Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/185b1b-9885-4de6-bc5f-b9121a6f7189/1/zosmpKcLQNGkscPW8tKE7PBQSyk.roa
File: zosmpKcLQNGkscPW8tKE7PBQSyk.roa (raw, json)
Hash identifier: fxmp6kgoB1x7HBzudnwiHB17kPjYswX/Pg9n2OgaTJw=
Subject key identifier: CE:8B:26:A4:A7:0B:40:D1:A4:B1:C3:D6:F2:D2:84:EC:F0:50:4B:29
Certificate issuer: /CN=637108e0d19992fdc0bfb6e27137304fd543436d
Certificate serial: 018CC4933FBC7EC3DB51E0A08C33FA6AAFC9
Authority key identifier: 63:71:08:E0:D1:99:92:FD:C0:BF:B6:E2:71:37:30:4F:D5:43:43:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y3EI4NGZkv3Av7bicTcwT9VDQ20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/185b1b-9885-4de6-bc5f-b9121a6f7189/1/zosmpKcLQNGkscPW8tKE7PBQSyk.roa
Signing time: Mon 01 Jan 2024 10:30:33 +0000
ROA not before: Mon 01 Jan 2024 10:30:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 28959
IP address blocks: 195.238.253.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:3f:bc:7e:c3:db:51:e0:a0:8c:33:fa:6a:af:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=637108e0d19992fdc0bfb6e27137304fd543436d
Validity
Not Before: Jan 1 10:30:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ce8b26a4a70b40d1a4b1c3d6f2d284ecf0504b29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:62:bb:68:bf:7d:d0:90:91:9a:38:35:27:cb:
d0:5a:b5:5d:80:bb:44:cb:1e:34:98:3d:ab:dd:f6:
23:cf:9a:d6:f1:fb:cc:d4:a7:0f:30:54:41:65:85:
1d:82:58:e1:01:be:48:69:6f:90:ba:aa:cf:d7:9c:
da:a8:9b:c0:11:4c:05:bb:24:76:41:68:d9:1b:73:
39:ef:88:6f:a2:82:22:14:93:fc:9e:1c:a2:09:e5:
ef:89:3b:98:de:71:2c:27:10:cd:96:96:8c:71:ac:
c1:9d:d6:1f:ed:80:cb:ac:cd:a5:65:a0:3f:38:e2:
40:ea:b1:09:ce:6b:76:5e:6b:1a:25:e3:fc:4a:9b:
84:fc:05:50:9f:b9:93:8d:24:c3:f2:25:d1:59:fd:
dd:b5:ae:88:0f:41:dc:ed:6a:cc:d7:0f:aa:87:54:
d8:9e:b4:47:e9:2e:3c:46:67:7f:0f:3a:9a:23:c9:
77:e5:3f:f6:70:4e:bf:e2:b4:9f:be:6a:dd:d6:e9:
0b:a2:1e:74:a4:5c:53:87:43:8c:89:4a:eb:e3:04:
1f:60:dd:7d:91:bd:aa:08:3d:a1:64:f4:09:f6:6e:
4f:63:36:fd:b4:41:3c:fc:83:14:3b:9a:62:b9:f3:
24:90:93:11:bc:a5:09:07:c7:5c:cf:a3:6a:4b:dc:
8f:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:8B:26:A4:A7:0B:40:D1:A4:B1:C3:D6:F2:D2:84:EC:F0:50:4B:29
X509v3 Authority Key Identifier:
keyid:63:71:08:E0:D1:99:92:FD:C0:BF:B6:E2:71:37:30:4F:D5:43:43:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y3EI4NGZkv3Av7bicTcwT9VDQ20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/185b1b-9885-4de6-bc5f-b9121a6f7189/1/zosmpKcLQNGkscPW8tKE7PBQSyk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/185b1b-9885-4de6-bc5f-b9121a6f7189/1/Y3EI4NGZkv3Av7bicTcwT9VDQ20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.238.253.0/24
Signature Algorithm: sha256WithRSAEncryption
41:97:c7:36:83:cf:04:d7:19:fe:b7:10:df:82:b4:8f:42:f2:
10:ca:bb:e2:f7:07:9f:e1:2c:bf:34:e5:0c:4a:32:42:fe:9a:
25:18:62:2b:d5:25:66:6d:5c:3b:1b:e5:a7:e9:61:83:64:75:
04:d9:c8:e1:16:d3:6a:7c:e3:22:76:70:ac:85:e2:51:c4:65:
a7:97:9e:a4:60:34:2f:5a:bc:1c:20:a9:55:ea:d1:80:ac:50:
b2:07:74:e7:b3:51:19:ab:32:e5:21:c4:f4:03:ff:2c:8c:d9:
1a:49:d3:71:e2:db:d6:d0:66:c7:65:81:f6:22:04:3e:52:c4:
4e:65:cf:27:ed:c3:de:2a:6a:a9:a4:71:63:ea:d3:92:59:14:
32:58:6f:92:9e:31:bf:6f:e0:6d:72:5d:f5:3d:fc:fc:82:3f:
da:65:da:f9:1b:e2:42:27:e2:78:22:e1:04:fd:8f:09:64:8e:
2b:2f:d7:01:98:82:44:f6:ed:33:a8:72:fb:b7:50:d9:17:ad:
50:24:b3:b0:1d:78:88:f8:ad:70:cb:f5:3a:4a:f6:48:a4:7f:
32:de:95:ea:79:3f:5d:77:0e:47:69:4b:f7:42:85:59:71:4b:
fe:73:02:f2:76:75:7a:d2:34:e5:a1:00:b3:08:9d:e1:84:51:
ae:e1:5a:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:50:35 2025 by rpki-client