Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/n2OEtaVltY5XV17sHTwAKp3wIe4.roa
File: n2OEtaVltY5XV17sHTwAKp3wIe4.roa (raw, json)
Hash identifier: zw+XOm/k3FuwklYDodC+GZpoYUJzts/Tnzs3qFBuet8=
Subject key identifier: 9F:63:84:B5:A5:65:B5:8E:57:57:5E:EC:1D:3C:00:2A:9D:F0:21:EE
Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d
Certificate serial: 01856D8B1E16EB9A328C04B5B63AEE2CFF63
Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/n2OEtaVltY5XV17sHTwAKp3wIe4.roa
Signing time: Sun 01 Jan 2023 13:35:11 +0000
ROA not before: Sun 01 Jan 2023 13:35:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212920
IP address blocks: 195.65.91.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:8b:1e:16:eb:9a:32:8c:04:b5:b6:3a:ee:2c:ff:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d
Validity
Not Before: Jan 1 13:35:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9f6384b5a565b58e57575eec1d3c002a9df021ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e7:ca:cf:e3:c1:2c:13:aa:b9:eb:2b:9d:e0:
0c:4b:75:44:07:8e:02:cf:cc:5b:c4:e2:ee:8b:cd:
cd:26:b1:7a:fa:cb:b1:ea:a4:cb:2c:d1:e0:1b:be:
cb:67:f1:1d:2f:60:6c:9f:0b:a6:d0:fd:88:42:db:
ac:65:90:83:3a:8b:32:a3:d1:89:c0:b9:99:5b:11:
04:89:8b:2b:4c:25:7b:e2:75:23:36:2d:ae:fd:c9:
3f:14:b0:77:3e:57:f7:c4:20:63:9e:fe:29:e4:45:
13:92:2c:cc:fd:ae:ec:29:78:3f:e2:0e:47:21:49:
41:30:d4:57:fc:f8:f1:31:10:b8:8d:e8:a7:cd:c0:
db:8d:d6:1c:15:d4:40:2f:77:2a:3f:7d:68:6c:1b:
a4:64:e1:ad:f5:33:ec:74:47:6e:57:30:dd:ad:c3:
b2:05:72:b6:c2:95:75:c3:31:95:6b:56:ef:3d:99:
35:ec:91:79:a2:30:9e:4a:b6:5f:b6:ec:6f:29:72:
4a:41:06:1c:af:64:d9:a2:60:3a:25:da:bf:dc:8a:
58:f1:fd:fd:1b:29:cc:bd:5f:11:a0:df:65:31:c6:
e3:ae:56:9b:12:7c:23:d0:14:c7:e6:90:db:e9:ea:
25:c2:7e:83:01:bd:b4:aa:2c:ef:53:8c:1d:ac:26:
81:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:63:84:B5:A5:65:B5:8E:57:57:5E:EC:1D:3C:00:2A:9D:F0:21:EE
X509v3 Authority Key Identifier:
keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/n2OEtaVltY5XV17sHTwAKp3wIe4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.65.91.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:cd:8a:6d:57:58:b9:1d:24:31:07:0f:85:1f:15:00:a3:54:
81:e7:39:a3:a3:8f:9c:a4:e7:18:84:59:95:47:d4:53:8b:85:
3d:e3:3b:49:d7:77:7d:ea:06:7c:55:2f:2e:94:94:d7:42:2c:
9b:d8:cc:9e:62:18:a7:88:4a:73:39:85:0d:24:14:ad:ee:5c:
d8:4f:49:b8:cb:47:f1:79:8b:ca:28:1d:31:08:2d:6b:02:fa:
b2:57:d7:22:60:37:27:d0:67:94:a4:f1:58:e6:0d:9e:6e:c4:
88:2d:ae:a2:04:18:7a:f7:65:f3:2a:56:a4:85:0f:8c:78:f8:
e9:c6:1a:24:5d:52:40:eb:44:55:a1:8d:c2:3f:77:d3:91:ca:
c5:dc:f0:0d:5f:86:00:4a:d6:be:6b:e8:1c:58:2f:fb:4e:98:
85:6b:c8:3d:da:24:bd:dd:e8:b0:78:10:0a:33:ac:5b:3d:b2:
44:92:5a:70:2f:4d:92:89:cf:34:72:46:4c:0f:cb:37:0e:6a:
49:dc:f6:cc:1f:a3:2b:4c:16:38:e7:c7:4d:c3:82:d0:68:d0:
11:d0:61:37:ff:fa:67:6a:c6:b6:44:3b:6f:4c:4f:f2:5a:bb:
d1:6e:57:9c:9d:1d:de:e3:61:b3:04:98:e5:2b:b7:c0:8c:5b:
53:ab:3f:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:47:57 2025 by rpki-client