Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/46d7af-02fb-45f9-a922-14b38b6e00a7/1/KO7fuYOsDws2RopcGeqyQEr3khI.roa
File: KO7fuYOsDws2RopcGeqyQEr3khI.roa (raw, json)
Hash identifier: QfwY2dqQt2w2Br+2LIPM/7Nutpxkz7ZMDM9sajQ/kow=
Subject key identifier: 28:EE:DF:B9:83:AC:0F:0B:36:46:8A:5C:19:EA:B2:40:4A:F7:92:12
Certificate issuer: /CN=f4db95f9d1b5c3ec934ff84d6ff7f01242da842a
Certificate serial: 0185737A9A594D57FC2EDDDC4B7136AF7064
Authority key identifier: F4:DB:95:F9:D1:B5:C3:EC:93:4F:F8:4D:6F:F7:F0:12:42:DA:84:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9NuV-dG1w-yTT_hNb_fwEkLahCo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/46d7af-02fb-45f9-a922-14b38b6e00a7/1/KO7fuYOsDws2RopcGeqyQEr3khI.roa
Signing time: Mon 02 Jan 2023 17:14:52 +0000
ROA not before: Mon 02 Jan 2023 17:14:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212667
IP address blocks: 195.69.148.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:7a:9a:59:4d:57:fc:2e:dd:dc:4b:71:36:af:70:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4db95f9d1b5c3ec934ff84d6ff7f01242da842a
Validity
Not Before: Jan 2 17:14:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=28eedfb983ac0f0b36468a5c19eab2404af79212
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:0f:8a:8c:6b:ed:69:06:ab:cb:7a:33:78:54:
25:8e:00:9b:2c:1b:1f:41:9d:80:b3:ac:75:4d:a6:
fa:54:c7:61:8a:71:ec:b1:d4:5b:64:c5:95:0e:e8:
e3:d9:5a:09:33:c9:b2:25:0c:b7:d4:14:bc:b2:22:
cb:41:ad:53:e7:bf:23:44:0f:70:88:e4:77:fe:7d:
6b:7c:3f:ec:1d:ef:c5:4f:ca:3c:8c:ee:30:1f:1d:
a5:47:83:f1:78:77:01:96:40:62:f0:5d:0d:c3:50:
1c:47:3b:d1:09:fa:a2:24:32:25:6b:07:07:c6:07:
3c:86:2c:f1:43:dc:92:04:2d:86:ef:29:3b:30:88:
53:fc:77:85:49:e4:cc:1d:e8:a6:7a:d3:21:56:bf:
74:58:05:c3:66:c0:a7:f4:de:7e:a8:82:3f:23:a7:
36:c7:97:c3:4e:e1:fd:00:8c:e8:f1:5e:12:71:fc:
07:55:97:c3:11:58:ea:ec:99:2c:01:f0:f1:e6:79:
eb:f8:c7:d5:58:8b:a4:48:36:f3:26:57:33:0e:9f:
08:3d:41:98:a4:60:d5:75:ee:8f:0b:1e:cb:53:7d:
62:11:8b:79:1c:8a:7d:3c:70:71:43:da:3b:28:f2:
8e:38:a6:49:f4:1a:bf:30:2f:91:4f:a1:5c:51:07:
51:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:EE:DF:B9:83:AC:0F:0B:36:46:8A:5C:19:EA:B2:40:4A:F7:92:12
X509v3 Authority Key Identifier:
keyid:F4:DB:95:F9:D1:B5:C3:EC:93:4F:F8:4D:6F:F7:F0:12:42:DA:84:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9NuV-dG1w-yTT_hNb_fwEkLahCo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/46d7af-02fb-45f9-a922-14b38b6e00a7/1/KO7fuYOsDws2RopcGeqyQEr3khI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/46d7af-02fb-45f9-a922-14b38b6e00a7/1/9NuV-dG1w-yTT_hNb_fwEkLahCo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.69.148.0/24
Signature Algorithm: sha256WithRSAEncryption
41:a5:36:f2:47:a7:a9:ef:1a:25:6c:7d:88:c5:33:98:3d:2e:
21:25:43:0b:21:43:8f:b6:b9:dd:40:08:c8:49:82:41:93:a6:
8c:5f:8e:37:75:42:c3:92:47:a1:f9:29:b6:21:80:b3:4a:3e:
5f:1b:49:fe:3d:d3:43:04:a1:c7:fb:37:87:6d:2a:e1:f5:b1:
64:3d:8c:31:4d:77:9d:1f:14:50:fe:88:10:75:0a:fa:16:a4:
ec:9c:11:81:e5:9e:b7:3e:96:8b:a6:2b:21:74:d0:63:9a:6c:
99:43:2c:71:f6:e0:4e:2f:93:8e:2b:dd:ba:d2:62:ec:72:56:
8f:3f:37:79:b8:24:08:ca:50:3a:ff:65:61:57:f7:c8:0d:ff:
c8:31:47:4b:2e:c0:26:86:0f:e0:0e:c8:69:32:2e:ed:8e:9b:
83:cf:f4:3b:6d:7d:1a:8c:9d:b4:59:6d:60:6c:81:aa:88:93:
ad:ae:05:96:a4:7c:ca:70:6e:6e:40:2c:36:09:04:38:e7:7d:
e3:c1:db:b5:66:91:a6:8b:58:1f:ed:ec:33:da:ac:12:d0:af:
4d:10:d4:d9:af:c4:8b:0e:9b:c2:af:2e:e7:df:47:d4:f6:9a:
bf:43:8c:b8:01:b9:ff:37:e7:39:68:31:4f:28:67:73:7e:6a:
95:ea:a9:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 31 12:57:08 2023 by rpki-client on console-ams.rpki-client.org