Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/xcVDwp0BjW0MUUKfMCFNiu4Qo2k.roa
File: xcVDwp0BjW0MUUKfMCFNiu4Qo2k.roa (raw, json)
Hash identifier: yusqHg2+H5VIpn6b3vuJx3DbUDWLzLfdEMXbAuYAAmY=
Subject key identifier: C5:C5:43:C2:9D:01:8D:6D:0C:51:42:9F:30:21:4D:8A:EE:10:A3:69
Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d
Certificate serial: 50C59965
Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/xcVDwp0BjW0MUUKfMCFNiu4Qo2k.roa
Signing time: Sat 01 Jan 2022 16:01:40 +0000
ROA not before: Sat 01 Jan 2022 16:01:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12511
IP address blocks: 195.65.35.0/24 maxlen: 24
195.65.34.0/24 maxlen: 24
195.65.34.0/23 maxlen: 23
2001:918:ffeb::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1355127141 (0x50c59965)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d
Validity
Not Before: Jan 1 16:01:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c5c543c29d018d6d0c51429f30214d8aee10a369
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:47:f1:22:79:24:0b:bd:d2:01:c5:31:4c:4a:
55:fc:0f:5c:9e:be:bf:a1:06:2d:fe:e5:f8:7c:af:
9c:8a:55:f4:77:b6:66:91:8f:f0:00:f9:c0:7f:1b:
78:4b:5b:bf:25:1a:75:5f:1c:2a:b3:07:77:b1:7b:
81:3a:20:f1:81:4a:4f:d3:33:be:79:8e:b0:0c:b8:
73:75:35:33:8b:22:bc:42:0b:63:56:99:78:85:11:
5b:5b:2d:1d:72:4d:6e:77:78:f0:b8:9a:aa:3f:44:
a0:45:25:08:c3:9d:cb:27:be:2c:5d:d2:d7:1b:03:
d4:eb:f5:14:e9:83:bb:2e:12:45:02:9a:76:df:45:
37:18:89:c9:51:70:41:b8:3f:49:6a:c4:a2:95:2e:
a8:9c:fd:e4:ff:d0:e5:a6:10:39:89:35:e2:42:27:
f4:b7:13:fd:c4:02:4e:a9:a9:78:ae:18:e9:aa:67:
f4:77:b5:fc:e6:fb:ea:18:07:c6:e5:64:49:6a:f2:
82:66:d3:01:b0:cf:9e:dc:4a:60:46:5d:bb:12:2d:
d0:be:2b:d5:15:e9:c1:98:5a:2f:ef:7b:bb:11:34:
26:f6:e6:18:9d:fb:84:be:1b:6e:16:69:96:cb:3a:
eb:93:da:c1:f2:a4:f6:d2:5c:6f:61:93:a7:f5:e3:
7b:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:C5:43:C2:9D:01:8D:6D:0C:51:42:9F:30:21:4D:8A:EE:10:A3:69
X509v3 Authority Key Identifier:
keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/xcVDwp0BjW0MUUKfMCFNiu4Qo2k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.65.34.0/23
IPv6:
2001:918:ffeb::/48
Signature Algorithm: sha256WithRSAEncryption
45:f3:fa:ca:f7:5a:48:15:6b:e8:5f:72:e0:ae:e1:2d:d8:2a:
3a:aa:ef:67:1d:cc:fc:7f:42:29:87:0f:ae:5a:dd:a6:36:0a:
66:9c:83:5e:18:9c:be:6c:f0:71:03:09:87:b1:c2:07:a2:ff:
15:41:9a:5f:e7:94:3b:4e:5d:10:cd:3b:cc:5d:74:70:60:79:
9a:f3:3c:a7:74:a3:9e:da:36:3f:2b:52:a1:34:0d:55:cb:84:
9e:d1:7c:d5:ef:eb:b5:a5:88:ce:57:5c:36:b5:97:73:b1:dd:
8e:d5:a2:20:6a:2b:a1:92:12:aa:1a:76:d4:68:52:11:c2:0d:
f5:5c:0f:f5:fe:33:88:a6:d0:b7:9c:0a:43:3b:e1:74:ea:88:
99:ca:0f:34:ea:74:80:fb:3f:4f:2d:4f:ee:61:c3:5e:f6:70:
61:a8:b1:4b:27:82:fc:b1:38:b2:c7:53:a2:f9:9e:6b:ea:c5:
ae:36:fc:90:b0:a8:5a:ae:13:d3:3a:b0:94:0b:b2:7a:b9:39:
c6:2d:87:72:bb:03:5f:5d:79:aa:54:8c:e3:e0:5e:33:9f:10:
da:e1:3f:79:2e:00:13:89:81:08:64:2a:d3:9b:24:58:2b:6b:
1c:80:b7:a3:cb:cc:18:db:34:ad:69:e8:3d:c3:e4:81:a9:48:
82:55:93:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 14:29:02 2025 by rpki-client