Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/c8d54b-e586-4595-93e2-868babc6dd32/1/vixhGnmWI7JMMiZjm-UdvsaIMhY.roa
File: vixhGnmWI7JMMiZjm-UdvsaIMhY.roa (raw, json)
Hash identifier: ELb1Ma1bMVhIemvoF9B3eSpkJpK1kQxve7ZbAaAqocU=
Subject key identifier: BE:2C:61:1A:79:96:23:B2:4C:32:26:63:9B:E5:1D:BE:C6:88:32:16
Certificate issuer: /CN=7cf589a31174b884a64fd091ad5c2cba5545bbdc
Certificate serial: 018CC56DE360B38A194642E32F394FCACE56
Authority key identifier: 7C:F5:89:A3:11:74:B8:84:A6:4F:D0:91:AD:5C:2C:BA:55:45:BB:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fPWJoxF0uISmT9CRrVwsulVFu9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/c8d54b-e586-4595-93e2-868babc6dd32/1/vixhGnmWI7JMMiZjm-UdvsaIMhY.roa
Signing time: Mon 01 Jan 2024 14:29:22 +0000
ROA not before: Mon 01 Jan 2024 14:29:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 398464
IP address blocks: 195.64.125.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6d:e3:60:b3:8a:19:46:42:e3:2f:39:4f:ca:ce:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7cf589a31174b884a64fd091ad5c2cba5545bbdc
Validity
Not Before: Jan 1 14:29:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=be2c611a799623b24c3226639be51dbec6883216
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:41:b3:99:63:06:00:c3:db:17:a4:ce:fe:50:
24:8c:9b:07:f0:a9:42:6a:85:be:f0:f0:d8:d3:8a:
73:87:7e:7c:f9:d3:fd:53:6a:e4:07:83:a7:e7:46:
bf:46:28:2d:3f:86:6b:60:01:b0:c7:50:12:65:38:
8c:cb:08:71:50:83:c2:b7:96:8b:9e:bb:60:7b:46:
7b:5d:21:2f:96:02:9a:b3:59:e9:88:60:bd:b3:32:
c9:51:9e:f0:75:14:33:5c:ab:ae:88:c4:3b:2f:88:
72:de:87:04:72:ac:ef:86:34:a5:af:d8:ef:75:b3:
7e:b9:ee:9c:5f:c5:ae:95:37:36:d1:df:bf:25:ae:
61:dd:a2:58:91:15:9a:72:1f:1f:00:84:36:c6:18:
f3:14:0e:28:f9:5c:50:b8:74:6b:c6:f7:d6:39:e8:
d0:b6:bd:40:7b:2d:b6:5f:e4:2c:a2:f5:6a:9f:d2:
d3:6e:25:52:b3:1f:51:52:b5:53:94:19:b0:c3:83:
f8:89:60:08:d4:a7:1b:1a:52:bc:ae:3a:54:3a:e9:
d4:f5:18:3a:fb:37:2a:3f:7f:38:72:8e:62:4c:1d:
4d:49:18:64:1d:6b:5a:30:64:48:0d:33:74:9f:8d:
65:f7:6a:61:d5:28:8f:35:ce:fb:be:e6:2d:63:37:
81:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:2C:61:1A:79:96:23:B2:4C:32:26:63:9B:E5:1D:BE:C6:88:32:16
X509v3 Authority Key Identifier:
keyid:7C:F5:89:A3:11:74:B8:84:A6:4F:D0:91:AD:5C:2C:BA:55:45:BB:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fPWJoxF0uISmT9CRrVwsulVFu9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c8d54b-e586-4595-93e2-868babc6dd32/1/vixhGnmWI7JMMiZjm-UdvsaIMhY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c8d54b-e586-4595-93e2-868babc6dd32/1/fPWJoxF0uISmT9CRrVwsulVFu9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.64.125.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:0b:50:4d:93:29:9f:94:8c:16:9a:83:f2:87:a2:93:b5:0c:
