Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/pyHNJEwxrasDJDNKoQ1XGmwPl8A.roa
File: pyHNJEwxrasDJDNKoQ1XGmwPl8A.roa (raw, json)
Hash identifier: HVz69ku2XNn2g5DfK3Ag1eUEoAiSTgUPi0mjbOF5N6M=
Subject key identifier: A7:21:CD:24:4C:31:AD:AB:03:24:33:4A:A1:0D:57:1A:6C:0F:97:C0
Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d
Certificate serial: 50CEE75F
Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/pyHNJEwxrasDJDNKoQ1XGmwPl8A.roa
Signing time: Sat 01 Jan 2022 16:01:45 +0000
ROA not before: Sat 01 Jan 2022 16:01:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29166
IP address blocks: 195.65.148.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1355736927 (0x50cee75f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d
Validity
Not Before: Jan 1 16:01:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a721cd244c31adab0324334aa10d571a6c0f97c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:79:0d:4d:8e:29:63:0f:9c:03:ff:7a:c4:7c:
71:cf:49:87:f0:04:6d:0c:e8:30:71:56:a4:a9:6d:
7d:e2:f4:46:8f:bf:c8:3e:36:b5:e4:f3:c6:b2:02:
d3:dd:b3:9d:7f:97:e2:ca:50:f0:8f:b2:35:58:13:
f0:e9:67:92:fd:66:c3:72:43:43:2e:8d:77:f5:2f:
8e:94:de:f0:bb:7d:11:a5:7e:cd:62:62:d2:bd:94:
bf:33:71:19:91:0f:f1:73:89:fb:10:9e:67:a1:db:
81:5e:b3:e0:ef:76:b3:6d:83:9e:fa:f3:db:33:08:
c8:69:79:49:23:cd:69:bf:bd:94:23:eb:b2:0c:a6:
23:c7:30:6d:78:e9:ed:ae:96:12:80:30:36:f4:37:
55:6f:b3:33:37:ac:af:e3:e6:72:7c:ab:85:02:0b:
c4:1b:d8:ff:d1:6f:3b:b7:fb:4d:49:0d:04:6d:69:
74:1a:7f:7a:78:7a:f3:ef:f8:fb:bf:75:5a:b9:c1:
c8:2b:43:a2:24:0f:4b:4b:7b:a9:ea:80:04:78:4a:
38:c2:ad:80:74:d0:fe:b2:2e:30:7b:86:e5:42:6a:
23:b9:2b:70:96:5f:24:b8:c5:1a:4e:24:66:9e:93:
06:d5:b0:8e:9c:ff:eb:22:f3:81:4c:81:b6:28:8a:
a1:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:21:CD:24:4C:31:AD:AB:03:24:33:4A:A1:0D:57:1A:6C:0F:97:C0
X509v3 Authority Key Identifier:
keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/pyHNJEwxrasDJDNKoQ1XGmwPl8A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.65.148.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:92:1a:56:98:b2:44:5c:ea:57:bc:f9:36:99:22:49:40:15:
be:28:50:c4:03:bd:7d:75:bd:fd:d7:ab:63:db:73:80:ba:37:
83:b7:b3:dc:76:d9:3a:bb:b7:97:93:63:d1:df:5b:d1:af:b7:
af:66:f9:75:de:66:24:68:3e:ea:84:b0:c8:af:4b:2c:79:d8:
b6:54:66:6e:79:70:92:8f:36:89:aa:ad:14:72:1f:27:e3:c7:
ab:75:cc:24:20:88:f6:7c:18:5d:1b:20:f5:19:c1:6a:ef:fe:
ec:8e:bf:e5:b1:25:68:8e:1f:7b:75:07:47:4a:7c:0a:12:fb:
0d:38:d4:1f:d7:24:37:b8:41:36:65:31:a3:92:01:2c:ee:b8:
12:ab:0b:d4:ce:8a:0f:86:62:ce:b8:c0:dc:f0:ba:15:18:8b:
49:7c:95:2e:10:a0:36:82:54:13:d1:4e:9d:64:a3:0d:8d:8c:
ca:2f:c8:2b:60:7c:85:a7:f0:d5:01:ec:4b:29:48:dd:59:69:
78:e3:a5:c1:85:2e:9d:16:8a:6e:3b:70:31:62:57:05:65:4d:
72:a1:90:22:b8:a1:b3:c8:68:12:5f:fd:80:51:eb:74:3d:1d:
ac:b7:1f:fc:c5:0b:62:83:95:b7:08:18:d0:59:ef:a7:8a:fb:
1c:bd:93:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:37:22 2025 by rpki-client