Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/f66ebb-ad73-4483-ae33-d08e8b181556/1/duBUevlcFeJMbpTQ-6HxIIMMYVM.roa
File: duBUevlcFeJMbpTQ-6HxIIMMYVM.roa (raw, json)
Hash identifier: 6PoJ3jDpPmY8oIipjU7Jwawcd4mG0My1knhSSVMb/wM=
Subject key identifier: 76:E0:54:7A:F9:5C:15:E2:4C:6E:94:D0:FB:A1:F1:20:83:0C:61:53
Certificate issuer: /CN=921c2eb0164c18390030c5e705c4a3479150df9e
Certificate serial: 018484205C880884D68926D3B84F533E13E0
Authority key identifier: 92:1C:2E:B0:16:4C:18:39:00:30:C5:E7:05:C4:A3:47:91:50:DF:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/khwusBZMGDkAMMXnBcSjR5FQ354.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/f66ebb-ad73-4483-ae33-d08e8b181556/1/duBUevlcFeJMbpTQ-6HxIIMMYVM.roa
Signing time: Thu 17 Nov 2022 05:47:03 +0000
ROA not before: Thu 17 Nov 2022 05:47:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 213098
IP address blocks: 195.62.88.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:84:20:5c:88:08:84:d6:89:26:d3:b8:4f:53:3e:13:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=921c2eb0164c18390030c5e705c4a3479150df9e
Validity
Not Before: Nov 17 05:47:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=76e0547af95c15e24c6e94d0fba1f120830c6153
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:0d:e1:73:3f:19:77:bb:31:bc:53:0b:ce:5b:
e9:ee:fb:94:84:30:7c:7e:8f:aa:07:64:64:bc:28:
8a:b0:c5:19:9c:ed:7c:4f:82:2a:49:56:1d:e4:05:
59:e3:12:57:15:ad:90:88:5e:50:dc:88:c8:88:7d:
e3:3a:e5:d1:d0:65:ab:88:35:3a:ae:b3:a0:34:06:
8a:e2:3d:90:55:2c:c1:06:0b:b4:35:d4:85:9d:06:
17:ff:3b:85:32:ca:35:f4:1d:80:69:32:7d:f0:61:
a9:da:fc:94:c4:e0:42:67:83:c2:f9:30:62:65:e6:
55:76:47:b9:7c:10:e6:af:32:bb:7f:6a:15:18:ae:
4e:ce:51:74:62:cf:fb:fc:b2:50:5c:9b:4b:c7:2f:
9f:29:5d:44:dd:6f:be:7b:10:6e:b6:54:01:83:3a:
83:64:a3:9c:4a:ba:35:f4:e0:2c:62:51:c6:b6:2d:
d2:5a:dd:1c:c6:52:c4:ac:11:44:23:36:f7:59:8b:
d8:81:f2:a0:cc:85:3a:cc:58:c1:c6:be:2d:73:d2:
54:2e:bb:79:c1:98:f4:65:4b:4e:c4:78:71:eb:35:
0f:c2:92:c0:72:68:83:ca:52:bb:fa:4c:f4:87:f6:
72:54:bf:d0:48:73:1a:17:d1:c5:51:c7:18:25:4a:
c7:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:E0:54:7A:F9:5C:15:E2:4C:6E:94:D0:FB:A1:F1:20:83:0C:61:53
X509v3 Authority Key Identifier:
keyid:92:1C:2E:B0:16:4C:18:39:00:30:C5:E7:05:C4:A3:47:91:50:DF:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/khwusBZMGDkAMMXnBcSjR5FQ354.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/f66ebb-ad73-4483-ae33-d08e8b181556/1/duBUevlcFeJMbpTQ-6HxIIMMYVM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/f66ebb-ad73-4483-ae33-d08e8b181556/1/khwusBZMGDkAMMXnBcSjR5FQ354.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.62.88.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:66:99:bc:17:b1:e6:e7:c2:d2:23:e8:aa:c6:26:3c:5b:38:
92:a8:d6:0c:92:54:af:06:f0:ac:af:a0:7c:95:39:7c:83:3f:
56:ee:ea:db:d7:ba:11:85:73:ca:4a:04:d4:72:8b:2c:09:17:
5b:34:c1:51:b9:5c:00:16:27:48:98:04:dc:bb:26:17:97:18:
63:a6:be:f1:4c:b8:87:c3:43:e4:01:b0:71:80:0f:4b:e9:f3:
d9:78:c8:82:2f:60:33:47:80:b5:2a:4d:06:20:1d:92:fb:b6:
76:eb:30:bc:a3:48:87:23:f3:0f:5a:d0:85:a3:63:8f:a7:30:
2a:c5:af:46:5c:88:4a:c4:16:a7:11:79:12:80:8f:e2:21:6a:
6f:e8:46:0a:91:cd:51:8a:55:12:52:a9:1a:8a:93:4e:2c:66:
99:d8:a3:ff:c5:1e:85:58:50:78:fe:1e:af:34:bf:f2:fa:f9:
9a:35:1c:d1:79:13:d8:c4:b9:a8:35:a7:b8:99:df:96:9b:ea:
96:68:33:9a:c5:b3:31:e8:f5:86:90:37:ef:fc:65:fd:db:bf:
e5:c8:d1:d7:33:ff:c0:fd:a9:e0:7e:72:f2:8f:ef:0f:71:e2:
47:9c:c6:65:35:50:37:0d:9b:0f:77:c3:94:74:44:8b:9b:10:
87:7a:e4:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:51:27 2025 by rpki-client