Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/097658-648d-4b70-ba1d-c997641ff2e9/1/Po2C4y8fDgsg72SwseZIx4LaHMI.roa
File: Po2C4y8fDgsg72SwseZIx4LaHMI.roa (raw, json)
Hash identifier: QBXVoF8/g33PPK/dZ20IK9t38qoG8agfAhJqN8vckuc=
Subject key identifier: 3E:8D:82:E3:2F:1F:0E:0B:20:EF:64:B0:B1:E6:48:C7:82:DA:1C:C2
Certificate issuer: /CN=ac4b9a5778be4c16b7c6a260036adfe2e4562d6e
Certificate serial: 0645B0AB
Authority key identifier: AC:4B:9A:57:78:BE:4C:16:B7:C6:A2:60:03:6A:DF:E2:E4:56:2D:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rEuaV3i-TBa3xqJgA2rf4uRWLW4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/097658-648d-4b70-ba1d-c997641ff2e9/1/Po2C4y8fDgsg72SwseZIx4LaHMI.roa
Signing time: Sat 01 Jan 2022 01:54:42 +0000
ROA not before: Sat 01 Jan 2022 01:54:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 5602
IP address blocks: 195.184.75.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105230507 (0x645b0ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac4b9a5778be4c16b7c6a260036adfe2e4562d6e
Validity
Not Before: Jan 1 01:54:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3e8d82e32f1f0e0b20ef64b0b1e648c782da1cc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a5:78:dc:d7:cb:47:1b:08:21:1f:9c:95:12:
9d:a4:a2:a6:fd:02:16:0a:ea:61:43:50:46:ed:0b:
1d:e0:d7:01:3f:6d:cc:3f:03:98:52:a3:e0:6c:39:
47:d2:ea:26:7c:2a:89:c0:c2:bc:78:79:21:ed:64:
1a:9e:f8:84:8a:8b:1b:f2:69:47:f3:0a:7d:f3:d3:
fc:dd:27:5e:e2:1f:ba:9f:f2:41:a7:82:e1:1b:c7:
24:c5:1f:ea:38:01:b1:0c:88:e9:2c:a9:39:75:49:
57:4c:c6:d7:15:d7:fc:e2:7b:a4:10:7b:ac:c8:3e:
36:43:a0:ba:87:61:b1:64:cd:53:e6:53:80:03:11:
58:13:7b:64:bc:d2:d8:ab:2c:96:b8:4c:21:34:f8:
ab:15:80:ec:ab:37:f5:65:17:ba:2d:1a:ea:ba:f2:
c1:1a:9a:36:30:5d:8d:cf:90:7c:6e:a4:2b:78:a8:
c3:aa:ec:76:fb:51:97:64:cb:7c:35:53:b2:b9:9a:
82:3b:f4:64:1e:5d:92:a7:ff:c3:2d:2d:47:fd:07:
86:54:28:83:c2:2e:b6:f3:6d:07:79:86:b0:80:df:
f6:d8:3a:4d:fb:fc:a2:db:6b:40:51:1f:97:1c:1b:
90:96:68:51:e3:c0:ca:55:70:77:b4:83:5e:96:2b:
da:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:8D:82:E3:2F:1F:0E:0B:20:EF:64:B0:B1:E6:48:C7:82:DA:1C:C2
X509v3 Authority Key Identifier:
keyid:AC:4B:9A:57:78:BE:4C:16:B7:C6:A2:60:03:6A:DF:E2:E4:56:2D:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rEuaV3i-TBa3xqJgA2rf4uRWLW4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/097658-648d-4b70-ba1d-c997641ff2e9/1/Po2C4y8fDgsg72SwseZIx4LaHMI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/097658-648d-4b70-ba1d-c997641ff2e9/1/rEuaV3i-TBa3xqJgA2rf4uRWLW4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.184.75.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:87:a4:31:18:74:58:c2:74:ea:77:a2:40:4b:da:25:e6:87:
