Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/534252-d50a-409a-9b14-9c455a636756/1/xvpHCEqkyNUww4Voy9l0loyCBUw.roa
File: xvpHCEqkyNUww4Voy9l0loyCBUw.roa (raw, json)
Hash identifier: X3Knc1yLqRI/4XlrxD+ufcncZ4+LObruoi3N+n8eLkA=
Subject key identifier: C6:FA:47:08:4A:A4:C8:D5:30:C3:85:68:CB:D9:74:96:8C:82:05:4C
Certificate issuer: /CN=7edd7c8d69327f0b5651c5bff187428e8b2f3c94
Certificate serial: 018CC500BBCB2E045084EE86603E7040D933
Authority key identifier: 7E:DD:7C:8D:69:32:7F:0B:56:51:C5:BF:F1:87:42:8E:8B:2F:3C:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ft18jWkyfwtWUcW_8YdCjosvPJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/534252-d50a-409a-9b14-9c455a636756/1/xvpHCEqkyNUww4Voy9l0loyCBUw.roa
Signing time: Mon 01 Jan 2024 12:30:08 +0000
ROA not before: Mon 01 Jan 2024 12:30:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58061
IP address blocks: 195.64.106.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:bb:cb:2e:04:50:84:ee:86:60:3e:70:40:d9:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7edd7c8d69327f0b5651c5bff187428e8b2f3c94
Validity
Not Before: Jan 1 12:30:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c6fa47084aa4c8d530c38568cbd974968c82054c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:50:10:10:1f:cb:fb:85:76:b3:7a:f4:84:d7:
7d:62:dd:e3:69:20:a1:c2:70:75:52:ca:11:2b:32:
20:e4:42:e2:b7:5d:fb:12:20:71:99:82:21:39:d6:
42:33:c4:32:49:d3:9a:58:7c:b5:9a:a0:e4:32:6d:
7c:f7:1f:09:7c:a1:a5:b4:73:2a:1a:51:9a:e3:4e:
61:9d:63:e7:ee:84:46:38:38:e1:76:3c:3b:5f:dc:
fe:c5:1c:bf:02:4c:e2:6b:6a:d7:66:c2:94:2a:7d:
02:f7:b2:da:e8:a0:40:c3:ca:4b:0f:b0:b2:06:a9:
51:8f:14:b1:68:34:b1:dc:00:07:9d:f1:6d:d8:fe:
ad:51:32:ed:4a:4d:4d:0c:ca:74:21:81:8b:b0:ae:
80:28:c6:cb:9b:28:ca:9c:88:4d:cd:3f:b2:b5:50:
60:55:fe:b7:2d:44:d8:c7:0f:80:44:ee:7e:42:34:
b8:a7:bd:c6:69:8e:d0:de:f9:d2:3a:30:ab:aa:c3:
5d:0f:0c:9b:75:02:b3:cd:2e:1f:88:1d:6e:47:f7:
df:1f:7a:ed:d4:3f:a5:11:45:ee:32:06:8d:b4:07:
49:78:97:c4:aa:05:94:2c:8e:3e:92:a0:0f:6c:27:
cc:6a:a9:4a:2a:4c:82:ec:21:29:c0:3b:d8:f4:7e:
74:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:FA:47:08:4A:A4:C8:D5:30:C3:85:68:CB:D9:74:96:8C:82:05:4C
X509v3 Authority Key Identifier:
keyid:7E:DD:7C:8D:69:32:7F:0B:56:51:C5:BF:F1:87:42:8E:8B:2F:3C:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ft18jWkyfwtWUcW_8YdCjosvPJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/534252-d50a-409a-9b14-9c455a636756/1/xvpHCEqkyNUww4Voy9l0loyCBUw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/534252-d50a-409a-9b14-9c455a636756/1/ft18jWkyfwtWUcW_8YdCjosvPJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.64.106.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:7c:3e:a2:e9:9e:d5:d3:10:57:d7:92:40:f8:c7:2c:5d:c2:
a8:ad:40:a0:9b:66:7d:bd:d7:41:45:fb:3e:a1:19:10:71:ee:
0a:ea:0b:a5:dd:42:e2:37:7c:f9:80:8f:1b:15:2d:3d:c2:5e:
de:f9:40:3a:8a:a8:95:73:ef:82:6b:76:44:b3:80:35:f6:d1:
f9:a7:ec:80:87:57:0e:4b:f4:11:6c:38:d9:5c:41:38:c2:6d:
19:03:a8:2f:5c:13:35:4e:f8:f4:e5:b1:1c:6c:ad:88:60:a9:
3f:2a:c0:ed:5e:21:f8:97:34:80:0f:69:a1:71:67:4c:ae:9c:
e1:e7:11:7a:31:2c:72:8b:87:3f:2c:34:fc:a3:87:44:c1:e1:
d1:5c:90:1d:9c:11:dc:e6:24:e5:52:5a:a3:24:15:09:15:0b:
84:35:f8:74:1a:b1:22:da:a2:c1:75:a8:39:5c:9e:99:7f:2a:
8c:ea:3a:43:4f:ad:86:b9:b9:d8:e3:8d:f7:df:24:2a:1c:4b:
15:9f:a4:05:6c:9c:a3:fb:90:7b:16:04:1c:b5:e9:9f:1d:c2:
29:54:ab:33:56:de:82:45:bc:ed:aa:66:b8:54:2d:5b:77:6e:
70:1d:b4:8c:2f:c8:3d:bd:9f:54:3b:b5:b7:fa:6b:62:12:f8:
e9:81:12:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:55:21 2025 by rpki-client