Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/M0-1f8U6FdX-yyCa_Kr0-C7ofFE.roa
File: M0-1f8U6FdX-yyCa_Kr0-C7ofFE.roa (raw, json)
Hash identifier: +z+mtzXDYWtDRYnfHrN/2rgEVP9hif28HSKJOLlySlM=
Subject key identifier: 33:4F:B5:7F:C5:3A:15:D5:FE:CB:20:9A:FC:AA:F4:F8:2E:E8:7C:51
Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d
Certificate serial: 50DF7600
Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/M0-1f8U6FdX-yyCa_Kr0-C7ofFE.roa
Signing time: Sat 01 Jan 2022 16:01:55 +0000
ROA not before: Sat 01 Jan 2022 16:01:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 199642
IP address blocks: 195.65.0.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1356822016 (0x50df7600)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d
Validity
Not Before: Jan 1 16:01:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=334fb57fc53a15d5fecb209afcaaf4f82ee87c51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:3c:27:05:d6:28:d2:b0:da:50:f1:75:2e:f9:
8c:1c:51:4e:af:10:c8:9d:b5:3a:71:be:78:88:ab:
0c:0b:ad:b7:52:05:78:7b:2f:a2:72:e6:a7:36:80:
80:3e:90:6e:67:45:70:a6:02:2d:a9:80:70:4a:44:
08:31:ff:87:e4:1b:a9:27:73:dd:15:98:db:2a:99:
86:bf:00:a8:67:0a:a4:52:8c:43:65:82:2a:4e:26:
a7:39:7c:6f:55:ad:b0:66:41:61:db:e2:bc:00:78:
3d:5b:fa:17:ce:be:ad:fe:50:8a:c9:60:19:fb:7b:
42:03:82:ee:03:d4:b7:7b:89:5d:0c:18:88:1f:b3:
d8:71:1d:f8:eb:6b:bd:e8:89:58:e5:b3:40:f4:e4:
fc:49:9c:0c:76:6a:1a:91:57:a7:d3:8e:ea:dc:7a:
e9:94:74:88:83:3e:7c:18:c3:c3:0b:9e:db:db:99:
7c:4b:2e:67:02:4e:87:cb:a3:80:5d:83:e0:84:05:
3f:c2:ed:51:03:98:e5:fe:da:cf:67:0b:76:e4:89:
6f:d2:96:d6:75:60:4f:a9:31:43:b8:f6:a3:d5:7e:
53:d6:f3:86:31:37:55:59:65:ab:d4:15:0c:8f:df:
38:14:5f:53:a7:e3:a9:90:29:c5:ca:20:5b:1a:c1:
40:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:4F:B5:7F:C5:3A:15:D5:FE:CB:20:9A:FC:AA:F4:F8:2E:E8:7C:51
X509v3 Authority Key Identifier:
keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/M0-1f8U6FdX-yyCa_Kr0-C7ofFE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.65.0.0/24
Signature Algorithm: sha256WithRSAEncryption
42:f7:00:d9:12:8f:03:f0:c4:5c:23:65:33:bf:6e:80:6e:d8:
a2:95:1e:9b:af:6b:cc:3f:73:46:f1:64:df:37:89:1e:d7:3a:
cb:a4:17:8c:7d:46:ea:57:cd:c6:7c:1b:54:fd:3d:2b:09:ec:
66:0e:9d:e4:0e:f4:3c:c3:52:8a:45:6a:5c:dd:1d:6e:d0:8a:
1c:43:7c:43:7c:f5:1a:68:ef:32:1c:4e:5f:be:ba:5b:21:76:
9f:06:10:7d:30:83:48:29:b6:da:24:e8:b1:16:4a:28:57:62:
74:0e:ab:35:44:e3:df:22:95:c9:2a:72:3f:bc:33:09:9b:4a:
71:c6:cf:04:68:ad:67:a1:52:74:d3:61:c3:1a:bb:72:00:9f:
32:66:a0:88:e0:50:f6:b3:53:c3:8c:b9:0d:1d:76:06:14:0f:
bb:8f:e4:52:f3:57:e2:63:21:9a:c6:15:1e:90:ec:77:f1:fd:
9d:f7:49:e0:06:47:1d:92:81:de:bd:88:ed:e9:8b:c8:8f:77:
bd:dc:01:36:22:f7:a6:97:ab:3f:33:a8:47:5b:fe:64:62:0f:
4c:ce:f5:e3:c3:26:43:a3:1c:fa:7c:3a:e7:eb:88:f1:81:42:
e7:9b:f3:e9:c9:5f:f6:cd:41:6b:21:ac:b0:04:64:98:9c:5e:
5c:40:74:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:31:25 2025 by rpki-client