Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/f66ebb-ad73-4483-ae33-d08e8b181556/1/s9XxIWVpoIYholtS6i8xwpmC2Ek.roa
File: s9XxIWVpoIYholtS6i8xwpmC2Ek.roa (raw, json)
Hash identifier: aLGEQN5bIqYUUB4qopBWeLxUvGCMBqBiK/VMP1wJvoc=
Subject key identifier: B3:D5:F1:21:65:69:A0:86:21:A2:5B:52:EA:2F:31:C2:99:82:D8:49
Certificate issuer: /CN=921c2eb0164c18390030c5e705c4a3479150df9e
Certificate serial: 0188CE5913EDFFB74C1CA2BBC20C33C96466
Authority key identifier: 92:1C:2E:B0:16:4C:18:39:00:30:C5:E7:05:C4:A3:47:91:50:DF:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/khwusBZMGDkAMMXnBcSjR5FQ354.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/f66ebb-ad73-4483-ae33-d08e8b181556/1/s9XxIWVpoIYholtS6i8xwpmC2Ek.roa
Signing time: Sun 18 Jun 2023 11:52:04 +0000
ROA not before: Sun 18 Jun 2023 11:52:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213098
IP address blocks: 195.62.88.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:ce:59:13:ed:ff:b7:4c:1c:a2:bb:c2:0c:33:c9:64:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=921c2eb0164c18390030c5e705c4a3479150df9e
Validity
Not Before: Jun 18 11:52:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b3d5f1216569a08621a25b52ea2f31c29982d849
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:a6:8a:de:8f:aa:e9:ba:06:e8:f0:96:25:a0:
c2:1e:a6:1a:9e:b6:5f:f1:a8:11:a3:5d:4f:94:2c:
0b:64:3b:92:28:89:14:38:01:5f:71:bd:40:40:5c:
0e:c8:a4:43:51:8e:66:5f:98:80:a9:7c:76:f0:94:
8d:c5:e7:93:89:52:34:80:a4:b8:1e:e5:31:b1:3c:
c7:c7:60:c7:76:ee:1a:d1:4b:70:2c:15:a4:08:18:
18:81:e6:c1:84:d0:d1:f4:d5:aa:a7:3e:a4:3e:c2:
b2:6c:13:73:a9:a8:5c:35:69:04:3e:62:ed:32:2d:
93:39:d6:f3:72:af:c9:50:12:b2:4e:af:25:e4:6c:
82:b1:ca:36:40:ca:c6:de:3e:f6:17:de:55:49:0f:
7a:d3:e5:13:80:bd:df:71:97:fe:da:9b:7f:b6:22:
89:4a:a8:77:6c:8d:88:46:3e:83:29:a2:0d:59:ee:
2f:88:72:d4:f4:05:a4:1f:dc:b9:a8:bc:51:a5:2f:
8c:50:03:48:35:bc:7a:d4:09:c0:25:81:73:a9:c1:
df:77:81:63:a0:50:09:82:ef:a3:5b:e8:ad:85:16:
33:f0:47:97:5b:9b:94:47:7d:d7:6d:8d:d6:42:62:
a7:09:7f:61:90:db:a0:8e:62:29:fd:47:31:b5:9a:
da:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:D5:F1:21:65:69:A0:86:21:A2:5B:52:EA:2F:31:C2:99:82:D8:49
X509v3 Authority Key Identifier:
keyid:92:1C:2E:B0:16:4C:18:39:00:30:C5:E7:05:C4:A3:47:91:50:DF:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/khwusBZMGDkAMMXnBcSjR5FQ354.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/f66ebb-ad73-4483-ae33-d08e8b181556/1/s9XxIWVpoIYholtS6i8xwpmC2Ek.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/f66ebb-ad73-4483-ae33-d08e8b181556/1/khwusBZMGDkAMMXnBcSjR5FQ354.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.62.88.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:78:c3:70:d3:cc:cd:46:4b:35:73:f3:aa:e7:7b:bc:e1:be:
37:4f:b6:35:0a:9b:41:91:3a:19:7c:e3:5f:16:4e:74:73:3a:
46:1d:36:1a:38:b6:ae:d2:91:c7:e8:02:41:85:50:5a:f3:be:
62:03:03:1f:43:0e:74:1b:a4:63:03:f2:a2:a0:c8:f9:3c:42:
f7:d0:dd:5b:b5:cd:e0:33:59:45:fc:26:70:68:06:ba:cd:8b:
55:4e:c9:8a:93:07:ef:5b:29:84:93:a2:1e:3c:f8:6b:d5:c9:
6b:57:c0:29:7f:c3:3d:73:cd:c3:64:76:f3:13:78:45:f2:54:
55:98:fe:0f:96:38:21:c1:0e:16:9c:66:9b:7d:b6:18:69:2b:
60:ae:db:a0:f9:a8:63:2c:35:a6:4a:98:e8:e1:ca:b6:e7:7a:
41:51:4a:ef:e8:b8:fc:48:f1:ae:7d:70:35:5d:47:65:db:04:
2d:f8:67:3e:1a:26:86:63:88:f9:9a:cf:1d:59:e0:c8:ee:fc:
4b:00:fe:db:f6:dd:9f:6b:ea:8b:75:dc:be:65:87:4b:9a:73:
e2:7f:dd:2f:82:5c:a4:f3:f6:b1:01:bf:16:8b:60:66:b6:fa:
e8:88:df:7f:fd:b6:51:a9:42:91:e5:76:58:a6:fe:27:c6:8c:
3a:bd:0a:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:35:06 2025 by rpki-client