Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/d47f87-b34f-49ce-bf1e-ac8236bdc88c/1/gO7LkzCY9-Q827EpYRztH9uVBPc.roa
File: gO7LkzCY9-Q827EpYRztH9uVBPc.roa (raw, json)
Hash identifier: JHCjgAO9nlyKkV/CJ7zGyfz48qBEgyIfiObBPweGTWI=
Subject key identifier: 80:EE:CB:93:30:98:F7:E4:3C:DB:B1:29:61:1C:ED:1F:DB:95:04:F7
Certificate issuer: /CN=4b7cc1f58bdd258c8d92d342bee6a2ad4ce3f744
Certificate serial: 01856DCAFADC0A7B54DCC718586CC84B8759
Authority key identifier: 4B:7C:C1:F5:8B:DD:25:8C:8D:92:D3:42:BE:E6:A2:AD:4C:E3:F7:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S3zB9YvdJYyNktNCvuairUzj90Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/d47f87-b34f-49ce-bf1e-ac8236bdc88c/1/gO7LkzCY9-Q827EpYRztH9uVBPc.roa
Signing time: Sun 01 Jan 2023 14:44:57 +0000
ROA not before: Sun 01 Jan 2023 14:44:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212667
IP address blocks: 195.18.26.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:ca:fa:dc:0a:7b:54:dc:c7:18:58:6c:c8:4b:87:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b7cc1f58bdd258c8d92d342bee6a2ad4ce3f744
Validity
Not Before: Jan 1 14:44:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=80eecb933098f7e43cdbb129611ced1fdb9504f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e0:94:0b:aa:df:1e:0c:ce:9f:72:6a:f0:8a:
bd:6b:da:3e:31:62:cb:a5:3d:80:6b:cc:02:a8:20:
87:d6:81:e7:26:ce:c3:4d:b9:42:dd:02:b7:91:87:
82:3b:29:06:7c:2a:4e:81:3d:5f:6d:10:88:e9:07:
c2:b9:8e:c9:d1:32:45:89:d1:73:31:dc:b9:6c:f2:
64:c6:bd:22:1f:eb:64:03:fc:dc:1f:2c:c2:9d:37:
fa:06:24:ca:29:e7:82:6c:82:f4:41:84:86:80:44:
e9:b4:34:a6:2c:3e:af:4f:08:8a:51:18:e4:92:f7:
37:4b:df:f0:15:eb:66:11:38:b1:4a:51:a3:03:64:
7a:cd:4c:6a:e6:7f:34:48:e1:27:63:9f:8e:10:01:
98:55:1a:18:a1:b1:b2:aa:ab:5a:c5:27:ba:0a:51:
2c:a4:51:97:05:5c:64:88:e7:9f:47:17:24:3b:b2:
2f:8a:77:07:a1:b1:83:16:60:b1:2c:e6:7c:c8:d5:
65:82:33:e8:36:b7:e5:ae:bc:3e:a0:9a:ec:6e:27:
9a:64:e5:68:54:62:7b:80:41:e3:8b:6b:69:59:33:
68:7a:ad:2e:95:2e:fd:61:c4:22:c5:a6:48:39:79:
b2:e3:d4:c3:9b:70:b3:b5:a7:c4:6f:66:ec:9a:d7:
11:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:EE:CB:93:30:98:F7:E4:3C:DB:B1:29:61:1C:ED:1F:DB:95:04:F7
X509v3 Authority Key Identifier:
keyid:4B:7C:C1:F5:8B:DD:25:8C:8D:92:D3:42:BE:E6:A2:AD:4C:E3:F7:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S3zB9YvdJYyNktNCvuairUzj90Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/d47f87-b34f-49ce-bf1e-ac8236bdc88c/1/gO7LkzCY9-Q827EpYRztH9uVBPc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/d47f87-b34f-49ce-bf1e-ac8236bdc88c/1/S3zB9YvdJYyNktNCvuairUzj90Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.18.26.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:6f:80:ce:4d:9f:fc:16:9c:bf:18:d0:c0:3c:b2:24:37:89:
a4:93:de:90:1c:4f:f3:d6:28:a5:84:6b:00:59:eb:63:05:ad:
17:4d:43:0c:d4:a4:88:7b:37:d6:75:27:44:61:d0:ba:88:74:
42:f3:c1:53:11:cf:22:ac:4b:e0:5a:d1:02:f7:1b:67:d0:fa:
97:5a:98:7b:ef:28:96:fb:00:5a:b5:de:3c:0d:59:75:4d:23:
37:c9:1c:5e:d4:53:99:c8:d3:76:d6:f6:7f:c4:46:8d:95:70:
7b:35:8a:8f:75:24:4d:e2:c1:a7:66:77:0f:c0:1a:59:4c:2b:
bf:88:81:a4:a5:6a:25:62:64:af:9f:d9:fc:c0:ba:c9:e0:82:
55:95:9e:80:6d:5b:1b:04:f1:69:02:3a:0f:d2:16:86:c0:16:
a6:bc:3e:bd:c7:c5:53:ee:d2:e0:e6:30:23:d7:11:9b:3e:44:
68:ce:b8:bd:dc:ec:7b:33:00:70:7f:f7:b8:c2:fe:2a:a4:11:
41:8f:a7:1c:5d:38:4b:cf:cb:b5:3a:2e:ad:6c:1d:53:f8:b6:
8e:49:49:b1:e4:a7:3c:bb:26:fd:27:6e:5c:c6:ca:b4:81:0f:
04:3c:63:e4:2c:f2:27:cd:c5:03:98:55:9f:05:27:3c:02:f8:
70:f2:c0:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:17:30 2025 by rpki-client