Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/5aacf3-bbc9-43c4-86f0-54f6e52f547b/1/0xmRXPZDE0jC47E_5PIp7bo23YM.roa
File: 0xmRXPZDE0jC47E_5PIp7bo23YM.roa (raw, json)
Hash identifier: 4Nv6MEKG+V554AC2qFVFoPuEFwNpCl/EXejwvtpC7RM=
Subject key identifier: D3:19:91:5C:F6:43:13:48:C2:E3:B1:3F:E4:F2:29:ED:BA:36:DD:83
Certificate issuer: /CN=4b23b06d60ec3e76b4920b2b64141fa3af6e5fbb
Certificate serial: 018CC86F26463C77D71AD00E702FF501328E
Authority key identifier: 4B:23:B0:6D:60:EC:3E:76:B4:92:0B:2B:64:14:1F:A3:AF:6E:5F:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SyOwbWDsPna0kgsrZBQfo69uX7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/5aacf3-bbc9-43c4-86f0-54f6e52f547b/1/0xmRXPZDE0jC47E_5PIp7bo23YM.roa
Signing time: Tue 02 Jan 2024 04:29:36 +0000
ROA not before: Tue 02 Jan 2024 04:29:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21495
IP address blocks: 195.242.183.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:26:46:3c:77:d7:1a:d0:0e:70:2f:f5:01:32:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b23b06d60ec3e76b4920b2b64141fa3af6e5fbb
Validity
Not Before: Jan 2 04:29:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d319915cf6431348c2e3b13fe4f229edba36dd83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:0b:0f:7c:19:8c:d7:cc:ce:c2:9e:bb:ea:c7:
75:32:1a:42:ee:94:3f:01:0d:94:f4:62:72:68:2f:
b1:d8:53:2f:8a:c5:2e:db:76:59:7b:18:20:0e:79:
2e:d3:7c:f5:c6:82:be:96:4b:6a:20:55:b8:cd:f9:
92:f4:3c:1d:2f:e3:d1:3b:10:56:e2:31:0f:c0:23:
5d:a7:20:9a:0a:00:78:1d:d9:5b:57:97:fd:bc:d7:
16:18:ea:3a:b4:71:ac:72:28:a8:7c:c5:23:5a:54:
2b:4b:1d:92:59:89:44:86:b0:c7:5e:04:2c:d3:b1:
1d:5c:d8:40:44:57:b4:7d:dc:57:45:d1:f8:46:e0:
1e:88:41:d3:79:14:f0:42:dc:0c:75:99:0f:14:b7:
8f:e0:62:4a:83:cc:4c:48:f5:f3:5e:1e:be:7a:2f:
84:96:4d:e8:a5:ab:ed:89:47:2f:3d:f4:98:7e:7b:
bf:e8:0a:68:89:f6:71:cc:cb:5a:bb:75:48:19:34:
67:f9:31:46:17:73:da:a4:32:6a:f1:60:e0:bb:69:
9d:7b:bd:8f:e9:9b:b6:48:3f:f4:02:37:f7:2d:78:
ce:5e:85:6d:be:c3:30:54:c8:7c:39:df:50:fa:5c:
72:c1:a3:0e:4d:ff:75:db:29:0f:c7:69:05:74:12:
5f:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:19:91:5C:F6:43:13:48:C2:E3:B1:3F:E4:F2:29:ED:BA:36:DD:83
X509v3 Authority Key Identifier:
keyid:4B:23:B0:6D:60:EC:3E:76:B4:92:0B:2B:64:14:1F:A3:AF:6E:5F:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SyOwbWDsPna0kgsrZBQfo69uX7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/5aacf3-bbc9-43c4-86f0-54f6e52f547b/1/0xmRXPZDE0jC47E_5PIp7bo23YM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/5aacf3-bbc9-43c4-86f0-54f6e52f547b/1/SyOwbWDsPna0kgsrZBQfo69uX7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.242.183.0/24
Signature Algorithm: sha256WithRSAEncryption
88:f4:f1:eb:f6:c2:17:7e:de:2d:29:f6:b9:ee:44:7a:98:09:
f7:09:12:1b:c3:0e:2c:98:ea:87:ce:39:3a:7c:b2:5f:68:be:
a2:e2:b1:64:fd:3d:d9:ac:29:9a:26:94:f2:0f:c0:eb:17:f0:
7d:39:d9:71:21:2a:64:75:de:53:86:45:e1:62:e5:d3:e2:2b:
15:f4:f6:db:5e:8e:99:1d:7e:40:50:89:d9:87:09:d4:bd:10:
84:24:f9:bd:f9:ec:c1:9a:a0:f9:f3:77:f8:5d:5a:e7:50:4e:
27:d6:91:f5:e8:1e:f1:18:d7:e8:5c:b4:d0:56:b9:5d:14:bf:
89:0b:17:7e:dd:16:06:97:2b:aa:19:23:e4:05:b0:1d:fb:94:
d7:b2:77:6a:99:ff:3b:49:57:fc:ad:25:26:b0:1c:bf:38:9c:
3d:26:ee:28:84:08:06:bc:48:28:cc:4d:8c:e6:28:44:3b:91:
9e:03:e7:f3:9f:64:5a:d6:61:34:4c:93:0d:cc:53:ea:6c:e9:
da:92:36:c4:52:f1:6f:81:89:57:51:53:b1:a0:8c:45:d9:2d:
b7:b0:7e:5c:c2:c4:b7:5a:18:54:b5:b8:d5:ae:6b:38:4a:b3:
1d:1a:8d:c0:76:c4:0c:e2:09:47:70:86:45:4a:3b:68:6c:93:
54:52:35:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:39:23 2025 by rpki-client