Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/c89c9e-8623-4572-af80-7e51a2cdf813/1/b-VO_eoWQvKhTHgSv2OvHeEZCBw.roa
File: b-VO_eoWQvKhTHgSv2OvHeEZCBw.roa (raw, json)
Hash identifier: Nw06nyTn7RCwdtkIyV2rKrPCIV1mRiMQB+Tneb3YpVA=
Subject key identifier: 6F:E5:4E:FD:EA:16:42:F2:A1:4C:78:12:BF:63:AF:1D:E1:19:08:1C
Certificate issuer: /CN=073e9e3a85d4509a36b6527687a84a7b115460b7
Certificate serial: 018572835FB2A3C5FBDDB42044646FDDCCCD
Authority key identifier: 07:3E:9E:3A:85:D4:50:9A:36:B6:52:76:87:A8:4A:7B:11:54:60:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bz6eOoXUUJo2tlJ2h6hKexFUYLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/c89c9e-8623-4572-af80-7e51a2cdf813/1/b-VO_eoWQvKhTHgSv2OvHeEZCBw.roa
Signing time: Mon 02 Jan 2023 12:44:50 +0000
ROA not before: Mon 02 Jan 2023 12:44:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43809
IP address blocks: 195.88.130.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:83:5f:b2:a3:c5:fb:dd:b4:20:44:64:6f:dd:cc:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=073e9e3a85d4509a36b6527687a84a7b115460b7
Validity
Not Before: Jan 2 12:44:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6fe54efdea1642f2a14c7812bf63af1de119081c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:71:9e:f9:47:9c:de:6d:62:cc:a7:ef:e2:02:
15:bd:6b:cd:f4:5c:4a:30:9a:8f:74:41:0d:72:4c:
ab:30:f2:72:46:5b:96:f8:08:e1:30:3e:b6:07:b5:
02:f8:85:fc:69:b8:c4:8a:72:7a:5c:21:fb:8c:69:
09:59:20:14:82:2f:e4:e6:6b:c5:87:56:0c:23:7b:
f6:8e:1f:81:6b:ed:85:c5:f4:70:a8:24:ba:34:07:
b3:c0:57:4e:e2:97:cc:59:f6:fd:c6:24:16:4f:46:
54:c5:9b:34:74:68:9e:9e:25:4d:57:fe:81:94:87:
b5:4d:0d:39:34:63:02:08:cc:7f:4d:e3:bf:f5:25:
b7:c4:bf:d4:20:f5:b6:27:9b:2a:2f:be:02:f9:ec:
1e:67:e9:be:98:0e:9a:c9:33:ab:00:b6:8a:dd:d4:
53:0b:11:7d:db:bc:a9:11:33:7f:55:a8:30:7e:44:
fc:5f:28:fe:c6:c7:f7:f8:22:7c:ba:11:1c:b4:06:
32:f6:2d:06:51:44:97:3f:66:06:f0:f3:41:8b:c2:
8c:98:86:50:1e:ce:14:29:05:3a:1f:f7:e6:5b:4a:
38:1d:ba:d9:e7:65:ec:d5:f5:e0:8e:98:58:ce:76:
69:85:b8:a8:03:b1:31:7d:92:92:24:e5:97:5d:39:
af:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:E5:4E:FD:EA:16:42:F2:A1:4C:78:12:BF:63:AF:1D:E1:19:08:1C
X509v3 Authority Key Identifier:
keyid:07:3E:9E:3A:85:D4:50:9A:36:B6:52:76:87:A8:4A:7B:11:54:60:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bz6eOoXUUJo2tlJ2h6hKexFUYLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/c89c9e-8623-4572-af80-7e51a2cdf813/1/b-VO_eoWQvKhTHgSv2OvHeEZCBw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/c89c9e-8623-4572-af80-7e51a2cdf813/1/Bz6eOoXUUJo2tlJ2h6hKexFUYLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.88.130.0/23
