Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/a665d6-b605-4de8-82ca-9c0e646b6881/1/fVPmMAsOi0mWgSlh3Jl_lM9QAMU.roa
File: fVPmMAsOi0mWgSlh3Jl_lM9QAMU.roa (raw, json)
Hash identifier: IgFbDjaEpgmwCcOixw1hiQ8sCey4GZK9cwNCVxhI4tk=
Subject key identifier: 7D:53:E6:30:0B:0E:8B:49:96:81:29:61:DC:99:7F:94:CF:50:00:C5
Certificate issuer: /CN=a0415b6357b1eb232821091fd4f26879540e6857
Certificate serial: 018570DE726AD76E25348C103CCBF780E8D4
Authority key identifier: A0:41:5B:63:57:B1:EB:23:28:21:09:1F:D4:F2:68:79:54:0E:68:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oEFbY1ex6yMoIQkf1PJoeVQOaFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/a665d6-b605-4de8-82ca-9c0e646b6881/1/fVPmMAsOi0mWgSlh3Jl_lM9QAMU.roa
Signing time: Mon 02 Jan 2023 05:05:04 +0000
ROA not before: Mon 02 Jan 2023 05:05:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51815
IP address blocks: 195.190.133.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:de:72:6a:d7:6e:25:34:8c:10:3c:cb:f7:80:e8:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0415b6357b1eb232821091fd4f26879540e6857
Validity
Not Before: Jan 2 05:05:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7d53e6300b0e8b4996812961dc997f94cf5000c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:52:22:2c:31:48:49:36:de:54:ca:24:57:a7:
93:60:e6:33:22:50:cf:e0:cc:f2:4b:bb:f9:10:98:
5f:df:7d:58:95:d0:c3:31:b5:bd:1a:0e:af:b0:50:
36:ec:74:27:57:25:a6:94:32:31:65:80:bc:cd:c7:
d5:50:70:dc:c0:f8:4c:e2:b3:0a:28:84:eb:3a:a6:
54:f9:9a:dc:85:a7:9f:4a:d1:7b:f8:e1:c8:e0:ed:
ff:b0:72:ba:50:55:e2:e7:6a:6d:a9:97:94:c8:66:
26:8c:b7:27:2f:28:c8:f5:c4:a3:91:b5:7a:2f:7c:
de:9f:9e:ae:83:f6:aa:38:27:f9:1d:b2:ef:b6:6f:
f8:44:b1:1b:7b:02:2a:6b:73:c1:65:39:72:da:25:
8a:e5:72:dc:c8:78:02:bd:30:ee:0c:15:8e:75:85:
83:82:38:1d:66:dd:09:a2:ea:4d:7a:d4:ae:77:91:
5d:3c:d5:a8:07:71:88:aa:11:ec:86:df:54:e9:68:
a0:08:f6:87:cc:8a:98:ec:f1:51:a4:14:20:a6:b4:
3e:e3:5a:df:a6:ab:21:2a:10:fb:d2:af:e5:e9:c3:
ea:54:90:38:b2:3b:99:f3:f8:b4:6e:03:d9:c7:a1:
c5:a1:07:19:51:55:1a:bd:cf:4a:4a:f3:fc:b0:6c:
35:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:53:E6:30:0B:0E:8B:49:96:81:29:61:DC:99:7F:94:CF:50:00:C5
X509v3 Authority Key Identifier:
keyid:A0:41:5B:63:57:B1:EB:23:28:21:09:1F:D4:F2:68:79:54:0E:68:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oEFbY1ex6yMoIQkf1PJoeVQOaFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/a665d6-b605-4de8-82ca-9c0e646b6881/1/fVPmMAsOi0mWgSlh3Jl_lM9QAMU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/a665d6-b605-4de8-82ca-9c0e646b6881/1/oEFbY1ex6yMoIQkf1PJoeVQOaFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.190.133.0/24
Signature Algorithm: sha256WithRSAEncryption
12:4a:b2:cc:ce:7f:cc:44:cd:00:f7:1c:3a:50:de:96:4d:c4:
38:c9:35:6c:02:48:80:3a:89:8a:c0:31:c8:45:6e:4f:cb:ae:
a1:6e:8f:ff:45:3f:9f:10:3c:58:a1:68:a1:a6:b9:51:14:62:
de:a7:4b:aa:68:96:ff:75:0d:d1:10:98:d1:a1:dc:35:09:56:
7c:62:93:a0:4c:35:ef:7e:24:d1:46:25:b1:7a:99:a9:21:bd:
14:ed:44:63:86:3a:fd:3c:a8:24:eb:ac:be:5c:6b:64:f0:49:
03:c1:3e:b2:38:6d:b6:df:28:58:3e:e0:a8:5b:7b:c2:64:92:
c4:b3:4f:33:57:33:ac:83:70:9d:0d:b5:3f:4f:27:33:83:7b:
c3:e3:c2:93:79:01:dd:4e:be:9c:ca:0f:68:e6:1b:b5:75:a1:
2f:4a:ca:67:f9:65:1f:2e:11:2a:07:52:5d:c1:04:28:c1:b1:
4e:d5:70:f6:bc:b5:e6:ca:77:79:a0:85:52:d2:4b:5e:18:3b:
5f:b5:33:f6:c2:21:ec:84:e8:fa:29:f3:90:45:4a:f3:83:1c:
d2:ea:0b:ac:40:77:62:de:75:c3:8c:d7:8c:d4:bc:82:a9:50:
08:c8:58:27:d3:fe:56:93:17:23:ef:83:00:c0:3e:0c:ed:2b:
2e:bb:3c:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:38:43 2025 by rpki-client