Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/0b8f11-a011-4764-bcf3-6dbba2b1dca7/1/oHmqIKM3Sdv7lpenM0Vy6ULQbQ4.roa
File: oHmqIKM3Sdv7lpenM0Vy6ULQbQ4.roa (raw, json)
Hash identifier: dhHYxcUdCD436wqfXvlyd6qfPDaIo6nSh1qsE/3H2qE=
Subject key identifier: A0:79:AA:20:A3:37:49:DB:FB:96:97:A7:33:45:72:E9:42:D0:6D:0E
Certificate issuer: /CN=ee0581767af4579e44da977b1082d94b3c7b9298
Certificate serial: 01D896
Authority key identifier: EE:05:81:76:7A:F4:57:9E:44:DA:97:7B:10:82:D9:4B:3C:7B:92:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7gWBdnr0V55E2pd7EILZSzx7kpg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/0b8f11-a011-4764-bcf3-6dbba2b1dca7/1/oHmqIKM3Sdv7lpenM0Vy6ULQbQ4.roa
Signing time: Tue 08 Feb 2022 14:48:17 +0000
ROA not before: Tue 08 Feb 2022 14:48:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 6453
IP address blocks: 193.105.119.0/24 maxlen: 24
195.85.224.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120982 (0x1d896)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee0581767af4579e44da977b1082d94b3c7b9298
Validity
Not Before: Feb 8 14:48:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a079aa20a33749dbfb9697a7334572e942d06d0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:f0:14:7a:6c:3e:3d:99:1b:f3:c4:75:a2:3b:
ea:3a:e5:9d:ec:a4:ce:69:f9:2c:a3:69:ae:cd:1c:
cb:2a:64:fb:13:98:16:7b:3b:40:ce:aa:1f:d4:a7:
09:d7:de:b0:d6:40:77:a4:98:b1:ab:70:1f:44:b8:
f7:b7:b2:2d:ca:23:80:6f:04:55:dc:79:00:3c:da:
a3:19:8e:f1:04:86:29:06:09:73:0f:98:f3:97:f4:
0c:f0:9a:9e:27:99:67:ef:7e:84:e8:1a:64:7a:7c:
7d:21:3e:77:7f:5e:73:39:87:1b:34:89:00:29:19:
27:12:9e:b2:31:2a:4f:bb:bb:eb:37:48:41:0c:69:
9d:80:0c:91:e6:bc:20:27:ea:b6:47:3e:1a:59:49:
d4:4c:4d:cb:51:49:d1:0f:4b:9a:23:6d:46:80:19:
0c:bf:d3:96:68:3e:bd:63:70:0e:fa:d3:66:a2:3d:
38:0a:f4:85:59:8e:64:e4:c4:52:eb:7a:80:ef:c9:
df:73:86:ea:5e:d4:0a:11:88:ee:65:73:57:0f:83:
ac:c8:49:2f:b4:50:fd:0e:fe:13:95:25:19:77:e0:
d5:58:38:ad:ac:32:e7:9d:4a:ea:bf:2e:78:21:e4:
b8:87:fc:11:ed:65:e6:2a:a1:1e:29:84:de:a2:1a:
60:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:79:AA:20:A3:37:49:DB:FB:96:97:A7:33:45:72:E9:42:D0:6D:0E
X509v3 Authority Key Identifier:
keyid:EE:05:81:76:7A:F4:57:9E:44:DA:97:7B:10:82:D9:4B:3C:7B:92:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7gWBdnr0V55E2pd7EILZSzx7kpg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/0b8f11-a011-4764-bcf3-6dbba2b1dca7/1/oHmqIKM3Sdv7lpenM0Vy6ULQbQ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/0b8f11-a011-4764-bcf3-6dbba2b1dca7/1/7gWBdnr0V55E2pd7EILZSzx7kpg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.105.119.0/24
195.85.224.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:33:16:cb:93:24:de:8e:e7:82:d4:d7:93:81:1e:1d:92:29:
d3:60:c6:54:56:bf:2a:60:08:24:85:d2:04:b7:83:d0:7c:ca:
96:d1:a5:e2:67:31:8b:14:52:70:48:4c:e6:d3:c2:3d:b8:45:
14:6a:7f:92:aa:cc:f0:72:7f:ef:36:70:04:8d:6f:8d:57:de:
56:e5:cd:f7:60:96:78:cb:82:e9:99:af:51:da:a2:6a:b2:30:
fa:64:a9:05:6f:16:68:7c:93:62:29:e7:5b:53:32:9b:5a:bb:
f0:57:50:b1:09:f9:6e:af:c3:08:37:9b:e5:e9:c7:76:a4:02:
6a:31:63:94:59:bf:f2:df:cf:0d:50:fc:e4:08:5f:ea:18:4f:
ca:56:b3:9b:84:55:d3:89:13:b2:ae:f7:c3:a6:36:34:5f:30:
13:71:98:9c:08:21:8b:b3:34:0c:27:55:4e:20:ae:ed:96:f3:
4a:58:4c:0e:8a:55:b9:0e:74:94:64:9b:4f:a3:7b:81:f0:6a:
08:42:1c:1c:6b:4b:93:8c:49:45:de:cb:07:f6:ca:fd:49:cd:
2e:b9:67:79:20:57:50:36:24:fa:3d:89:de:12:76:0e:48:81:
e2:f1:ec:e1:3b:fc:ab:0e:f1:f7:3a:32:33:11:ff:d4:f9:5d:
f0:01:a3:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:31:19 2025 by rpki-client