Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/IwNLxtnaFc1_sSNvI5dl6fWv_aE.roa
File: IwNLxtnaFc1_sSNvI5dl6fWv_aE.roa (raw, json)
Hash identifier: 8d3/TTxMbQUuIv4BhlPlhqp/ke1dxPEptTLnOzdYlVI=
Subject key identifier: 23:03:4B:C6:D9:DA:15:CD:7F:B1:23:6F:23:97:65:E9:F5:AF:FD:A1
Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d
Certificate serial: 50D722D0
Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/IwNLxtnaFc1_sSNvI5dl6fWv_aE.roa
Signing time: Sat 01 Jan 2022 16:01:49 +0000
ROA not before: Sat 01 Jan 2022 16:01:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47299
IP address blocks: 195.65.37.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1356276432 (0x50d722d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d
Validity
Not Before: Jan 1 16:01:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=23034bc6d9da15cd7fb1236f239765e9f5affda1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:71:bb:ae:66:ae:b3:fb:f5:aa:c6:3f:d4:b9:
2e:34:79:54:c8:f1:eb:75:e0:50:35:1b:79:c9:0b:
e6:65:30:89:61:d8:bb:49:ca:52:e1:54:69:72:40:
a3:ec:6a:30:d6:76:a5:81:82:18:53:10:f5:6b:38:
64:2e:72:59:fb:f0:4d:56:8b:ce:a7:37:8b:7a:cb:
f8:59:e5:27:ef:a4:6f:f6:9f:da:34:28:97:45:5c:
a3:36:70:c6:19:c8:79:4e:39:1c:ff:a7:07:f4:a2:
a1:9d:49:6e:09:4e:a5:55:57:c0:dc:ea:36:30:54:
7d:bb:74:2d:7c:22:10:ef:28:60:86:4c:27:25:eb:
02:d6:57:db:6e:db:99:9f:8f:cc:4e:f1:c6:00:4d:
89:c4:1a:2b:78:b4:0f:50:8f:cb:6c:11:cc:c4:6e:
ae:2d:37:a4:19:5c:4a:8e:3c:c2:de:31:04:ad:d5:
90:66:70:d6:2e:90:53:0b:ac:ce:9f:2e:96:27:f7:
f4:83:13:2b:25:bf:a0:4f:b0:55:d5:19:42:dd:7a:
43:b6:b2:46:16:b4:b0:73:52:cd:ac:b9:e7:6c:dc:
5b:0a:09:12:22:dd:8a:f3:8f:7e:0b:7c:1f:28:8f:
a9:a9:d0:5f:34:53:4f:e4:6b:e5:0a:fb:bb:34:e8:
04:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:03:4B:C6:D9:DA:15:CD:7F:B1:23:6F:23:97:65:E9:F5:AF:FD:A1
X509v3 Authority Key Identifier:
keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/IwNLxtnaFc1_sSNvI5dl6fWv_aE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.65.37.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:16:2d:23:7a:72:4e:aa:73:4f:64:a1:58:69:f9:81:2e:a7:
08:59:d4:84:1f:e7:61:70:5f:b7:02:38:58:16:3f:06:d9:0a:
f5:74:76:f8:aa:11:16:ed:9f:0d:65:ba:af:59:08:f7:32:e5:
4a:3e:e2:45:99:28:83:53:5c:2a:40:8e:a4:ec:35:f5:9c:a6:
7a:b7:17:70:23:e9:e5:0f:b2:5e:73:ce:43:77:f0:69:4c:08:
f7:55:5b:94:d8:d6:9d:d2:a2:be:7a:a5:26:99:cc:10:3d:4c:
6b:77:76:e8:e0:28:18:8d:ac:ac:23:db:83:df:52:6e:e6:5b:
33:8f:2b:4e:d7:82:b3:f8:da:d2:9f:da:52:2a:b8:a4:60:52:
a3:0f:0b:13:38:0d:a2:a1:29:78:21:8e:53:d3:ca:e6:33:f2:
7d:52:f3:09:41:c5:38:e9:b0:65:08:d6:b0:0d:d4:01:e7:7f:
ed:9b:48:b1:3d:da:a4:89:93:6f:bb:41:1b:58:9f:5f:f6:23:
52:03:80:01:32:d4:fa:39:a9:63:ce:27:d7:2a:3a:85:b3:37:
dd:43:e6:ba:5f:1f:e9:96:6a:90:e5:cd:0d:17:91:4e:bd:47:
f0:04:12:6c:d0:ed:3d:3d:da:b2:01:78:1f:c3:72:cb:3c:da:
60:9d:e6:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:31:16 2025 by rpki-client