Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/180643-e6e0-4dbb-96c5-2e643e4ce9ef/1/_OXCUK-v7-UbYDSRcMv-VkJg1gs.roa
File: _OXCUK-v7-UbYDSRcMv-VkJg1gs.roa (raw, json)
Hash identifier: kgwC6mP+2LD8QL9VuI/K7mqkq+61NUkcuTg8pSGVx9M=
Subject key identifier: FC:E5:C2:50:AF:AF:EF:E5:1B:60:34:91:70:CB:FE:56:42:60:D6:0B
Certificate issuer: /CN=0aadf711468ffacb5e2897c62dfb047501b99d65
Certificate serial: 024CB7AD
Authority key identifier: 0A:AD:F7:11:46:8F:FA:CB:5E:28:97:C6:2D:FB:04:75:01:B9:9D:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cq33EUaP-steKJfGLfsEdQG5nWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/180643-e6e0-4dbb-96c5-2e643e4ce9ef/1/_OXCUK-v7-UbYDSRcMv-VkJg1gs.roa
Signing time: Sat 01 Jan 2022 10:56:14 +0000
ROA not before: Sat 01 Jan 2022 10:56:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 56596
IP address blocks: 195.128.145.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 38582189 (0x24cb7ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0aadf711468ffacb5e2897c62dfb047501b99d65
Validity
Not Before: Jan 1 10:56:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fce5c250afafefe51b60349170cbfe564260d60b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:da:32:35:9e:a1:8c:e7:6c:58:36:87:54:9b:
f6:e6:2b:51:f8:51:ae:a9:d3:f8:cd:48:52:b4:ee:
a3:02:3c:48:bf:1e:37:7f:e5:19:ac:01:e2:4a:3d:
71:e1:0c:e9:e7:da:14:63:64:93:b4:e8:b9:3f:e8:
09:d6:ec:48:3d:a8:f3:04:00:1f:33:03:09:39:09:
ee:2c:ae:50:ad:21:e5:f0:40:1e:d0:d7:c4:7b:1b:
60:52:5c:62:66:be:80:bb:a7:b3:3a:b7:d9:bc:ea:
29:ca:4a:c3:28:c7:83:6c:dd:56:2e:45:26:5f:33:
e1:31:f8:2b:e6:8a:b3:8f:63:8e:70:21:06:0e:07:
51:e5:b2:7f:f4:22:3b:b6:1b:df:26:51:42:74:55:
0e:78:c8:4e:d1:69:43:e5:4d:bd:d5:de:5d:a1:cf:
85:b6:25:62:2e:7e:de:fe:13:5d:17:20:67:9a:45:
61:00:0f:7f:85:9c:cb:c6:2f:bf:16:69:7b:dd:9e:
60:17:92:10:e6:b9:11:53:a7:e5:ed:51:a3:36:a2:
1d:99:d1:fc:42:d9:8a:ee:ad:21:cb:0a:5e:c2:66:
9b:f2:b8:36:2c:0c:e6:0c:08:10:c7:60:d7:2c:74:
2f:65:a3:c3:80:e8:3f:b9:41:0e:cc:db:68:dc:13:
0a:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:E5:C2:50:AF:AF:EF:E5:1B:60:34:91:70:CB:FE:56:42:60:D6:0B
X509v3 Authority Key Identifier:
keyid:0A:AD:F7:11:46:8F:FA:CB:5E:28:97:C6:2D:FB:04:75:01:B9:9D:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cq33EUaP-steKJfGLfsEdQG5nWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/180643-e6e0-4dbb-96c5-2e643e4ce9ef/1/_OXCUK-v7-UbYDSRcMv-VkJg1gs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/180643-e6e0-4dbb-96c5-2e643e4ce9ef/1/Cq33EUaP-steKJfGLfsEdQG5nWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.128.145.0/24
Signature Algorithm: sha256WithRSAEncryption
d2:6b:0b:1e:94:28:49:9c:5e:58:32:08:1f:a0:30:3d:64:be:
ce:00:cd:b7:4b:67:35:45:80:83:d8:89:0b:38:ae:d6:1a:bd:
5d:a0:b1:c1:3a:ee:0b:4e:0d:fc:86:d5:3f:19:6e:8f:44:76:
db:02:a2:13:d7:8e:cb:33:27:d9:59:89:7d:08:08:4d:cf:9a:
47:62:b6:54:68:4e:42:6b:95:a7:0b:e3:b1:6a:74:56:65:c7:
9f:76:fb:07:bc:9f:48:75:71:06:02:9f:8f:fa:37:ba:4e:3b:
0f:da:75:16:d9:8c:d0:c6:5f:66:9b:74:12:2c:88:84:a7:2d:
65:4c:73:8b:63:d1:2c:5c:6f:6a:09:0d:8c:f6:0d:a6:50:36:
16:9a:3a:5f:86:20:d7:da:d3:2d:0d:c4:ea:e7:d5:94:ef:d4:
05:0d:84:0d:42:ec:9f:2a:cd:6e:91:ce:fe:87:aa:f9:b8:e2:
78:40:aa:8f:0c:a7:4a:13:83:e6:ad:34:87:c2:23:78:be:22:
3e:fc:f0:cd:a9:a0:f5:7c:58:66:c3:51:73:ab:f8:99:03:35:
aa:8c:dc:78:7d:cb:34:99:1e:eb:24:dc:91:35:78:ec:44:ff:
66:e0:d9:da:0f:16:9e:b6:db:bc:c1:ed:ba:81:e8:f6:48:5f:
c6:bb:d8:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:38:18 2025 by rpki-client