Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/7R62fxcByiGRZO5K3x-mhDL12ic.roa
File: 7R62fxcByiGRZO5K3x-mhDL12ic.roa (raw, json)
Hash identifier: LVAvfKnWA35ddP3M/33cvvGp/L2PybYYnkbKIX7sGwU=
Subject key identifier: ED:1E:B6:7F:17:01:CA:21:91:64:EE:4A:DF:1F:A6:84:32:F5:DA:27
Certificate issuer: /CN=49e14bf76f42da4f2ac003a6c69d61c2320e2cd8
Certificate serial: 0189D4BFF937D8FF9F1BA0651763AFAEFA69
Authority key identifier: 49:E1:4B:F7:6F:42:DA:4F:2A:C0:03:A6:C6:9D:61:C2:32:0E:2C:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeFL929C2k8qwAOmxp1hwjIOLNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/7R62fxcByiGRZO5K3x-mhDL12ic.roa
Signing time: Tue 08 Aug 2023 10:44:58 +0000
ROA not before: Tue 08 Aug 2023 10:44:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49999
IP address blocks: 195.225.98.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:d4:bf:f9:37:d8:ff:9f:1b:a0:65:17:63:af:ae:fa:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e14bf76f42da4f2ac003a6c69d61c2320e2cd8
Validity
Not Before: Aug 8 10:44:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ed1eb67f1701ca219164ee4adf1fa68432f5da27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c0:77:62:20:47:54:d1:1b:b8:d2:ff:4a:2f:
c7:e0:68:33:11:7f:95:37:19:07:15:eb:30:30:de:
b6:7a:ef:cb:90:7c:e4:97:6c:36:8a:d4:6d:84:8c:
20:24:d3:0e:0e:22:1f:4b:23:5e:bb:6f:66:a2:fc:
6e:38:78:ff:56:6c:77:be:da:6d:00:33:d4:70:af:
ce:ad:e7:29:2d:8d:e6:01:f2:17:03:bc:12:da:48:
3a:b7:88:87:36:2c:8e:83:72:d8:a5:d5:09:69:e9:
7a:bd:0e:4f:57:53:a0:b6:d9:da:33:94:a7:69:c8:
ba:df:12:a7:66:2b:32:68:2d:09:de:5c:7c:75:d5:
d5:1f:ba:56:fe:c0:6d:ad:83:fc:9d:ce:d5:28:7a:
5f:cb:f5:d7:5a:68:95:a2:e0:0c:14:4a:7c:b6:c3:
74:1f:4f:64:29:5c:0b:64:61:59:ea:bc:8e:2c:b2:
1d:08:6b:e5:90:6f:f4:e0:0f:04:54:5d:06:ae:f8:
02:13:56:25:1a:98:a6:90:02:5f:bb:38:66:8e:c8:
29:40:53:c0:df:85:7f:63:6a:1c:92:ca:c2:58:bc:
96:24:a8:6f:24:2f:e6:fd:eb:3d:a5:0b:43:2a:8e:
78:fb:01:3c:56:42:f2:46:fb:21:7b:28:19:49:11:
b0:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:1E:B6:7F:17:01:CA:21:91:64:EE:4A:DF:1F:A6:84:32:F5:DA:27
X509v3 Authority Key Identifier:
keyid:49:E1:4B:F7:6F:42:DA:4F:2A:C0:03:A6:C6:9D:61:C2:32:0E:2C:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeFL929C2k8qwAOmxp1hwjIOLNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/7R62fxcByiGRZO5K3x-mhDL12ic.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.225.98.0/24
Signature Algorithm: sha256WithRSAEncryption
63:76:73:e1:fd:30:f0:94:3c:ab:56:d4:76:c1:96:89:5f:e1:
65:5a:0c:92:5e:4f:7a:ba:08:58:49:3f:95:2b:66:19:7f:90:
30:eb:92:a7:7a:af:84:ae:4a:0d:c1:b0:be:35:fd:c4:bd:a0:
39:df:cd:fc:2f:cc:21:66:14:d8:d7:26:2c:26:ed:7d:e5:0a:
31:bc:f5:2b:a1:18:31:ec:fb:54:27:da:a0:14:38:ac:c1:82:
58:05:d8:ef:a5:0c:3e:78:83:22:19:02:3d:27:dc:cc:64:32:
33:d6:04:ff:00:dc:e6:b7:8f:31:1c:18:91:ec:99:27:b7:d9:
c3:87:d3:17:2b:d3:8f:ff:9a:d7:18:6d:ef:5d:d7:cc:31:9e:
42:29:da:52:77:ec:f9:1c:ff:f5:54:a7:77:e1:9c:f3:0c:01:
d0:06:a0:68:1e:59:ed:86:98:92:36:5d:f4:8a:d7:0a:2f:c8:
41:89:11:a7:07:16:ef:72:14:a3:ff:e9:ca:28:95:aa:f4:2e:
08:30:86:cd:21:88:fb:c0:93:3f:9a:b0:59:22:8c:c7:ca:af:
5a:40:eb:bb:5e:23:96:c9:2c:60:f2:a2:b4:1b:11:59:3e:01:
1a:30:67:9b:98:78:7d:50:fd:2f:95:d1:ae:ee:33:78:01:7e:
12:12:ae:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:26:16 2025 by rpki-client