Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/26855d-1990-4d80-9c82-1563f93a540d/1/1wmQCq2H9Tcsv3wy14VlXv4tqso.roa
File: 1wmQCq2H9Tcsv3wy14VlXv4tqso.roa (raw, json)
Hash identifier: KYOzOItLf8SG3Ooao3cA9PhupE/QONT4CWUgYfAsl0I=
Subject key identifier: D7:09:90:0A:AD:87:F5:37:2C:BF:7C:32:D7:85:65:5E:FE:2D:AA:CA
Certificate issuer: /CN=90079b3e8df09970c1414482be5b2268729475ff
Certificate serial: 018964C08C775B7CB62B8D66CEF7413E47C8
Authority key identifier: 90:07:9B:3E:8D:F0:99:70:C1:41:44:82:BE:5B:22:68:72:94:75:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kAebPo3wmXDBQUSCvlsiaHKUdf8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/26855d-1990-4d80-9c82-1563f93a540d/1/1wmQCq2H9Tcsv3wy14VlXv4tqso.roa
Signing time: Mon 17 Jul 2023 16:48:07 +0000
ROA not before: Mon 17 Jul 2023 16:48:07 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59729
IP address blocks: 195.88.220.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:64:c0:8c:77:5b:7c:b6:2b:8d:66:ce:f7:41:3e:47:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90079b3e8df09970c1414482be5b2268729475ff
Validity
Not Before: Jul 17 16:48:07 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d709900aad87f5372cbf7c32d785655efe2daaca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:f4:3e:f6:bd:97:d0:c3:cf:19:82:f8:d0:09:
5a:14:5d:28:03:d4:72:f0:ae:59:37:24:e2:95:42:
af:3a:0f:6b:e6:f1:e8:1e:2a:a6:f2:e0:3b:81:0f:
7d:52:f1:2b:0c:9f:8a:b9:69:db:2c:73:13:7b:ef:
6c:41:e0:d2:91:a4:ee:4c:d3:8f:07:4b:5e:f6:ea:
1e:d9:7b:f3:d9:27:95:14:3d:7d:f3:99:df:62:7f:
ab:45:9c:46:0b:dc:b1:52:a5:1e:05:c2:f7:a3:8d:
5c:36:0e:11:78:c7:e0:77:fa:0f:bb:59:23:19:11:
c1:86:c8:34:92:bd:9b:04:e0:b6:68:9f:04:c8:9c:
6e:08:74:04:7b:a9:f1:36:b8:93:cb:38:99:14:04:
ba:40:05:76:02:41:f4:8f:88:e9:65:58:69:26:8f:
86:a7:0a:97:e7:6e:f0:fc:f8:e3:6b:5e:78:8f:28:
14:03:b6:43:7d:f9:0e:ae:b8:5e:e3:c1:a6:68:9f:
6d:4f:9b:9a:fc:e0:4d:f7:d2:c8:55:d6:ba:93:9a:
b7:c0:f9:42:91:68:61:9e:d1:c0:56:b0:22:42:04:
92:44:9a:b4:bc:73:28:5b:84:77:47:06:70:c4:bc:
7c:77:d7:57:5d:a0:76:ef:69:db:15:cb:fd:fe:91:
34:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:09:90:0A:AD:87:F5:37:2C:BF:7C:32:D7:85:65:5E:FE:2D:AA:CA
X509v3 Authority Key Identifier:
keyid:90:07:9B:3E:8D:F0:99:70:C1:41:44:82:BE:5B:22:68:72:94:75:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kAebPo3wmXDBQUSCvlsiaHKUdf8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/26855d-1990-4d80-9c82-1563f93a540d/1/1wmQCq2H9Tcsv3wy14VlXv4tqso.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/26855d-1990-4d80-9c82-1563f93a540d/1/kAebPo3wmXDBQUSCvlsiaHKUdf8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.88.220.0/24
Signature Algorithm: sha256WithRSAEncryption
82:40:92:2e:7f:9f:eb:1e:05:2d:44:22:da:28:03:7a:6d:7e:
8d:e8:d4:c1:75:c8:bb:4f:ce:4e:e8:fd:0e:07:47:24:93:60:
f6:79:cb:41:67:68:e0:f6:9e:07:30:15:b9:3e:2c:ae:1c:a0:
ca:2f:ae:4e:70:c4:25:6b:6e:f8:ac:07:dc:41:6d:3a:ef:fa:
a6:c7:11:4f:1d:2e:b2:fa:89:cc:94:06:f1:60:f4:d1:f1:8c:
de:7c:3c:8e:7e:84:57:8b:3f:dd:a1:18:55:8e:7f:f4:a6:6f:
8d:69:b0:17:03:1d:57:8e:0a:74:37:0c:d2:87:c8:c7:94:b5:
96:e1:78:49:66:07:0e:89:1f:d2:49:59:99:47:7a:36:62:e5:
28:9e:db:c8:95:38:c6:a3:22:12:cb:e2:4c:97:dc:cf:69:09:
db:aa:7f:26:ca:1a:69:86:9a:72:67:43:c1:64:4b:3a:98:7a:
cc:74:c8:ab:a7:1a:70:c0:ea:45:55:6e:1f:37:c1:38:48:ed:
09:87:8e:44:cc:11:4b:9d:94:7d:6a:6d:dd:04:6f:3e:17:ef:
e9:a3:44:81:d7:7d:7e:cf:00:63:49:81:2c:90:ec:ea:48:1d:
8f:f4:f8:24:f2:f7:fa:0a:32:87:32:ac:75:92:f9:5f:54:59:
c4:33:77:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 11:03:07 2025 by rpki-client