Signature Algorithm: sha256WithRSAEncryption
8c:1a:78:c9:f7:2c:29:a6:d9:e9:fb:26:f9:a3:f4:8b:f1:db:
d5:d6:51:ea:41:bf:6a:92:fb:b4:79:ab:d4:f2:15:de:48:78:
25:38:e9:b5:64:93:1e:5f:fe:b8:67:23:b8:9a:1a:57:1c:f2:
29:ba:ba:1b:0f:dd:34:60:70:ce:eb:97:73:b5:ce:81:86:92:
96:d7:e9:20:be:46:40:c5:f9:66:ad:b2:c0:74:5f:e9:b4:06:
0a:49:65:b9:4b:73:39:3b:b3:4f:8f:40:3b:c5:08:ed:93:63:
4b:17:2e:ef:de:f1:f2:a9:e1:89:a1:9d:ef:65:b1:51:2a:85:
7c:55:42:15:77:2d:bc:66:f5:7d:ff:6c:25:38:93:9f:22:4a:
92:2f:b1:83:0f:a3:2f:14:24:82:13:b9:de:44:35:6b:72:f0:
53:82:e1:c3:f5:bb:25:e1:c4:c3:22:0e:14:81:5f:56:ae:b5:
b0:ea:90:22:16:33:6b:16:3f:58:cc:2b:b1:fa:fc:86:7b:10:
05:9f:47:53:d0:9e:ef:01:88:d2:34:cc:00:f0:b4:85:f1:27:
8f:c7:8d:fe:eb:b9:fe:2a:7a:82:a2:f2:e9:5e:18:9f:7a:af:
5a:fc:7a:0f:80:3f:a1:c4:5d:54:77:4e:6e:40:5b:3e:36:24:
b8:54:d5:e8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVyg1+yo8X73bQgRGRv3czNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3M2U5ZTNhODVkNDUwOWEzNmI2NTI3Njg3YTg0YTdiMTE1
NDYwYjcwHhcNMjMwMTAyMTI0NDUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZmU1NGVmZGVhMTY0MmYyYTE0Yzc4MTJiZjYzYWYxZGUxMTkwODFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqHGe+Uec3m1izKfv4gIVvWvN9FxK
MJqPdEENckyrMPJyRluW+AjhMD62B7UC+IX8abjEinJ6XCH7jGkJWSAUgi/k5mvF
h1YMI3v2jh+Ba+2FxfRwqCS6NAezwFdO4pfMWfb9xiQWT0ZUxZs0dGieniVNV/6B
lIe1TQ05NGMCCMx/TeO/9SW3xL/UIPW2J5sqL74C+eweZ+m+mA6ayTOrALaK3dRT
CxF927ypETN/VagwfkT8Xyj+xsf3+CJ8uhEctAYy9i0GUUSXP2YG8PNBi8KMmIZQ
Hs4UKQU6H/fmW0o4HbrZ52Xs1fXgjphYznZphbioA7ExfZKSJOWXXTmvzwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFG/lTv3qFkLyoUx4Er9jrx3hGQgcMB8GA1UdIwQY
MBaAFAc+njqF1FCaNrZSdoeoSnsRVGC3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQno2ZU9vWFVVSm8ydGxKMmg2aEtleEZVWUxjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS9jODljOWUtODYyMy00NTcyLWFmODAt
N2U1MWEyY2RmODEzLzEvYi1WT19lb1dRdktoVEhnU3YyT3ZIZUVaQ0J3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS9jODljOWUtODYyMy00NTcyLWFmODAtN2U1MWEyY2RmODEz
LzEvQno2ZU9vWFVVSm8ydGxKMmg2aEtleEZVWUxjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBw1iCMA0G
CSqGSIb3DQEBCwUAA4IBAQCMGnjJ9ywpptnp+yb5o/SL8dvV1lHqQb9qkvu0eavU
8hXeSHglOOm1ZJMeX/64ZyO4mhpXHPIpurobD900YHDO65dztc6BhpKW1+kgvkZA
xflmrbLAdF/ptAYKSWW5S3M5O7NPj0A7xQjtk2NLFy7v3vHyqeGJoZ3vZbFRKoV8
VUIVdy28ZvV9/2wlOJOfIkqSL7GDD6MvFCSCE7neRDVrcvBTguHD9bsl4cTDIg4U
gV9WrrWw6pAiFjNrFj9YzCux+vyGexAFn0dT0J7vAYjSNMwA8LSF8SePx43+67n+
KnqCovLpXhifeq9a/HoPgD+hxF1Ud05uQFs+NiS4VNXo
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:45:51 2025 by rpki-client