Signature Algorithm: sha256WithRSAEncryption
7b:5b:7d:26:30:ef:7d:17:18:54:54:64:88:3b:cc:b1:dd:96:
96:8a:81:83:f1:1c:34:a2:49:67:5d:18:ac:b4:48:ea:44:cd:
89:a3:53:4c:d9:6a:4e:10:9c:48:77:a0:80:10:e1:a0:cc:d4:
c5:98:f4:22:15:1a:be:5f:66:74:e2:72:f5:a7:02:90:14:98:
ee:93:48:a7:d8:60:d0:52:9b:6e:2d:45:62:4a:5a:51:07:d1:
95:e0:4b:8a:be:bd:db:5d:fa:d9:56:df:a2:d1:59:d2:c1:88:
1e:c6:7d:0c:40:ba:78:9f:9c:ef:0b:6b:e0:40:f7:21:e1:e8:
48:d0:b7:e9:3a:ae:64:dd:2b:91:e5:5f:45:76:3a:af:e1:97:
64:ec:6a:5b:64:85:e7:e3:c2:cd:84:ed:68:c8:09:8d:85:86:
ac:53:3a:be:10:77:49:28:8f:96:2f:8c:8d:6f:ae:cc:cd:e1:
7a:47:40:a8:b9:03:1d:b8:f2:ca:97:54:e7:2b:b3:94:30:3e:
0f:b3:05:45:84:e6:65:aa:3f:dd:2e:fd:3b:2c:a3:0f:87:de:
e1:14:b6:56:e8:bd:43:ec:31:23:7a:27:b4:67:91:76:de:b6:
16:89:4a:8d:1c:c6:11:cd:dc:3e:85:6b:12:a6:33:2e:bf:de:
af:b3:54:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:48:01 2025 by rpki-client