Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/8e37d3-c632-48b8-9b0b-5012054f9d26/1/92EoqcSTMJnZ_sfNtHa3yrAcLPQ.roa
File: 92EoqcSTMJnZ_sfNtHa3yrAcLPQ.roa (raw, json)
Hash identifier: VxY1ErP/FHmUGVehmVTQ0wff2C4RNGVCWzctoW+PzvM=
Subject key identifier: F7:61:28:A9:C4:93:30:99:D9:FE:C7:CD:B4:76:B7:CA:B0:1C:2C:F4
Certificate issuer: /CN=a5915bc8a982fe61eb4aed5418323288329504d7
Certificate serial: 018CC7955BDD1E0D7905DEB704E68E8FADD2
Authority key identifier: A5:91:5B:C8:A9:82:FE:61:EB:4A:ED:54:18:32:32:88:32:95:04:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pZFbyKmC_mHrSu1UGDIyiDKVBNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/8e37d3-c632-48b8-9b0b-5012054f9d26/1/92EoqcSTMJnZ_sfNtHa3yrAcLPQ.roa
Signing time: Tue 02 Jan 2024 00:31:43 +0000
ROA not before: Tue 02 Jan 2024 00:31:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43046
IP address blocks: 195.225.58.0/24 maxlen: 24
195.225.58.0/23 maxlen: 23
195.225.59.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:5b:dd:1e:0d:79:05:de:b7:04:e6:8e:8f:ad:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5915bc8a982fe61eb4aed5418323288329504d7
Validity
Not Before: Jan 2 00:31:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f76128a9c4933099d9fec7cdb476b7cab01c2cf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:0b:7b:e7:b8:2f:50:a1:5f:61:5c:51:99:b9:
20:c9:6e:a7:71:10:bd:0f:72:27:9a:ad:f6:f9:fd:
3f:44:d1:6a:64:0e:53:4b:6a:cf:b8:0a:f9:ca:7e:
7d:5f:7c:b0:94:08:34:3f:78:59:40:ed:a8:d7:80:
ad:c7:b6:f5:24:dd:e0:f8:c4:0a:a9:27:b1:8d:77:
46:bf:48:8e:2f:10:82:ba:b3:02:b7:6c:3a:60:79:
3e:9b:0e:db:7a:62:37:86:10:ea:19:bb:d3:fb:fc:
ad:1f:ca:da:cd:91:97:c4:41:a6:e5:c5:e3:17:5f:
69:e9:13:2d:1f:51:12:56:59:31:b0:1e:10:6e:97:
f1:1f:50:e9:66:f7:23:4d:0a:f3:25:8f:8f:74:06:
70:2c:05:25:2c:c6:2a:51:55:80:b8:e5:06:77:b7:
a5:95:9b:46:84:9f:e4:4b:be:05:13:ce:39:8d:4c:
b2:57:53:b0:89:ab:53:4f:3b:bf:44:7e:d0:cd:0c:
d0:10:66:b1:ab:34:58:c7:77:38:54:41:de:d3:05:
19:fe:38:85:ac:16:2d:81:68:ac:5f:02:ad:3a:2f:
a5:2e:35:a3:62:f0:0e:54:70:01:0b:ce:f1:6b:88:
68:9c:85:12:61:98:b9:5c:ae:87:b3:2e:42:0e:fa:
9c:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:61:28:A9:C4:93:30:99:D9:FE:C7:CD:B4:76:B7:CA:B0:1C:2C:F4
X509v3 Authority Key Identifier:
keyid:A5:91:5B:C8:A9:82:FE:61:EB:4A:ED:54:18:32:32:88:32:95:04:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pZFbyKmC_mHrSu1UGDIyiDKVBNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/8e37d3-c632-48b8-9b0b-5012054f9d26/1/92EoqcSTMJnZ_sfNtHa3yrAcLPQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/8e37d3-c632-48b8-9b0b-5012054f9d26/1/pZFbyKmC_mHrSu1UGDIyiDKVBNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.225.58.0/23
Signature Algorithm: sha256WithRSAEncryption
6c:29:76:9d:b6:58:a7:3b:29:bb:d5:b3:e0:39:26:82:5e:d6:
75:63:2d:27:6a:2a:30:b7:c4:d2:ca:89:08:e1:9f:fe:ce:06:
c8:5d:7e:18:dd:34:b6:59:89:77:ce:4d:f6:91:69:38:d8:41:
03:43:54:b5:75:9e:0f:b1:89:78:ca:06:15:bb:de:15:7e:e4:
f5:63:bb:b8:3f:ad:f7:e0:c3:2d:81:9a:f6:61:63:49:f6:9c:
be:8d:0e:a3:71:6d:17:c8:cf:77:4f:78:94:b7:9c:7b:54:b8:
e3:aa:44:eb:1f:d6:77:06:93:7a:b8:10:83:fa:6b:dc:6a:cf:
66:7e:ec:02:53:7e:1e:55:b0:5d:50:14:99:5c:72:2a:af:99:
06:01:df:da:68:b3:c4:79:ee:36:b3:2f:01:d1:00:2d:ff:a1:
8e:27:ec:52:9e:00:74:87:24:83:3e:46:e0:68:c9:ad:10:31:
42:93:8b:3a:36:18:d7:22:89:28:e8:94:36:a9:75:da:9e:ed:
4a:3c:29:cf:80:4a:eb:57:79:77:e5:55:71:a7:52:f6:60:ba:
90:9c:36:d8:df:b4:4f:a4:4d:aa:56:c6:16:64:f7:2c:a4:be:
58:66:14:be:7d:6a:e9:64:7e:d9:8c:78:91:91:09:cd:e1:ca:
92:c2:e4:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:26:26 2025 by rpki-client