Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/01f08c-065e-4ac1-8e80-b15e3f09e01b/1/G48MzGnBZw5GoBJ8dgMcOQLmmjE.roa
File: G48MzGnBZw5GoBJ8dgMcOQLmmjE.roa (raw, json)
Hash identifier: F+1y9rpeY6mYNA7xNMewSWb2qOAl8IIu6p0n/+sQzmQ=
Subject key identifier: 1B:8F:0C:CC:69:C1:67:0E:46:A0:12:7C:76:03:1C:39:02:E6:9A:31
Certificate issuer: /CN=0c7161e622f63c0db8568d8cb4c4d7c0d9808346
Certificate serial: 01942369E634C5A2E6448992A1035A5B68FF
Authority key identifier: 0C:71:61:E6:22:F6:3C:0D:B8:56:8D:8C:B4:C4:D7:C0:D9:80:83:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DHFh5iL2PA24Vo2MtMTXwNmAg0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/01f08c-065e-4ac1-8e80-b15e3f09e01b/1/G48MzGnBZw5GoBJ8dgMcOQLmmjE.roa
Signing time: Wed 01 Jan 2025 19:48:50 +0000
ROA not before: Wed 01 Jan 2025 19:48:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210162
IP address blocks: 195.7.8.0/24 maxlen: 24
195.7.9.0/24 maxlen: 24
195.7.10.0/24 maxlen: 24
195.7.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:e6:34:c5:a2:e6:44:89:92:a1:03:5a:5b:68:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c7161e622f63c0db8568d8cb4c4d7c0d9808346
Validity
Not Before: Jan 1 19:48:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1b8f0ccc69c1670e46a0127c76031c3902e69a31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:3c:da:16:20:c1:28:1f:6c:97:a1:f3:3c:2a:
3d:3a:f3:09:bb:34:10:bb:e3:64:11:63:47:ec:c3:
61:38:77:b3:4f:2d:09:72:ce:5d:d3:7d:32:1e:19:
57:1d:49:e3:63:54:54:f2:b9:75:6e:1d:65:25:20:
fa:aa:ce:08:95:c9:59:87:c1:09:7c:6d:02:72:48:
9c:5f:46:27:2a:24:9e:4b:ff:61:ea:41:03:25:b4:
9c:92:f9:c5:bb:61:0e:62:ba:2b:13:7d:ab:79:9b:
a1:b9:1c:e1:74:ff:fe:69:d3:6b:5f:9e:c8:47:0d:
5b:91:82:e0:25:28:ff:fb:07:af:6b:8b:7c:45:a2:
e8:0a:0a:3f:d9:6e:48:5e:58:d1:d3:bb:ea:f6:4b:
f9:1e:25:d9:16:8b:c6:f3:58:58:f4:58:ee:ec:4f:
56:fe:a4:90:41:70:df:4e:f4:9b:7f:43:f8:ab:3b:
60:06:18:bc:a2:ce:2f:72:46:e6:2b:0c:20:5f:6a:
0a:fd:e2:66:f6:fc:1c:b3:df:bd:f3:33:d4:54:b6:
6e:01:01:ca:4b:fb:61:67:6b:b9:0a:86:e6:58:1a:
57:20:55:4f:33:11:db:8c:d8:22:fe:3c:67:2c:b9:
2c:db:32:ea:51:46:fc:00:ba:68:14:16:c1:34:08:
a1:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:8F:0C:CC:69:C1:67:0E:46:A0:12:7C:76:03:1C:39:02:E6:9A:31
X509v3 Authority Key Identifier:
keyid:0C:71:61:E6:22:F6:3C:0D:B8:56:8D:8C:B4:C4:D7:C0:D9:80:83:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DHFh5iL2PA24Vo2MtMTXwNmAg0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/01f08c-065e-4ac1-8e80-b15e3f09e01b/1/G48MzGnBZw5GoBJ8dgMcOQLmmjE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/01f08c-065e-4ac1-8e80-b15e3f09e01b/1/DHFh5iL2PA24Vo2MtMTXwNmAg0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.7.8.0/22
Signature Algorithm: sha256WithRSAEncryption
0d:7c:8d:f4:8f:7e:a5:1f:b7:ee:63:55:cc:e0:e3:b2:0b:b0:
0d:ea:ab:f1:b3:43:1c:33:ba:3d:2a:ec:08:fb:c2:bd:db:03:
81:e9:cf:fa:8c:59:ac:61:3c:03:6e:41:42:ce:0f:a7:8e:f8:
2f:54:76:bf:4d:53:41:47:42:d2:a1:96:8d:f7:48:fc:d8:11:
99:18:eb:9c:bc:53:50:2f:ec:c8:4c:02:38:f3:4b:0c:03:b7:
db:a3:24:5e:59:36:a1:80:61:0f:81:3c:82:9f:5a:63:1f:70:
24:d7:2b:61:e1:7e:a0:73:2c:7f:62:f3:1f:c0:ed:8a:de:5c:
d6:ee:fe:90:b5:92:ce:f7:36:1b:3d:f0:b3:2c:49:3a:75:d1:
b5:9d:29:d8:7f:68:7c:b3:d8:05:4a:41:0c:0c:63:3a:7c:92:
3a:72:c6:ba:1e:ba:a7:8e:6d:8e:80:85:84:62:51:35:b4:36:
03:fc:b1:57:29:ad:85:18:12:93:cb:3a:36:44:94:d7:93:b6:
75:b8:9f:4d:f0:00:8b:4c:92:5f:50:5e:d0:17:31:5a:d6:1f:
22:51:e1:57:5e:ce:1c:d1:2f:51:8f:d6:ee:d8:fd:db:9a:ba:
61:ec:d6:1d:95:4c:28:47:f6:24:85:56:86:ee:87:4f:a5:8e:
d9:a7:b5:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 23 19:16:48 2025 by rpki-client on console.sobornost.net