Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/c89c9e-8623-4572-af80-7e51a2cdf813/1/RomV_CAsAM7OmFPpvdjscuLayMQ.roa
File: RomV_CAsAM7OmFPpvdjscuLayMQ.roa (raw, json)
Hash identifier: kTEKYXs6nURPcmFaIH2xtRLxZGUZvwjFIBxL/9iyySg=
Subject key identifier: 46:89:95:FC:20:2C:00:CE:CE:98:53:E9:BD:D8:EC:72:E2:DA:C8:C4
Certificate issuer: /CN=073e9e3a85d4509a36b6527687a84a7b115460b7
Certificate serial: 01857283606504B7A84FBDE9A1FD37FD21BB
Authority key identifier: 07:3E:9E:3A:85:D4:50:9A:36:B6:52:76:87:A8:4A:7B:11:54:60:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bz6eOoXUUJo2tlJ2h6hKexFUYLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/c89c9e-8623-4572-af80-7e51a2cdf813/1/RomV_CAsAM7OmFPpvdjscuLayMQ.roa
Signing time: Mon 02 Jan 2023 12:44:50 +0000
ROA not before: Mon 02 Jan 2023 12:44:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 196704
IP address blocks: 195.88.130.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:83:60:65:04:b7:a8:4f:bd:e9:a1:fd:37:fd:21:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=073e9e3a85d4509a36b6527687a84a7b115460b7
Validity
Not Before: Jan 2 12:44:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=468995fc202c00cece9853e9bdd8ec72e2dac8c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:5b:7b:20:51:d2:5c:0c:b3:1d:05:08:9e:8b:
d3:15:a9:42:e8:06:a3:06:fd:2c:0a:36:ac:dc:18:
ef:0e:18:4f:15:ea:1d:ff:7b:7b:8b:a8:93:ff:c8:
74:4f:eb:cb:14:b0:95:99:24:25:80:e9:b4:71:1e:
53:01:82:23:82:72:74:78:8e:c0:b5:79:b4:28:02:
91:6d:fc:b0:23:10:b6:cc:f0:cb:05:87:0d:79:7e:
1d:9f:f9:e9:17:dc:74:d3:d4:ff:e4:23:32:bb:10:
20:c2:ee:bd:c5:c6:38:84:4d:42:a5:2b:77:30:50:
d8:af:5b:85:f8:ac:01:25:b6:09:23:11:92:03:9e:
d0:95:8c:7f:26:e1:e5:97:95:ec:a0:0f:0e:45:1f:
64:e8:82:28:96:6c:08:23:fc:ab:ac:c1:3e:99:ac:
a0:fc:bb:cd:8a:a0:07:c6:08:5a:e8:2a:a5:39:fe:
ed:86:41:67:0b:b8:3c:21:b1:89:82:68:b8:21:46:
5f:9d:78:8d:26:ce:1d:f7:3b:4b:b0:2f:f7:9d:33:
d3:8f:9b:99:e7:8c:03:62:7b:49:3c:d0:fe:ae:d8:
f5:01:94:ad:e1:e8:d1:f6:23:b4:fe:92:ea:9a:53:
a8:94:64:4f:55:0f:2f:24:79:d1:a2:17:93:98:88:
77:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:89:95:FC:20:2C:00:CE:CE:98:53:E9:BD:D8:EC:72:E2:DA:C8:C4
X509v3 Authority Key Identifier:
keyid:07:3E:9E:3A:85:D4:50:9A:36:B6:52:76:87:A8:4A:7B:11:54:60:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bz6eOoXUUJo2tlJ2h6hKexFUYLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/c89c9e-8623-4572-af80-7e51a2cdf813/1/RomV_CAsAM7OmFPpvdjscuLayMQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/c89c9e-8623-4572-af80-7e51a2cdf813/1/Bz6eOoXUUJo2tlJ2h6hKexFUYLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.88.130.0/23
Signature Algorithm: sha256WithRSAEncryption
6e:29:af:37:57:2a:80:bf:f1:55:6e:94:7f:35:8b:56:68:29:
5f:6a:59:55:da:5c:88:01:0a:66:25:7c:cf:79:ca:0b:b7:35:
9b:ac:b5:08:c3:17:ab:cd:0b:c6:66:75:a2:7a:24:73:5a:96:
d9:90:b1:08:ad:91:a7:66:c0:60:29:46:ee:b3:fa:b8:1b:5e:
f5:d6:c5:61:15:f7:f8:9e:89:51:b6:41:7e:eb:3a:e1:6b:2d:
83:a9:8f:74:0e:47:91:3f:0d:5b:1a:73:7a:1c:54:33:e8:17:
a8:94:12:4d:7e:75:33:04:4f:52:64:58:9a:f9:ab:38:52:ad:
44:bc:03:2f:88:ea:46:69:f9:e0:b1:b1:2b:80:61:b5:fd:67:
6d:34:d9:96:ca:fb:bf:2d:51:19:fc:a0:a1:3f:d9:ac:4a:30:
20:a7:d0:65:6b:3a:f3:58:5e:99:8a:6f:35:21:db:44:e6:f3:
49:68:73:d9:b7:15:1d:7f:c8:b5:7d:6f:cf:b7:c3:96:30:0e:
06:f7:32:d3:f5:5e:ba:63:77:50:ec:69:ed:b3:16:55:cc:c4:
2f:b7:91:76:0c:a1:54:d6:39:e2:17:a4:f0:6a:02:a4:ed:2e:
f7:04:d9:f0:af:9f:1b:67:08:ec:c6:ad:43:13:32:99:af:2a:
e4:ae:30:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:23:54 2025 by rpki-client