Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/534252-d50a-409a-9b14-9c455a636756/1/1oFM6kw24AGtvq43Jlbrq0K64uU.roa
File: 1oFM6kw24AGtvq43Jlbrq0K64uU.roa (raw, json)
Hash identifier: dA+9XrTgsTlcnLtrVTbjEOUrd3BXXwsKjyPGnsUfs2s=
Subject key identifier: D6:81:4C:EA:4C:36:E0:01:AD:BE:AE:37:26:56:EB:AB:42:BA:E2:E5
Certificate issuer: /CN=7edd7c8d69327f0b5651c5bff187428e8b2f3c94
Certificate serial: 071C85
Authority key identifier: 7E:DD:7C:8D:69:32:7F:0B:56:51:C5:BF:F1:87:42:8E:8B:2F:3C:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ft18jWkyfwtWUcW_8YdCjosvPJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/534252-d50a-409a-9b14-9c455a636756/1/1oFM6kw24AGtvq43Jlbrq0K64uU.roa
Signing time: Thu 27 Jan 2022 09:26:27 +0000
ROA not before: Thu 27 Jan 2022 09:26:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15626
IP address blocks: 195.64.106.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 466053 (0x71c85)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7edd7c8d69327f0b5651c5bff187428e8b2f3c94
Validity
Not Before: Jan 27 09:26:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d6814cea4c36e001adbeae372656ebab42bae2e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:2a:9e:44:b0:c6:3d:d7:19:de:43:cf:3b:2a:
a8:e0:75:ee:24:17:91:e9:b5:3d:ae:27:a4:dd:34:
2f:25:4f:eb:de:a2:3f:d0:c5:9a:68:d7:d6:12:e8:
2f:32:f5:22:f5:b7:dd:fa:69:f7:47:76:c7:45:96:
c9:5f:9f:06:ad:ea:05:ed:6a:16:67:f7:6d:e8:52:
dd:fd:4d:5e:85:26:6d:4e:0a:48:12:e5:fd:58:f1:
92:d4:4e:42:12:02:64:4b:9c:e4:29:0d:fb:d6:96:
63:42:86:bf:f3:2b:81:4e:b1:4f:f8:3c:e5:db:0a:
8f:28:59:42:cb:a7:25:be:73:3d:2f:30:56:fc:1b:
39:02:90:99:c0:03:79:4d:79:4e:b5:99:24:e5:73:
db:68:91:2f:9b:68:c9:6e:78:b1:93:b5:09:4a:57:
56:8c:28:a9:0d:7e:d6:65:cd:4f:7b:f3:56:e3:d9:
ce:f4:43:d3:a7:54:8f:b9:2b:69:96:00:bf:bb:4b:
52:ff:db:62:f3:d4:7e:da:1d:1a:6a:38:91:ce:37:
a1:b5:2f:2d:9e:4d:36:74:e1:e6:b4:16:5d:1b:82:
4a:84:ef:13:9b:f7:15:54:87:be:bc:50:ed:1d:24:
28:56:16:0c:c3:ff:96:d9:8e:3f:25:a3:f2:b4:d9:
87:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:81:4C:EA:4C:36:E0:01:AD:BE:AE:37:26:56:EB:AB:42:BA:E2:E5
X509v3 Authority Key Identifier:
keyid:7E:DD:7C:8D:69:32:7F:0B:56:51:C5:BF:F1:87:42:8E:8B:2F:3C:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ft18jWkyfwtWUcW_8YdCjosvPJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/534252-d50a-409a-9b14-9c455a636756/1/1oFM6kw24AGtvq43Jlbrq0K64uU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/534252-d50a-409a-9b14-9c455a636756/1/ft18jWkyfwtWUcW_8YdCjosvPJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.64.106.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:f0:c8:67:7a:6e:ed:01:0c:77:77:a2:da:63:38:53:58:84:
f0:6b:99:dd:09:7a:77:25:1a:b2:43:c3:e6:24:5e:57:5f:4b:
5e:43:5e:49:be:41:d2:1e:bc:65:94:98:f5:6b:30:5f:12:54:
65:57:be:e8:1f:03:a9:8c:7a:f6:d7:60:02:1e:e0:82:e6:8c:
9b:b9:63:25:5f:41:a3:12:48:b2:b6:90:df:8f:46:7b:14:d6:
f4:79:19:3c:fb:84:ce:9f:8a:41:d7:93:23:cb:65:21:e7:bd:
24:da:ea:6c:9f:cb:ad:e5:c8:4f:32:f9:c4:3c:25:d8:2d:08:
4d:9e:87:74:26:1d:44:57:db:55:50:e9:fc:47:be:50:64:d4:
b3:8a:db:a2:4c:f6:ea:ca:31:1e:45:1a:2f:bd:43:91:13:bc:
e5:f4:00:b8:94:4f:c2:c8:48:b8:6b:1e:24:b7:2a:30:c0:33:
c5:6e:a5:c0:86:18:78:7d:37:2d:0c:e8:ed:c8:d8:6b:20:b3:
c6:46:2e:f6:e0:7c:bf:f6:86:7e:d5:31:6a:ea:ba:2b:23:d8:
5d:48:bb:df:6b:a7:9c:c4:d7:54:99:1e:24:95:f1:a8:bf:02:
02:27:8f:04:89:90:c8:88:98:69:be:a8:7d:d0:e7:ab:d6:07:
da:b6:90:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:42:23 2025 by rpki-client