Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/f088bd-5029-4903-9616-0672ea0440bb/1/cGMojoHA_ji4dpM9uQ1afR_tOH0.roa
File: cGMojoHA_ji4dpM9uQ1afR_tOH0.roa (raw, json)
Hash identifier: i1gFi8NRL0iquVx1S2o3krHyHH6AFrbXa2Ge0Nqnor8=
Subject key identifier: 70:63:28:8E:81:C0:FE:38:B8:76:93:3D:B9:0D:5A:7D:1F:ED:38:7D
Certificate issuer: /CN=a1b71eb8df171e642f1b2b90419001f1fc445e4d
Certificate serial: 01941FFA2D1058326B3A5B6B7FB986C684C9
Authority key identifier: A1:B7:1E:B8:DF:17:1E:64:2F:1B:2B:90:41:90:01:F1:FC:44:5E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/obceuN8XHmQvGyuQQZAB8fxEXk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/f088bd-5029-4903-9616-0672ea0440bb/1/cGMojoHA_ji4dpM9uQ1afR_tOH0.roa
Signing time: Wed 01 Jan 2025 03:47:56 +0000
ROA not before: Wed 01 Jan 2025 03:47:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44189
IP address blocks: 195.5.173.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:2d:10:58:32:6b:3a:5b:6b:7f:b9:86:c6:84:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1b71eb8df171e642f1b2b90419001f1fc445e4d
Validity
Not Before: Jan 1 03:47:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7063288e81c0fe38b876933db90d5a7d1fed387d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:1a:56:bd:4c:3f:dd:83:40:62:79:ea:16:7d:
08:6a:2f:82:27:f3:07:2b:c1:b7:0f:b1:40:8e:ea:
3a:f2:bc:cf:ff:ef:32:36:e5:45:47:58:fe:df:88:
cc:3f:31:3f:79:5e:56:70:c5:8a:88:17:c5:5d:72:
e4:52:55:48:b5:c9:6d:86:4a:31:16:05:b6:3f:c0:
7b:49:70:e3:2a:d2:8b:af:9e:3e:5a:54:a2:14:9c:
05:42:a1:2c:63:f7:7a:fc:0f:18:19:26:ed:a3:43:
a8:db:dc:35:24:3b:d4:fd:19:1b:65:30:da:db:c7:
b2:63:bb:5e:6a:a5:c4:93:16:ed:2a:12:02:40:8c:
9e:a9:d9:c2:df:54:d3:be:a1:02:e3:11:7e:3e:3b:
03:4f:31:17:00:8d:a1:bc:c5:49:71:b6:03:cd:10:
4d:3f:16:7c:9f:7c:c5:e4:0d:3d:94:f8:31:87:8b:
5f:5f:0e:94:91:90:b0:89:4d:05:3e:06:46:97:a3:
a3:36:ba:6f:80:2a:45:d2:7c:d7:13:24:51:30:53:
6a:8c:67:03:bb:6b:fa:36:a1:d7:8b:e4:ff:58:38:
d8:ec:01:0f:1a:35:21:88:0d:c6:87:a2:e8:e0:46:
7b:b1:88:fb:33:d8:7a:74:50:e4:35:be:c4:b2:55:
4a:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:63:28:8E:81:C0:FE:38:B8:76:93:3D:B9:0D:5A:7D:1F:ED:38:7D
X509v3 Authority Key Identifier:
keyid:A1:B7:1E:B8:DF:17:1E:64:2F:1B:2B:90:41:90:01:F1:FC:44:5E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/obceuN8XHmQvGyuQQZAB8fxEXk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/f088bd-5029-4903-9616-0672ea0440bb/1/cGMojoHA_ji4dpM9uQ1afR_tOH0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/f088bd-5029-4903-9616-0672ea0440bb/1/obceuN8XHmQvGyuQQZAB8fxEXk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.5.173.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:33:57:c1:13:11:67:ee:3e:d0:1c:df:09:cd:cb:c8:13:58:
34:bf:db:82:cf:28:31:f6:38:73:3a:4b:ff:fb:f5:ab:24:f8:
8f:f0:84:be:1d:f8:67:f9:fe:d2:c9:35:d8:a0:7f:31:b3:22:
83:63:82:61:e5:a2:b6:05:e7:28:0c:7d:a9:b7:04:26:d4:5e:
e5:c5:8f:ba:1b:87:c5:ef:4b:79:5f:97:89:79:91:19:c6:04:
b5:8f:df:4c:d6:d1:49:33:66:ad:20:3b:2c:50:01:a5:0b:c0:
76:68:e9:96:39:63:3b:42:2e:69:40:04:61:82:46:b1:62:c8:
fa:6d:b7:57:be:80:a9:c6:02:b4:8d:81:e4:2d:67:fb:31:de:
60:19:3a:e9:e1:a9:28:e9:5e:0d:20:98:7f:ca:f5:d4:40:be:
bb:47:6f:d3:d0:8f:bb:1e:50:1c:67:5d:82:36:b2:89:56:73:
9b:ef:58:25:f3:08:e6:e4:19:c8:54:93:fa:89:29:ed:3b:43:
ef:fd:c8:5a:ef:4c:3f:14:d2:6b:3b:c9:62:5d:a4:3f:13:70:
fd:f8:1a:c6:f6:83:63:ce:36:3a:d2:bd:7a:68:38:0d:31:b3:
5d:23:ab:70:d0:4f:cc:50:b8:df:f1:9c:67:41:d1:83:6b:05:
7c:18:47:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:16:41 2025 by rpki-client