70:7b:2e:85:7f:2a:3f:1f:12:b8:18:24:32:9c:a1:85:43:82:
de:31:c8:95:6e:4c:8f:d8:3e:23:fe:2f:8f:db:10:a5:72:bd:
7d:f9:28:82:9c:a8:d1:aa:55:66:72:16:87:5e:f2:f6:a0:dd:
76:24:11:12:c2:d6:a7:0b:69:92:44:3d:db:d3:b2:82:ed:fa:
a7:40:c0:f9:ff:5d:43:0f:01:39:8a:cc:70:7e:8d:12:ee:6f:
7e:dc:73:57:82:c9:d5:31:0e:82:ff:8d:2e:31:df:e9:1d:2f:
dd:39:c3:85:e2:6d:79:43:6e:62:25:76:94:66:d5:0a:9f:b0:
dc:26:01:e0:1e:aa:7c:ea:f1:b5:9a:f5:04:fa:32:50:13:7c:
c8:07:ae:37:a6:e9:bd:3e:11:e9:64:13:2f:d4:57:84:d2:46:
6e:29:bc:c3:ec:d3:37:d9:59:65:d0:e6:f5:3b:e3:44:8b:f1:
a5:f0:97:9f:f8:92:b8:82:dc:5b:fe:2b:94:24:18:d1:5b:35:
85:62:d3:f5:a9:0c:eb:a6:81:9e:d4:44:4d:87:e1:66:66:21:
a4:eb:fa:34:a4:ee:26:bb:50:33:bf:c8:45:35:6a:2a:b5:63:
12:9e:2f:2b
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBkWwqzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhh
YzRiOWE1Nzc4YmU0YzE2YjdjNmEyNjAwMzZhZGZlMmU0NTYyZDZlMB4XDTIyMDEw
MTAxNTQ0MloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoM2U4ZDgyZTMyZjFm
MGUwYjIwZWY2NGIwYjFlNjQ4Yzc4MmRhMWNjMjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALileNzXy0cbCCEfnJUSnaSipv0CFgrqYUNQRu0LHeDXAT9t
zD8DmFKj4Gw5R9LqJnwqicDCvHh5Ie1kGp74hIqLG/JpR/MKffPT/N0nXuIfup/y
QaeC4RvHJMUf6jgBsQyI6SypOXVJV0zG1xXX/OJ7pBB7rMg+NkOguodhsWTNU+ZT
gAMRWBN7ZLzS2KsslrhMITT4qxWA7Ks39WUXui0a6rrywRqaNjBdjc+QfG6kK3io
w6rsdvtRl2TLfDVTsrmagjv0ZB5dkqf/wy0tR/0HhlQog8IutvNtB3mGsIDf9tg6
Tfv8ottrQFEflxwbkJZoUePAylVwd7SDXpYr2rECAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQ+jYLjLx8OCyDvZLCx5kjHgtocwjAfBgNVHSMEGDAWgBSsS5pXeL5MFrfG
omADat/i5FYtbjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3JFdWFWM2ktVEJhM3hxSmdBMnJmNHVSV0xXNC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYTQvMDk3NjU4LTY0OGQtNGI3MC1iYTFkLWM5OTc2NDFmZjJlOS8x
L1BvMkM0eThmRGdzZzcyU3dzZVpJeDRMYUhNSS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTQv
MDk3NjU4LTY0OGQtNGI3MC1iYTFkLWM5OTc2NDFmZjJlOS8xL3JFdWFWM2ktVEJh
M3hxSmdBMnJmNHVSV0xXNC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMO4SzANBgkqhkiG9w0BAQsFAAOC
AQEALoekMRh0WMJ06neiQEvaJeaHcHsuhX8qPx8SuBgkMpyhhUOC3jHIlW5Mj9g+
I/4vj9sQpXK9ffkogpyo0apVZnIWh17y9qDddiQREsLWpwtpkkQ929Oygu36p0DA
+f9dQw8BOYrMcH6NEu5vftxzV4LJ1TEOgv+NLjHf6R0v3TnDheJteUNuYiV2lGbV
Cp+w3CYB4B6qfOrxtZr1BPoyUBN8yAeuN6bpvT4R6WQTL9RXhNJGbim8w+zTN9lZ
ZdDm9TvjRIvxpfCXn/iSuILcW/4rlCQY0Vs1hWLT9akM66aBntRETYfhZmYhpOv6
NKTuJrtQM7/IRTVqKrVjEp4vKw==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:13:46 2025 by rpki-client