Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/795ded-fcdf-47cf-af83-a4bc2816643a/1/x9SqwuYG35YElWgvy0_8lNzqvww.roa
File: x9SqwuYG35YElWgvy0_8lNzqvww.roa (raw, json)
Hash identifier: o380kRsu5ziwN4s9dJX34gW3E2fiqwGPbSM2YFXqYDU=
Subject key identifier: C7:D4:AA:C2:E6:06:DF:96:04:95:68:2F:CB:4F:FC:94:DC:EA:BF:0C
Certificate issuer: /CN=80f376df5f9ef487c82b31a875c6a496d79ca0d7
Certificate serial: 1579B45F
Authority key identifier: 80:F3:76:DF:5F:9E:F4:87:C8:2B:31:A8:75:C6:A4:96:D7:9C:A0:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gPN231-e9IfIKzGodcakltecoNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/795ded-fcdf-47cf-af83-a4bc2816643a/1/x9SqwuYG35YElWgvy0_8lNzqvww.roa
Signing time: Sat 01 Jan 2022 14:03:42 +0000
ROA not before: Sat 01 Jan 2022 14:03:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 197328
IP address blocks: 107.150.95.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 360297567 (0x1579b45f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80f376df5f9ef487c82b31a875c6a496d79ca0d7
Validity
Not Before: Jan 1 14:03:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c7d4aac2e606df960495682fcb4ffc94dceabf0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:03:bf:9e:36:00:e9:a6:7b:83:3c:9c:d1:0d:
10:18:2e:be:90:30:9a:de:07:88:c2:24:19:d1:8d:
ea:f5:ef:66:0e:f4:d6:a7:65:69:c2:62:47:a4:1b:
31:cf:00:95:9d:c1:ee:c3:08:a8:c7:a5:07:5c:77:
29:e2:54:ab:31:1c:fc:22:9c:64:17:01:19:f6:09:
91:bd:4a:0f:70:37:74:23:36:45:dc:78:cf:bc:2b:
3a:ac:01:f6:0d:d2:31:59:b5:90:95:2d:d5:54:85:
e3:34:88:cc:ec:4c:0d:6f:0a:62:50:d5:17:7e:41:
62:35:cd:bb:95:95:a5:e8:f0:b7:d0:b7:9f:cf:06:
fe:53:23:df:c4:6f:db:97:dd:cb:bd:a8:46:e6:6c:
81:da:fa:78:af:7e:ff:12:c9:e5:68:12:72:99:a4:
07:51:96:c0:c3:64:cd:81:cc:f8:16:f5:33:78:3f:
9c:03:75:1d:a9:30:45:ec:14:c9:7a:98:8a:08:cd:
6d:1d:58:92:3e:c1:e6:8d:a4:22:7c:eb:14:a8:80:
e8:35:ff:66:cc:7d:99:f4:cc:32:4b:db:8b:73:ae:
8a:49:81:a3:4d:80:f7:96:06:65:e8:84:0b:81:d1:
09:db:ea:8d:e2:13:09:13:c7:68:ac:d3:4a:ef:c3:
34:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:D4:AA:C2:E6:06:DF:96:04:95:68:2F:CB:4F:FC:94:DC:EA:BF:0C
X509v3 Authority Key Identifier:
keyid:80:F3:76:DF:5F:9E:F4:87:C8:2B:31:A8:75:C6:A4:96:D7:9C:A0:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gPN231-e9IfIKzGodcakltecoNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/795ded-fcdf-47cf-af83-a4bc2816643a/1/x9SqwuYG35YElWgvy0_8lNzqvww.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/795ded-fcdf-47cf-af83-a4bc2816643a/1/gPN231-e9IfIKzGodcakltecoNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
107.150.95.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:dd:5d:25:e1:08:01:88:94:86:11:27:53:c3:3c:62:5d:d2:
4f:5f:58:ba:ec:ff:e2:3b:2e:eb:5d:c9:bf:74:d7:5e:ea:8c:
6a:29:fb:90:f1:3d:cc:68:15:af:b5:1b:32:e3:da:71:91:86:
24:7d:95:09:c9:a5:a7:0c:a6:39:2a:ac:53:4f:88:2b:d1:46:
6f:5f:ad:9c:ec:c3:3c:42:28:19:50:65:1c:b0:88:fd:95:23:
72:0b:8d:8d:27:8e:ef:91:59:f8:bc:cc:e0:b2:e7:b6:29:19:
43:b2:4b:7c:59:42:c8:1e:77:29:c5:9a:7f:6c:09:fc:41:72:
d1:36:33:ee:ef:d3:37:b1:b6:9b:90:ff:03:97:8c:55:45:5e:
35:b1:c2:57:4b:67:05:80:1a:22:54:7a:a9:f4:ca:79:90:14:
32:f4:a6:7c:b5:84:57:7b:d9:e6:44:02:81:8b:1d:db:88:74:
c8:73:3b:24:ea:85:f8:e7:4e:8e:41:57:4e:db:a0:92:ce:5f:
6f:78:f6:82:8c:90:34:ae:58:63:fe:eb:dd:0b:40:b2:b5:78:
51:81:bc:5b:87:fe:56:0a:02:a6:6c:f5:36:fd:98:a3:4e:73:
c3:19:a6:4c:ed:2a:72:2d:12:a3:04:2b:e5:f3:1f:e0:57:fc:
7b:6a:09:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 09:12:26 2025 by rpki-client