Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/d5950a-efe0-4468-8d0e-03a5eacbfb18/1/O9uZX_N7ETnWwxDU0GttMnUTlbo.roa
File: O9uZX_N7ETnWwxDU0GttMnUTlbo.roa (raw, json)
Hash identifier: XO3EAd3i4wR2q0sf1ad7Vti44FMKgJHICAsKU5/vEXA=
Subject key identifier: 3B:DB:99:5F:F3:7B:11:39:D6:C3:10:D4:D0:6B:6D:32:75:13:95:BA
Certificate issuer: /CN=d98c5222ce91c12a35020acfdaaa5298071890a4
Certificate serial: 08E91439
Authority key identifier: D9:8C:52:22:CE:91:C1:2A:35:02:0A:CF:DA:AA:52:98:07:18:90:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2YxSIs6RwSo1AgrP2qpSmAcYkKQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/d5950a-efe0-4468-8d0e-03a5eacbfb18/1/O9uZX_N7ETnWwxDU0GttMnUTlbo.roa
Signing time: Sat 01 Jan 2022 12:59:17 +0000
ROA not before: Sat 01 Jan 2022 12:59:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 9044
IP address blocks: 195.137.175.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 149492793 (0x8e91439)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d98c5222ce91c12a35020acfdaaa5298071890a4
Validity
Not Before: Jan 1 12:59:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3bdb995ff37b1139d6c310d4d06b6d32751395ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:ed:50:ad:20:2a:b1:30:25:7a:50:f8:35:b9:
79:aa:bd:98:38:fa:c9:83:54:57:85:ab:ec:72:a3:
be:7e:d4:15:13:dc:d8:1a:0f:c6:46:69:74:a7:82:
8d:1b:67:8b:e6:5a:08:71:bf:63:f3:ab:cf:fc:58:
72:e0:96:bf:b2:4a:1a:35:f7:8a:f5:09:3e:11:7f:
7e:7c:4c:5f:62:08:9a:82:56:db:c4:c7:de:4b:b4:
e2:42:e5:db:68:70:9b:e4:92:15:32:3e:3c:4c:93:
b3:dd:94:6a:dc:27:f0:87:44:8f:bb:dc:7d:93:03:
55:ab:cd:cb:4e:5c:cc:57:6d:66:fd:c4:a5:1e:e5:
c5:4b:15:de:dc:bf:18:8b:1e:8b:e9:fd:e8:c6:93:
ae:7e:29:a3:22:96:b9:f3:39:d7:52:8c:df:b8:ea:
c0:d6:16:e3:52:60:50:73:3e:1d:30:ca:be:38:be:
c5:c3:8c:9e:36:20:42:8b:28:9c:f4:e5:e3:fb:77:
5b:9d:6c:e8:ba:6e:11:32:82:c9:80:b7:6e:8f:b8:
e3:1f:e4:a6:3e:5a:a0:81:20:c7:f1:e6:49:b0:11:
02:4b:5e:aa:9e:38:72:49:da:45:be:90:8a:b9:07:
62:0d:fc:7e:34:88:ab:56:d6:05:0e:9c:61:7b:d2:
44:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:DB:99:5F:F3:7B:11:39:D6:C3:10:D4:D0:6B:6D:32:75:13:95:BA
X509v3 Authority Key Identifier:
keyid:D9:8C:52:22:CE:91:C1:2A:35:02:0A:CF:DA:AA:52:98:07:18:90:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2YxSIs6RwSo1AgrP2qpSmAcYkKQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/d5950a-efe0-4468-8d0e-03a5eacbfb18/1/O9uZX_N7ETnWwxDU0GttMnUTlbo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/d5950a-efe0-4468-8d0e-03a5eacbfb18/1/2YxSIs6RwSo1AgrP2qpSmAcYkKQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.137.175.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:9f:c0:e9:db:a9:21:ca:76:d8:ce:b9:9e:38:de:41:b9:ef:
21:2a:79:ec:0f:2a:a7:59:d8:86:13:c6:98:dc:7a:2f:0f:f1:
28:2e:c6:8d:a7:e8:e4:40:fe:51:40:bf:d9:01:c9:1a:87:f6:
26:f5:9b:b8:2d:6b:b4:87:cb:2a:c2:1c:6c:c6:dc:0a:c7:04:
7a:aa:1f:c7:97:55:48:ee:95:2f:96:9c:19:b0:4c:5b:c7:14:
7f:4c:4e:0b:c7:db:a4:fd:2c:e6:b0:87:14:79:7f:84:a8:77:
f7:98:66:87:79:c3:e6:4a:a1:ee:19:a9:f8:53:4f:91:fb:02:
e8:a7:4c:f8:6c:19:61:9a:1d:a1:25:af:55:6a:1f:4b:c9:05:
39:9b:7d:14:3a:c4:b3:d1:3e:96:e0:3b:54:9b:da:0e:a7:16:
ba:15:0d:5a:5e:c8:51:5f:77:7e:69:2d:22:a0:42:c7:ed:1f:
1a:c5:e0:02:56:c7:83:2b:c6:a6:24:1c:c7:31:11:1c:67:87:
37:da:9f:84:ec:cb:00:40:c1:a2:ff:a3:e3:d3:e5:be:35:d8:
15:e9:c7:a4:c8:61:bc:cb:af:2c:1e:ae:76:4f:8b:5f:e4:91:
05:cd:bf:9a:46:37:a4:80:23:c7:d1:f8:ac:d0:48:75:b4:3e:
73:91:41:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:15:22 2025 by rpki-client