Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/Mzed888KKEzdtNUwC3jKbPHP2tQ.roa
File: Mzed888KKEzdtNUwC3jKbPHP2tQ.roa (raw, json)
Hash identifier: Gsb1tvjM35Md8sn5keJz0IDFeQxg9C8D1sjCwyI+NK8=
Subject key identifier: 33:37:9D:F3:CF:0A:28:4C:DD:B4:D5:30:0B:78:CA:6C:F1:CF:DA:D4
Certificate issuer: /CN=488c65dc359b58ca6ba5d3daeb874f058684e8c6
Certificate serial: 018322461B6F7C1573942711B907BA89E349
Authority key identifier: 48:8C:65:DC:35:9B:58:CA:6B:A5:D3:DA:EB:87:4F:05:86:84:E8:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SIxl3DWbWMprpdPa64dPBYaE6MY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/Mzed888KKEzdtNUwC3jKbPHP2tQ.roa
Signing time: Fri 09 Sep 2022 12:42:43 +0000
ROA not before: Fri 09 Sep 2022 12:42:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12859
IP address blocks: 195.8.208.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:22:46:1b:6f:7c:15:73:94:27:11:b9:07:ba:89:e3:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=488c65dc359b58ca6ba5d3daeb874f058684e8c6
Validity
Not Before: Sep 9 12:42:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=33379df3cf0a284cddb4d5300b78ca6cf1cfdad4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:3d:ad:a2:1e:a5:9d:5e:36:69:42:2d:71:46:
6b:f9:7d:fe:cc:34:ad:4b:2b:03:82:89:10:10:1f:
85:c7:66:c4:46:e6:1e:03:29:97:40:8a:05:35:c1:
67:51:a0:7b:02:93:16:ad:9f:7c:3d:c0:af:b9:94:
03:ff:9b:91:47:3f:d2:15:7a:65:e2:9b:91:64:cd:
f6:8e:96:44:be:2a:ec:51:cb:e9:0e:f9:2c:55:5f:
45:1f:93:42:a0:39:54:2f:c6:cc:f2:75:fe:df:cf:
e7:4b:6e:16:97:15:9e:ba:1f:ad:ca:de:f2:42:35:
0a:9c:c7:17:48:38:5c:a4:b0:22:74:85:0c:fe:60:
19:f0:f8:0d:67:a3:2a:43:f8:84:ac:21:fd:da:8d:
9f:b8:63:86:d2:f4:cc:57:0a:63:4f:ee:a6:8e:67:
a9:c2:ac:84:82:95:1c:d3:ac:44:24:06:20:b3:fc:
36:14:c0:0c:99:44:13:49:81:31:dd:6b:d6:4b:49:
04:63:85:34:cc:ee:96:ed:2c:6a:7a:4c:6c:0b:4d:
03:db:41:6b:0b:31:ea:2b:64:97:2f:d2:fe:ec:dd:
a2:c6:f6:91:9b:23:c5:3e:6e:1e:dc:38:74:75:09:
09:01:ff:ec:a4:82:db:95:6f:95:49:15:cd:f8:ad:
7d:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:37:9D:F3:CF:0A:28:4C:DD:B4:D5:30:0B:78:CA:6C:F1:CF:DA:D4
X509v3 Authority Key Identifier:
keyid:48:8C:65:DC:35:9B:58:CA:6B:A5:D3:DA:EB:87:4F:05:86:84:E8:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SIxl3DWbWMprpdPa64dPBYaE6MY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/Mzed888KKEzdtNUwC3jKbPHP2tQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.8.208.0/23
Signature Algorithm: sha256WithRSAEncryption
61:09:4c:e2:3a:3a:d3:b5:3f:10:e6:da:ab:e6:ee:c8:ca:27:
26:5f:8d:63:fa:d8:0e:f4:63:b2:df:a8:1e:fb:03:3b:a5:0e:
3c:c9:4e:dd:05:56:89:53:ab:6a:7d:f3:41:38:82:3a:eb:26:
1b:64:87:dd:6b:7d:e7:f8:51:f4:a2:63:be:af:45:a7:c4:10:
2f:ef:9a:c7:f8:3b:43:a1:aa:97:92:7a:8e:9e:d3:66:3d:15:
78:90:04:31:56:a3:64:ed:1e:91:2c:57:9a:1c:11:97:ff:36:
98:e3:8e:b3:de:2e:a2:e9:de:2a:4d:ff:37:c9:12:82:3f:cd:
87:e9:10:2d:29:f7:a7:19:50:b8:ee:77:04:b7:17:5c:fe:af:
ac:60:a6:b1:49:27:5f:43:ca:00:dd:44:5e:af:fa:25:83:3c:
ca:84:02:7d:5a:70:f4:2d:4b:11:fe:a0:37:2e:ab:15:b7:5d:
0e:d4:8e:df:ba:57:d1:21:c9:cf:e3:39:4b:71:a0:88:a1:8d:
9b:23:a7:0d:45:39:49:1b:db:b2:dc:0b:98:1d:35:b6:26:84:
d2:bd:04:b6:ff:35:42:9e:35:b8:5d:ff:a6:50:58:2b:ad:89:
6c:e2:ca:5f:2c:91:ef:ae:c7:19:31:73:ab:15:56:d1:8c:4b:
48:6c:e8:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:29:19 2025 by rpki-client