Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/f92cd7-646c-441b-ae46-9b282c643256/1/6oEjlQvwiiOVGFlIWFlIEmk0bOg.roa
File: 6oEjlQvwiiOVGFlIWFlIEmk0bOg.roa (raw, json)
Hash identifier: snGuvNZiyEVHjeqc3HvTIgVEw61e9EsF0uM0LMX5HzY=
Subject key identifier: EA:81:23:95:0B:F0:8A:23:95:18:59:48:58:59:48:12:69:34:6C:E8
Certificate issuer: /CN=7e1167886da81524431bbf2efb0572914b686ebc
Certificate serial: 0190311B5B3199256444641936B4C0C2BBDF
Authority key identifier: 7E:11:67:88:6D:A8:15:24:43:1B:BF:2E:FB:05:72:91:4B:68:6E:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fhFniG2oFSRDG78u-wVykUtobrw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/f92cd7-646c-441b-ae46-9b282c643256/1/6oEjlQvwiiOVGFlIWFlIEmk0bOg.roa
Signing time: Wed 19 Jun 2024 15:26:34 +0000
ROA not before: Wed 19 Jun 2024 15:26:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3360
IP address blocks: 195.160.0.0/18 maxlen: 18
195.160.96.0/19 maxlen: 19
195.160.148.0/24 maxlen: 24
195.160.149.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:31:1b:5b:31:99:25:64:44:64:19:36:b4:c0:c2:bb:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e1167886da81524431bbf2efb0572914b686ebc
Validity
Not Before: Jun 19 15:26:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ea8123950bf08a23951859485859481269346ce8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:8d:06:e3:c6:a4:4d:5a:21:58:f9:62:54:98:
63:a0:64:42:bd:21:72:7a:d3:0a:8e:23:d7:de:e4:
aa:e4:e5:7b:b1:94:6f:c8:e7:e1:91:eb:7c:b5:55:
6f:04:de:6b:25:6b:c2:6b:8e:97:f6:81:7d:ec:49:
40:bf:13:cd:22:6a:27:d0:14:9f:6a:bc:5e:3b:13:
7f:7c:e4:cf:ee:69:6d:c7:26:c0:2a:4c:ad:af:66:
37:b6:97:26:ff:b6:0f:6d:b9:90:8b:01:a8:41:61:
c7:b7:9f:45:08:b3:2b:2d:39:f8:f9:9b:88:48:98:
bc:b7:20:db:90:0c:85:47:59:78:09:08:0b:57:43:
ed:ae:9d:b7:ff:f8:06:73:50:ec:ca:22:53:bc:aa:
eb:a4:5e:05:8b:6e:82:ac:2e:38:fa:96:54:d9:93:
5a:34:2b:a8:6b:72:fc:f0:80:93:eb:55:41:c5:e2:
f5:db:28:3f:a4:3b:38:34:f2:80:51:65:5f:52:6f:
57:aa:45:b8:9d:71:4a:4a:46:6a:3d:7a:bf:ec:d8:
fe:45:18:64:5a:0c:cd:c2:2e:f1:63:36:85:a6:1a:
29:a3:41:83:e5:0b:93:5c:51:11:bf:b5:1e:16:63:
65:af:99:57:8c:ad:87:95:7d:4a:fa:90:d9:7f:05:
26:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:81:23:95:0B:F0:8A:23:95:18:59:48:58:59:48:12:69:34:6C:E8
X509v3 Authority Key Identifier:
keyid:7E:11:67:88:6D:A8:15:24:43:1B:BF:2E:FB:05:72:91:4B:68:6E:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fhFniG2oFSRDG78u-wVykUtobrw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f92cd7-646c-441b-ae46-9b282c643256/1/6oEjlQvwiiOVGFlIWFlIEmk0bOg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f92cd7-646c-441b-ae46-9b282c643256/1/fhFniG2oFSRDG78u-wVykUtobrw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.160.0.0/18
195.160.96.0/19
195.160.148.0/23
Signature Algorithm: sha256WithRSAEncryption
98:e1:9e:35:e5:bc:b1:47:54:98:a5:37:27:39:db:08:3d:6a:
09:b5:e5:e7:8d:a3:52:ac:5b:fc:f2:94:48:e8:c8:5e:89:f1:
3d:4f:2b:a2:33:64:dd:f7:d9:d4:b7:ba:f6:0e:d4:3d:b9:57:
23:21:f8:15:79:14:1c:98:f0:58:17:8f:08:27:d9:1a:b1:34:
10:8a:04:be:04:9c:bc:48:53:b0:02:a0:b0:ca:70:5a:88:bc:
a5:4c:b1:ed:b8:c9:28:34:94:60:30:a8:83:8f:0b:bb:f6:ad:
5b:2b:0f:db:ca:8c:15:0f:cf:35:27:29:48:58:88:e7:c8:90:
7e:a9:a5:ad:96:c8:d4:b4:5a:b7:bf:04:98:2b:9b:99:46:3e:
d3:2b:3d:1c:d5:63:1c:c8:34:44:86:e0:04:2b:25:d1:51:f0:
f2:70:c1:b2:62:97:d2:56:eb:f1:fd:12:89:7d:f5:73:0d:bd:
f4:8a:bf:06:0c:91:10:b6:73:e6:e6:4e:82:4b:8f:e5:32:ec:
e3:81:70:03:c3:23:42:21:78:8d:7d:66:f4:b8:4c:54:26:05:
06:0b:df:dc:a7:c8:ce:35:9d:a2:87:46:b9:40:6b:43:b0:e3:
f3:cb:e3:e9:3e:47:ee:46:bc:fc:f6:5d:cd:ac:6c:58:85:76:
62:43:84:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:30:08 2025 by rpki-client