Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/b722bd-a51e-451f-8ce6-6a8136f9ffe2/1/aToE0r2OXKnx7bRXo1ZdCXHHkXQ.roa
File: aToE0r2OXKnx7bRXo1ZdCXHHkXQ.roa (raw, json)
Hash identifier: +Hgbqg4DG9TVELL3YQq9WPDvZQy7YiXypd/Oz0XBIxs=
Subject key identifier: 69:3A:04:D2:BD:8E:5C:A9:F1:ED:B4:57:A3:56:5D:09:71:C7:91:74
Certificate issuer: /CN=b80fef22577fe3cdfe7004c49ccc8fcfa8820d88
Certificate serial: 86FED1
Authority key identifier: B8:0F:EF:22:57:7F:E3:CD:FE:70:04:C4:9C:CC:8F:CF:A8:82:0D:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uA_vIld_483-cATEnMyPz6iCDYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/b722bd-a51e-451f-8ce6-6a8136f9ffe2/1/aToE0r2OXKnx7bRXo1ZdCXHHkXQ.roa
Signing time: Sat 01 Jan 2022 03:52:10 +0000
ROA not before: Sat 01 Jan 2022 03:52:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7029
IP address blocks: 195.96.145.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8847057 (0x86fed1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b80fef22577fe3cdfe7004c49ccc8fcfa8820d88
Validity
Not Before: Jan 1 03:52:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=693a04d2bd8e5ca9f1edb457a3565d0971c79174
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:da:c5:bb:16:4f:b0:cf:c7:0a:a3:66:8b:40:
33:9b:47:e2:e5:c8:b6:b0:0c:bb:01:87:1d:ba:d1:
34:35:6b:0b:49:3a:7a:95:62:46:5c:fb:a5:5d:66:
ac:5b:bb:61:0b:af:40:cc:02:50:5b:4a:3d:84:56:
02:24:18:9f:44:c6:e1:df:27:bb:dc:e0:3b:c8:2c:
b2:48:95:8d:87:ee:98:5a:d8:18:1c:b7:82:a2:f3:
68:73:be:84:e4:5d:3e:4b:d9:5b:5e:b7:d6:14:af:
f0:91:b3:71:84:d2:15:ab:2c:0d:cd:52:b7:63:2a:
1b:d3:e7:fa:2d:2b:54:35:65:77:fa:a9:05:7b:67:
df:9a:e4:7d:f0:69:85:4b:61:a0:c9:a2:07:6d:3d:
93:59:da:1e:b7:09:d8:88:ba:be:2e:fa:db:b0:79:
a4:52:31:12:6b:72:74:67:b2:19:7f:d6:b7:1d:69:
73:e7:81:59:a4:ce:c8:1a:fc:64:0e:71:41:25:c3:
89:a5:3c:dc:5f:28:da:2e:03:e3:0e:a3:c9:69:20:
65:16:1c:9e:e2:e5:7d:03:05:53:37:9f:cf:b4:50:
02:2a:48:f6:02:c1:63:6c:69:62:01:b3:67:a2:28:
b4:33:b3:ed:90:b1:58:42:20:20:a7:0a:6c:83:13:
25:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:3A:04:D2:BD:8E:5C:A9:F1:ED:B4:57:A3:56:5D:09:71:C7:91:74
X509v3 Authority Key Identifier:
keyid:B8:0F:EF:22:57:7F:E3:CD:FE:70:04:C4:9C:CC:8F:CF:A8:82:0D:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uA_vIld_483-cATEnMyPz6iCDYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b722bd-a51e-451f-8ce6-6a8136f9ffe2/1/aToE0r2OXKnx7bRXo1ZdCXHHkXQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b722bd-a51e-451f-8ce6-6a8136f9ffe2/1/uA_vIld_483-cATEnMyPz6iCDYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.96.145.0/24
Signature Algorithm: sha256WithRSAEncryption
89:8d:62:fb:58:a8:b1:b7:f6:0b:ed:60:62:d4:ec:e7:f5:3a:
bd:51:9e:7a:83:b4:d6:33:40:ad:05:a1:ea:f9:79:dd:b0:52:
b4:88:c6:7b:f8:5a:19:08:8c:3e:32:a9:30:58:09:63:4c:c3:
dc:fb:a3:4b:f4:55:6e:fb:ec:e0:6f:2a:33:7f:b4:bf:ff:27:
d0:4d:e3:2f:c5:bc:dd:c6:29:7e:3d:19:fa:ef:9a:74:b5:c5:
09:5a:9a:b1:c8:46:2b:fa:85:a3:8b:a8:45:e1:84:a4:d5:b7:
73:1b:81:b9:a7:9c:11:82:6d:a0:d5:86:7e:8c:ee:94:42:6f:
52:5c:f4:8c:96:2f:03:87:3c:8b:dc:6a:f6:d8:ad:9a:2f:8e:
8d:c1:d2:9c:75:99:4d:8f:0d:ba:e4:7d:b2:9c:19:a0:f9:12:
43:39:1c:72:ad:70:53:bb:6a:32:26:8f:3f:3c:62:48:46:63:
8f:0f:50:cb:a2:5c:35:57:af:0f:11:19:26:97:51:0f:62:8a:
cc:0b:43:f4:d0:3b:3b:b9:c6:b0:d1:70:c1:1d:f2:8b:54:d5:
8c:2e:58:a0:bb:b5:89:04:be:b9:c7:82:3b:74:4c:5f:c2:46:
ac:b6:af:71:d0:bb:22:42:41:5a:64:9d:6d:79:64:6d:88:b2:
f8:dd:91:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:17:52 2025 by rpki-client