Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/jYXeXWmgxS_XbTMvaCuzWR1X-aM.roa
File: jYXeXWmgxS_XbTMvaCuzWR1X-aM.roa (raw, json)
Hash identifier: l1Qk1O7bzhT+MLtP3mZU3quo/U95PU6SsdDIsCwL+hg=
Subject key identifier: 8D:85:DE:5D:69:A0:C5:2F:D7:6D:33:2F:68:2B:B3:59:1D:57:F9:A3
Certificate issuer: /CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Certificate serial: 0184133E2B5BA33E39F2EA0CB867D60B3A84
Authority key identifier: 4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/jYXeXWmgxS_XbTMvaCuzWR1X-aM.roa
Signing time: Wed 26 Oct 2022 07:42:32 +0000
ROA not before: Wed 26 Oct 2022 07:42:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29262
IP address blocks: 185.254.54.0/24 maxlen: 24
185.254.55.0/24 maxlen: 24
141.98.50.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:13:3e:2b:5b:a3:3e:39:f2:ea:0c:b8:67:d6:0b:3a:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Validity
Not Before: Oct 26 07:42:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8d85de5d69a0c52fd76d332f682bb3591d57f9a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:d7:02:07:9a:a3:d3:df:62:43:98:f0:85:8f:
b8:ff:86:d9:b8:42:53:44:06:d7:95:f4:3f:cf:23:
a9:ce:30:69:c1:52:ec:a9:b6:7a:9f:25:65:48:03:
84:93:1a:91:b7:51:f0:d9:31:db:86:8b:6d:c5:9f:
41:90:46:76:31:d2:10:56:b8:dc:3c:d7:12:e0:cc:
d0:e8:67:56:9e:b6:fd:e1:74:68:34:63:d8:4f:4d:
c0:ef:e8:08:e9:b0:a4:02:d7:09:22:35:cb:3f:2f:
8e:bc:55:6b:62:42:4b:54:3e:32:50:52:85:78:27:
4f:ce:8a:b5:0d:14:15:72:d2:fd:79:e3:7f:5a:b6:
bf:e7:1b:60:b2:8c:7b:46:1a:a0:18:97:7f:0b:9c:
34:fc:7a:8a:49:0e:ae:cb:53:23:61:87:39:2e:06:
7e:07:df:c1:65:8e:37:fb:6e:0a:5e:6f:e8:0b:39:
95:51:27:c0:2f:2c:45:fb:77:68:64:18:bd:2a:d5:
90:de:09:11:52:ca:55:91:3e:e4:3d:c2:9d:d5:9d:
3b:58:28:34:22:a0:32:ca:c0:92:de:fb:be:d0:c8:
3f:ac:76:e2:02:9f:41:bb:91:f8:7a:af:0e:bd:c2:
fb:51:36:65:cc:de:c5:33:3f:9c:5d:c6:ae:b2:09:
92:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:85:DE:5D:69:A0:C5:2F:D7:6D:33:2F:68:2B:B3:59:1D:57:F9:A3
X509v3 Authority Key Identifier:
keyid:4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/jYXeXWmgxS_XbTMvaCuzWR1X-aM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.98.50.0/24
185.254.54.0/23
Signature Algorithm: sha256WithRSAEncryption
6e:c9:78:a8:ff:ac:c9:e4:30:d9:6a:c4:48:98:a9:6a:57:e5:
23:e6:6a:bf:d2:39:b1:8f:7f:5e:7f:e7:58:4e:31:2b:1f:b7:
73:6d:ce:50:3c:42:ba:e3:8b:06:82:e9:09:65:e2:12:40:ee:
67:bb:da:0e:56:ec:3c:37:a2:79:28:44:d7:55:ce:74:c7:c0:
37:21:b3:a1:72:0c:03:00:0e:5f:04:ab:59:bb:5a:a4:f4:ba:
f0:8b:87:54:15:b3:78:00:49:39:a3:55:10:b8:ca:96:77:05:
3a:41:9a:61:1e:83:5f:55:9f:d3:4e:96:71:15:94:51:37:7d:
f5:5a:3b:db:8f:bd:60:9e:d1:27:3a:34:ab:b3:5d:f6:c6:7c:
a4:66:77:fc:6b:59:4b:db:a3:fd:fb:d6:8c:83:32:66:82:f5:
3a:96:b0:71:47:5f:22:1d:94:42:6a:de:d3:b9:d4:ce:41:65:
45:65:fd:3e:60:ab:66:b2:17:87:bb:69:8f:65:6d:a4:00:82:
4d:08:f8:2a:f6:28:60:f5:6d:e7:3f:9f:b9:7f:51:c0:6d:01:
5a:1b:92:d0:9a:bc:c0:e4:b9:98:1a:11:06:63:75:89:ed:f8:
90:ac:ef:22:7f:88:6c:fc:a4:de:ab:69:10:cc:2e:59:e9:91:
5b:57:c3:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 12:29:21 2025 by rpki-client