Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/92e068-4c9d-4a7e-a92f-52b85cf3fb78/1/eSMweySQayVjw4TxrRct4yupfzc.roa
File: eSMweySQayVjw4TxrRct4yupfzc.roa (raw, json)
Hash identifier: vIdUHA4BTNYVBukw2W8J/Pb08xt6VrAwfBVQVhqYWeQ=
Subject key identifier: 79:23:30:7B:24:90:6B:25:63:C3:84:F1:AD:17:2D:E3:2B:A9:7F:37
Certificate issuer: /CN=3d4fb91656dded5a0afaf0710d26a8df636ee078
Certificate serial: 0194228D6C42B49E1B89E389BD6CE0D1C909
Authority key identifier: 3D:4F:B9:16:56:DD:ED:5A:0A:FA:F0:71:0D:26:A8:DF:63:6E:E0:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PU-5Flbd7VoK-vBxDSao32Nu4Hg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/92e068-4c9d-4a7e-a92f-52b85cf3fb78/1/eSMweySQayVjw4TxrRct4yupfzc.roa
Signing time: Wed 01 Jan 2025 15:48:01 +0000
ROA not before: Wed 01 Jan 2025 15:48:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35604
IP address blocks: 195.137.166.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:6c:42:b4:9e:1b:89:e3:89:bd:6c:e0:d1:c9:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d4fb91656dded5a0afaf0710d26a8df636ee078
Validity
Not Before: Jan 1 15:48:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7923307b24906b2563c384f1ad172de32ba97f37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:25:e8:84:2f:c9:63:f3:c8:62:1e:c4:55:64:
8b:7f:c7:00:06:e8:e2:50:bb:9f:da:19:44:98:7d:
de:51:e6:ad:7c:47:ad:1c:dc:66:2a:83:0d:e7:a5:
7e:2a:bc:27:e5:a6:20:0b:97:90:d0:e9:7f:3d:85:
bf:75:39:d4:ff:0b:ea:1d:e2:2e:f4:c4:9a:c4:3c:
2f:cb:07:9f:79:f0:ee:9f:b1:ee:5b:2e:cd:2e:39:
3e:e2:c7:85:b3:f2:49:4b:c8:20:6d:d5:0a:1d:5a:
2d:47:3c:4a:fa:07:0b:b9:33:65:fe:ff:33:cb:b2:
60:a0:4c:7f:8e:bc:38:68:27:53:33:c0:b6:81:2e:
4b:94:ae:7b:45:ed:54:f4:1e:a6:36:66:1f:cb:4f:
e3:71:51:70:6f:0c:b1:77:68:be:61:cc:68:14:52:
3a:76:30:c6:46:1d:76:ee:85:f8:68:d3:ed:00:6e:
a0:92:a9:0a:b8:2e:be:64:32:86:90:f9:f6:db:79:
0b:c2:37:0e:12:f8:ad:84:1f:f4:56:10:28:7c:a0:
12:c4:b9:d5:6a:b1:dd:9b:ca:3c:38:b2:19:73:2a:
37:45:46:37:95:2a:3c:7f:78:ea:45:71:77:9a:3f:
03:4e:e1:ea:34:30:98:ec:49:72:31:62:e4:3e:80:
80:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:23:30:7B:24:90:6B:25:63:C3:84:F1:AD:17:2D:E3:2B:A9:7F:37
X509v3 Authority Key Identifier:
keyid:3D:4F:B9:16:56:DD:ED:5A:0A:FA:F0:71:0D:26:A8:DF:63:6E:E0:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PU-5Flbd7VoK-vBxDSao32Nu4Hg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/92e068-4c9d-4a7e-a92f-52b85cf3fb78/1/eSMweySQayVjw4TxrRct4yupfzc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/92e068-4c9d-4a7e-a92f-52b85cf3fb78/1/PU-5Flbd7VoK-vBxDSao32Nu4Hg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.137.166.0/24
Signature Algorithm: sha256WithRSAEncryption
d8:02:f5:46:34:49:c7:d7:f0:69:ad:9d:5d:8e:bc:39:69:2b:
5b:27:aa:30:00:6d:df:89:8a:10:4b:51:69:f7:dc:47:dd:bd:
41:80:31:dd:22:d1:c0:27:e6:95:f0:e3:6f:65:d9:20:fd:41:
f3:6f:c6:79:d8:fc:93:56:7b:12:83:4d:ec:37:6a:ba:f7:e2:
70:1e:5b:94:95:c8:e5:c8:67:dc:31:4a:56:8a:86:d6:46:1e:
24:22:df:aa:48:18:fb:ba:1a:96:e6:ae:ec:e7:e1:65:9c:e6:
26:39:d6:4d:27:15:70:cd:e5:c7:6a:1e:b3:05:c8:0c:4a:06:
a0:1c:47:72:53:5b:d1:1a:21:2d:7e:d1:f2:67:ac:b7:0c:08:
06:d5:7c:3b:62:14:4b:9c:8d:38:4b:a5:e7:b0:55:3f:16:fb:
42:dc:f4:70:39:c2:76:b8:42:b7:d0:1c:ec:a4:8c:04:7f:df:
94:9c:8a:e1:ac:76:d0:3f:82:85:25:0e:02:20:c5:60:9d:ab:
69:40:ab:4a:bc:c8:37:56:eb:4f:12:ed:32:60:f6:6e:e2:6b:
8e:ba:fc:80:5d:80:93:7b:3e:22:63:0f:b9:ac:0b:11:9e:b1:
59:a3:be:9f:4c:a1:67:b0:5a:86:8e:91:21:52:f6:c6:b2:70:
22:3b:6f:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:13:58 2025 by rpki-client