Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/5rHPdiY11xYEw_bgi_5oiyHMBZ8.roa
File: 5rHPdiY11xYEw_bgi_5oiyHMBZ8.roa (raw, json)
Hash identifier: jjBxOXekYjvAhN0epazZcHxLUOeq/CJpmM5SjGU6xL8=
Subject key identifier: E6:B1:CF:76:26:35:D7:16:04:C3:F6:E0:8B:FE:68:8B:21:CC:05:9F
Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d
Certificate serial: 50CA54DE
Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/5rHPdiY11xYEw_bgi_5oiyHMBZ8.roa
Signing time: Sat 01 Jan 2022 16:01:43 +0000
ROA not before: Sat 01 Jan 2022 16:01:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 18679
IP address blocks: 195.65.31.0/24 maxlen: 24
195.65.10.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1355437278 (0x50ca54de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d
Validity
Not Before: Jan 1 16:01:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e6b1cf762635d71604c3f6e08bfe688b21cc059f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:5e:d9:66:4b:25:36:31:98:6f:9b:3c:18:a2:
2d:a0:a6:41:9c:b1:36:74:96:31:d3:35:68:bf:4f:
33:3b:dc:e5:98:16:ae:a4:c4:56:db:62:ec:f2:6e:
16:d9:e0:a6:1a:e9:41:d2:f9:21:e7:bb:84:a9:38:
22:4f:cf:21:9c:f4:8c:5a:7e:8f:79:4f:0b:91:56:
f1:7f:9e:a7:dc:d9:e2:7c:6b:7e:f3:ef:6d:ed:ca:
5d:a6:d9:07:e7:1e:1b:39:e2:78:f6:3c:ff:74:8c:
d9:e5:b9:67:e0:1d:06:59:2d:3d:fe:bc:09:c8:c1:
cf:dc:7e:dd:fb:6e:f6:60:0a:d4:22:1c:65:44:46:
81:a8:5b:d2:0f:2b:a8:c6:0b:e2:96:d1:21:04:6e:
f9:36:d6:73:34:c0:30:31:52:86:7c:5a:2f:04:19:
e9:a9:aa:db:e7:a2:c6:73:7a:98:f9:6c:d9:35:7f:
d7:9d:1b:07:43:9f:4f:b1:ef:63:58:46:4c:32:33:
0d:29:8c:11:ae:6e:fe:70:c7:16:12:4b:03:26:32:
6b:96:93:b4:9f:b1:af:2c:68:6b:59:d7:c7:c1:04:
37:69:ea:50:e7:aa:a1:b4:df:a5:82:e5:8e:bc:d3:
ec:08:73:f0:b5:33:7a:80:2e:b4:80:78:41:2b:22:
a8:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:B1:CF:76:26:35:D7:16:04:C3:F6:E0:8B:FE:68:8B:21:CC:05:9F
X509v3 Authority Key Identifier:
keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/5rHPdiY11xYEw_bgi_5oiyHMBZ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.65.10.0/24
195.65.31.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:9a:e9:71:40:c8:4c:3b:e9:7e:11:08:b0:c7:50:a6:2e:a7:
02:13:98:c8:30:eb:03:49:08:33:49:a0:be:fd:75:bf:b0:2d:
5c:ba:cf:12:57:e3:ed:d9:5e:89:bd:c8:a7:53:5e:86:45:5a:
ff:d9:48:9a:95:a0:ff:8f:a4:9a:35:fb:c2:50:a9:a8:8c:c9:
52:e7:14:2d:87:66:55:2d:e9:6a:e0:c6:5a:64:49:98:42:ed:
ac:2b:22:e7:f8:97:62:2c:f3:13:fa:97:bd:c8:c2:4d:09:76:
ca:73:9b:86:e8:6a:50:41:06:de:19:66:95:46:f2:f1:a8:15:
61:6f:29:91:4e:3b:08:5c:1e:a8:45:97:09:28:a3:f2:01:c3:
b6:ff:d0:cc:3c:d4:01:a4:e7:10:07:9f:d4:52:f4:a1:5c:18:
59:6f:88:94:9d:01:f0:1f:a8:ac:21:c0:d0:f0:22:12:d3:e7:
4d:5b:8a:66:94:f8:41:39:b4:85:72:b8:05:19:83:95:00:22:
70:89:ef:a1:a0:b8:cc:2b:59:8f:80:ba:d1:4b:25:b8:b0:96:
f8:6f:00:2d:15:53:f8:a3:0c:1f:06:00:26:6b:09:90:85:6b:
e0:41:c9:02:28:0e:bc:3f:4f:08:db:d6:8f:ad:65:9c:72:07:
5f:b2:b2:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:55:32 2025 by rpki-client