ba:5e:dd:80:60:5b:30:f9:1d:26:ee:5e:88:7c:f8:d2:b2:24:
18:11:6a:d9:51:7d:6c:1d:f3:31:81:96:c3:e5:81:61:06:2e:
5b:d7:c5:b1:9a:82:f1:32:08:fa:8a:eb:4d:a7:a5:e9:b6:e1:
d3:55:51:84:90:94:b0:bb:2a:52:65:a7:cc:0b:ea:08:e3:10:
84:35:26:8c:8c:2e:9c:1f:15:dc:45:47:2f:41:3e:32:7b:a1:
d5:6a:12:ed:88:f1:53:4e:cd:cc:bf:a3:63:d7:16:a6:9f:a9:
ad:a2:06:cd:8b:44:3d:c3:0e:00:58:ed:59:f9:10:5d:59:18:
8b:53:39:6b:24:86:28:d6:f4:6d:81:7c:16:76:da:c0:07:11:
b7:db:3e:7a:fe:cb:c8:af:3a:06:ec:98:a7:5c:97:49:a6:90:
ad:60:20:0a:16:2a:54:c8:72:3d:35:18:cf:6d:f5:23:a8:71:
5c:d8:38:4b:2c:85:bb:45:8e:a0:5a:1d:c3:20:61:d8:48:a6:
7e:20:a0:2f:50:18:fc:65:c2:ff:ba:6c:ca:d3:08:70:dc:d9:
d8:f3:ae:9b:66:12:af:43:4f:7e:64:c3:46:97:56:66:de:94:
75:c0:16:dd
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzFbeNgs4oZRkLjLzlPys5WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjZjU4OWEzMTE3NGI4ODRhNjRmZDA5MWFkNWMyY2JhNTU0
NWJiZGMwHhcNMjQwMTAxMTQyOTIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZTJjNjExYTc5OTYyM2IyNGMzMjI2NjM5YmU1MWRiZWM2ODgzMjE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtkGzmWMGAMPbF6TO/lAkjJsH8KlC
aoW+8PDY04pzh358+dP9U2rkB4On50a/RigtP4ZrYAGwx1ASZTiMywhxUIPCt5aL
nrtge0Z7XSEvlgKas1npiGC9szLJUZ7wdRQzXKuuiMQ7L4hy3ocEcqzvhjSlr9jv
dbN+ue6cX8WulTc20d+/Ja5h3aJYkRWach8fAIQ2xhjzFA4o+VxQuHRrxvfWOejQ
tr1Aey22X+QsovVqn9LTbiVSsx9RUrVTlBmww4P4iWAI1KcbGlK8rjpUOunU9Rg6
+zcqP384co5iTB1NSRhkHWtaMGRIDTN0n41l92ph1SiPNc77vuYtYzeBawIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFL4sYRp5liOyTDImY5vlHb7GiDIWMB8GA1UdIwQY
MBaAFHz1iaMRdLiEpk/Qka1cLLpVRbvcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlBXSm94RjB1SVNtVDlDUnJWd3N1bFZGdTl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9jOGQ1NGItZTU4Ni00NTk1LTkzZTIt
ODY4YmFiYzZkZDMyLzEvdml4aEdubVdJN0pNTWlaam0tVWR2c2FJTWhZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS9jOGQ1NGItZTU4Ni00NTk1LTkzZTItODY4YmFiYzZkZDMy
LzEvZlBXSm94RjB1SVNtVDlDUnJWd3N1bFZGdTl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw0B9MA0G
CSqGSIb3DQEBCwUAA4IBAQA/C1BNkymflIwWmoPyh6KTtQy6Xt2AYFsw+R0m7l6I
fPjSsiQYEWrZUX1sHfMxgZbD5YFhBi5b18WxmoLxMgj6iutNp6XptuHTVVGEkJSw
uypSZafMC+oI4xCENSaMjC6cHxXcRUcvQT4ye6HVahLtiPFTTs3Mv6Nj1xamn6mt
ogbNi0Q9ww4AWO1Z+RBdWRiLUzlrJIYo1vRtgXwWdtrABxG32z56/svIrzoG7Jin
XJdJppCtYCAKFipUyHI9NRjPbfUjqHFc2DhLLIW7RY6gWh3DIGHYSKZ+IKAvUBj8
ZcL/umzK0whw3NnY866bZhKvQ09+ZMNGl1Zm3pR1wBbd
-----END CERTIFICATE-----
Generated at Mon Apr 29 14:03:28 2024 by rpki-client on console-fra.rpki-client.org