Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/c89c9e-8623-4572-af80-7e51a2cdf813/1/gQLvVYuVQH4nXfwB-5TcIG6I4K4.roa
File: gQLvVYuVQH4nXfwB-5TcIG6I4K4.roa (raw, json)
Hash identifier: Pp561Pta1hFUXSEjQhL0mnirtO6gqwoTvsPgj68ktd8=
Subject key identifier: 81:02:EF:55:8B:95:40:7E:27:5D:FC:01:FB:94:DC:20:6E:88:E0:AE
Certificate issuer: /CN=073e9e3a85d4509a36b6527687a84a7b115460b7
Certificate serial: 07435B58
Authority key identifier: 07:3E:9E:3A:85:D4:50:9A:36:B6:52:76:87:A8:4A:7B:11:54:60:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bz6eOoXUUJo2tlJ2h6hKexFUYLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/c89c9e-8623-4572-af80-7e51a2cdf813/1/gQLvVYuVQH4nXfwB-5TcIG6I4K4.roa
Signing time: Sat 01 Jan 2022 01:54:13 +0000
ROA not before: Sat 01 Jan 2022 01:54:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43809
IP address blocks: 195.88.130.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121854808 (0x7435b58)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=073e9e3a85d4509a36b6527687a84a7b115460b7
Validity
Not Before: Jan 1 01:54:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8102ef558b95407e275dfc01fb94dc206e88e0ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:4b:1a:dd:98:43:a6:41:ef:79:93:ec:17:7b:
57:bb:8e:d5:ec:5a:b4:b3:15:86:3b:25:06:bb:f1:
bf:11:49:00:af:de:b2:be:7b:77:36:da:bf:7f:0e:
32:9e:f1:f8:98:a9:66:07:d2:70:2b:54:75:ad:5d:
e0:0e:c6:1f:23:aa:61:e1:f3:26:82:a5:f2:ef:44:
2c:94:32:cc:4b:ad:e2:f7:7f:23:32:9d:71:27:2c:
f6:f6:e1:62:de:0f:18:2c:00:ee:c0:2c:ec:2f:52:
70:da:f2:f5:59:fe:9a:3e:7e:4e:de:a7:95:46:83:
14:d3:3c:1f:62:99:ff:1c:75:75:b7:eb:17:89:82:
f5:bd:fb:e5:d8:d2:24:38:09:3a:40:d8:e8:85:3e:
c9:e6:ad:62:9a:55:80:3f:70:c6:82:aa:03:7f:c3:
ce:bc:df:92:a6:53:35:a4:83:5e:90:04:44:6a:43:
35:5c:8b:90:c0:19:26:8e:5e:90:b6:3f:dc:f9:1e:
c0:6f:c0:22:3a:41:9c:cb:fd:c3:21:0c:3a:64:ca:
11:e6:5b:f9:b5:85:65:84:a3:fd:a0:82:97:d2:37:
21:bb:52:e7:a5:d4:ef:1d:77:c1:a8:ec:de:0e:ef:
78:45:3f:91:d7:07:58:cc:63:d4:9d:48:7c:3b:7d:
35:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:02:EF:55:8B:95:40:7E:27:5D:FC:01:FB:94:DC:20:6E:88:E0:AE
X509v3 Authority Key Identifier:
keyid:07:3E:9E:3A:85:D4:50:9A:36:B6:52:76:87:A8:4A:7B:11:54:60:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bz6eOoXUUJo2tlJ2h6hKexFUYLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/c89c9e-8623-4572-af80-7e51a2cdf813/1/gQLvVYuVQH4nXfwB-5TcIG6I4K4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/c89c9e-8623-4572-af80-7e51a2cdf813/1/Bz6eOoXUUJo2tlJ2h6hKexFUYLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.88.130.0/23
Signature Algorithm: sha256WithRSAEncryption
63:fe:d8:f6:3b:74:ba:40:2c:71:ef:1f:75:7e:93:cc:8c:23:
63:13:e6:1b:81:ec:b6:ae:4e:8f:d0:fd:6c:a0:2b:c4:78:f4:
cb:03:c4:22:de:fa:c3:65:9f:c2:04:1b:3b:b5:07:d1:1f:9f:
0e:52:c2:55:9e:0e:75:09:fe:db:81:bb:bd:48:99:84:60:23:
16:5d:0b:bc:cb:54:22:32:1b:67:75:81:c3:df:97:34:a6:05:
68:5e:be:19:4f:18:76:50:77:49:31:73:a6:7f:0f:89:43:81:
c6:31:ef:f0:42:11:0e:b8:e6:71:de:b6:4a:96:2c:6a:d2:4f:
5e:92:ff:70:b7:f6:e2:04:6f:03:79:c6:08:63:5f:b3:e1:cd:
40:e9:f2:12:6a:e0:d6:05:9a:ac:14:49:c4:c1:dc:8a:4a:ac:
bf:db:5b:23:f7:ca:df:6d:97:7d:07:ad:0f:90:24:ff:e5:98:
14:e4:82:68:8a:74:e8:56:fd:a4:54:f4:43:d5:f2:7e:32:a2:
4c:9b:64:fb:d9:86:7a:58:66:46:3e:5c:0b:1d:00:4d:a6:86:
c4:68:a7:f0:17:d6:91:1e:eb:f0:9d:10:77:2c:8a:32:2f:25:
c1:ee:8a:b3:dd:16:50:9f:be:16:b5:be:26:b3:e3:73:9f:f9:
41:ae:18:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:38:52 2025 by rpki-client