Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/97e08b-4b3e-481d-a6c3-9fe226dd670b/1/d8Jnu9P0a_wJ-m96CtRxIw8tPRM.roa
File: d8Jnu9P0a_wJ-m96CtRxIw8tPRM.roa (raw, json)
Hash identifier: zRPn2QWzeZmwgI5wu2CvyWNyndtFzbur0gHZrA9TziA=
Subject key identifier: 77:C2:67:BB:D3:F4:6B:FC:09:FA:6F:7A:0A:D4:71:23:0F:2D:3D:13
Certificate issuer: /CN=e5b809d3d4985affa6c3905d613e4631172936c3
Certificate serial: 02023C84
Authority key identifier: E5:B8:09:D3:D4:98:5A:FF:A6:C3:90:5D:61:3E:46:31:17:29:36:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5bgJ09SYWv-mw5BdYT5GMRcpNsM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/97e08b-4b3e-481d-a6c3-9fe226dd670b/1/d8Jnu9P0a_wJ-m96CtRxIw8tPRM.roa
Signing time: Sat 01 Jan 2022 06:55:38 +0000
ROA not before: Sat 01 Jan 2022 06:55:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39537
IP address blocks: 195.189.124.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33700996 (0x2023c84)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5b809d3d4985affa6c3905d613e4631172936c3
Validity
Not Before: Jan 1 06:55:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=77c267bbd3f46bfc09fa6f7a0ad471230f2d3d13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:47:53:88:83:97:6a:07:3b:ca:1a:21:6b:2a:
a2:6d:78:46:5f:20:0e:20:39:d4:4a:03:1d:df:ae:
1e:24:d3:fd:d7:96:cd:ce:96:9b:db:74:ff:f9:28:
ec:67:f2:05:e4:bc:ec:da:89:67:c8:09:c4:13:81:
71:a3:de:dc:bf:c1:8f:8a:7e:5a:c2:85:b6:4c:10:
52:d1:c2:9e:70:70:b1:a3:dd:dc:80:53:c7:55:ae:
ab:3f:c1:a0:09:eb:02:44:9c:01:73:e8:fa:c1:af:
f1:f1:f5:b8:fc:d2:a0:b3:28:69:df:fa:b5:bb:3e:
61:a9:a0:11:d1:72:d5:39:67:60:86:24:91:de:0f:
b3:33:02:41:e4:ab:b9:92:f7:ce:52:98:0a:48:7f:
2b:57:73:9d:df:25:3c:e8:cc:8b:fa:fb:ab:ee:e8:
de:7c:a4:00:80:f7:75:c3:d5:04:d1:0d:ed:7a:92:
4e:ee:a1:d7:73:f1:6e:32:8f:5b:2f:da:09:f3:a1:
bd:bb:ad:f1:9b:0d:30:7a:6f:b4:6e:f6:28:82:b4:
45:b9:ad:a6:ad:68:4d:33:70:28:f7:3f:37:96:0b:
83:b7:75:64:82:c5:dc:43:dc:b6:77:c1:d3:d1:85:
25:e2:eb:85:f2:95:c2:bb:b0:b4:df:e5:a1:dc:33:
29:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:C2:67:BB:D3:F4:6B:FC:09:FA:6F:7A:0A:D4:71:23:0F:2D:3D:13
X509v3 Authority Key Identifier:
keyid:E5:B8:09:D3:D4:98:5A:FF:A6:C3:90:5D:61:3E:46:31:17:29:36:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5bgJ09SYWv-mw5BdYT5GMRcpNsM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/97e08b-4b3e-481d-a6c3-9fe226dd670b/1/d8Jnu9P0a_wJ-m96CtRxIw8tPRM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/97e08b-4b3e-481d-a6c3-9fe226dd670b/1/5bgJ09SYWv-mw5BdYT5GMRcpNsM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.189.124.0/22
Signature Algorithm: sha256WithRSAEncryption
58:94:03:48:05:4b:20:f6:d1:2a:34:c7:78:15:9a:1d:4f:52:
b8:1e:98:f5:5a:20:c7:e5:a9:bb:be:68:7d:e0:79:68:12:0d:
40:72:b7:ba:81:a7:3b:77:9b:99:cb:bf:70:80:85:a6:3e:6c:
c7:87:68:01:1f:12:9b:83:cf:10:c8:d3:54:d7:a6:73:65:e0:
a2:c6:e9:13:78:e6:81:3d:80:a0:4d:50:78:3b:68:80:80:f6:
1d:aa:6a:16:41:b0:22:aa:a4:eb:30:2f:b8:7b:b8:28:7f:2e:
29:59:81:63:6b:10:59:bc:b0:60:48:3c:f5:a9:4e:87:1d:22:
56:8e:2c:59:05:0c:39:38:95:95:a2:73:7d:17:01:b8:bf:8a:
9b:a2:b3:33:99:a0:d2:ed:55:c2:a7:e9:ef:2a:84:f4:67:87:
38:3e:47:7d:9a:aa:2a:48:a1:67:73:69:c9:40:2f:0e:cc:84:
d5:08:ae:2e:aa:0d:d6:8e:cc:cc:85:b5:23:4b:c7:73:92:85:
7c:19:1b:81:25:fd:eb:aa:73:2c:35:b5:17:31:4b:72:66:02:
fb:53:f5:61:9b:60:e7:81:97:1b:ed:b3:94:c4:d7:b3:e5:00:
e5:97:c6:dd:dc:55:25:8c:7c:33:47:5a:17:eb:46:8e:79:b1:
3c:45:d8:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 15:20:25 2025 by rpki-client