Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/e738e1-717f-4982-a218-9ca8ae271291/1/AKuGWXzKYR8woLToQpVa-HwI0sA.roa
File: AKuGWXzKYR8woLToQpVa-HwI0sA.roa (raw, json)
Hash identifier: dXoROVUWqNhXQL56d9i4V1isNHpoh8unolPsCS5Qg0s=
Subject key identifier: 00:AB:86:59:7C:CA:61:1F:30:A0:B4:E8:42:95:5A:F8:7C:08:D2:C0
Certificate issuer: /CN=1b939a2de868a633323891786849bfa1dd3e2da8
Certificate serial: E553
Authority key identifier: 1B:93:9A:2D:E8:68:A6:33:32:38:91:78:68:49:BF:A1:DD:3E:2D:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G5OaLehopjMyOJF4aEm_od0-Lag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/e738e1-717f-4982-a218-9ca8ae271291/1/AKuGWXzKYR8woLToQpVa-HwI0sA.roa
Signing time: Wed 26 Jan 2022 18:28:49 +0000
ROA not before: Wed 26 Jan 2022 18:28:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49392
IP address blocks: 195.64.105.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58707 (0xe553)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b939a2de868a633323891786849bfa1dd3e2da8
Validity
Not Before: Jan 26 18:28:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=00ab86597cca611f30a0b4e842955af87c08d2c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:6d:af:8d:f8:a6:61:ad:b8:93:6f:f9:26:88:
bd:fc:2f:2f:1b:28:63:bd:4c:48:ea:69:ea:cb:44:
6d:0d:6c:35:f5:e8:58:80:3c:9d:cb:04:02:bd:91:
f5:89:25:39:f4:cc:fb:9a:c0:ed:d0:91:60:b5:6d:
28:68:ff:de:2a:9c:c8:44:53:07:0c:cb:eb:6b:11:
0a:75:61:10:8f:a3:75:0f:90:45:db:c0:0d:91:ff:
55:51:e6:3d:3e:5c:a8:5f:3f:86:7f:eb:52:13:7d:
e4:3a:78:1a:20:5b:02:f1:05:67:31:cd:40:17:75:
3e:b6:2c:42:17:de:6e:b9:7c:d6:ea:96:af:f3:0f:
f8:3a:9a:89:ed:f1:90:37:49:3f:4d:21:99:a3:eb:
4e:14:22:c0:98:fe:76:d4:64:25:df:06:29:20:01:
cc:ef:b5:39:5e:c6:35:28:54:ce:be:d6:82:c4:cf:
c8:bd:b5:ef:7b:8c:e4:9f:30:06:85:5d:4c:a4:5b:
68:20:ad:2c:fc:ff:16:10:b7:26:81:96:37:5e:b0:
36:90:e1:94:b5:39:ba:7b:9b:c2:9a:0e:e1:ff:8f:
8c:46:c3:aa:7c:09:c1:3e:01:42:4f:2e:b9:8c:76:
ef:b7:cd:77:97:08:a9:59:61:07:e3:f4:ee:24:b8:
7b:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:AB:86:59:7C:CA:61:1F:30:A0:B4:E8:42:95:5A:F8:7C:08:D2:C0
X509v3 Authority Key Identifier:
keyid:1B:93:9A:2D:E8:68:A6:33:32:38:91:78:68:49:BF:A1:DD:3E:2D:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G5OaLehopjMyOJF4aEm_od0-Lag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/e738e1-717f-4982-a218-9ca8ae271291/1/AKuGWXzKYR8woLToQpVa-HwI0sA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/e738e1-717f-4982-a218-9ca8ae271291/1/G5OaLehopjMyOJF4aEm_od0-Lag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.64.105.0/24
Signature Algorithm: sha256WithRSAEncryption
27:37:7d:4e:e1:5a:31:ae:51:d8:84:95:c6:e1:d7:0e:04:c8:
3d:3e:55:f3:67:23:77:29:48:2a:46:73:aa:4f:98:02:09:10:
17:98:de:cf:01:a0:ae:17:4c:8e:22:46:a2:2a:38:42:8b:4c:
76:45:b4:d8:fa:8d:0d:3f:a9:41:3f:6c:35:f1:b8:72:f0:41:
86:27:54:c7:60:6b:db:91:02:d7:d6:d1:d4:9c:5f:85:e6:14:
28:36:88:1f:cc:8a:7c:40:31:99:a2:b6:05:09:57:d9:48:5c:
44:19:b9:f4:b4:ab:02:b2:c1:d5:ff:81:9d:3c:15:50:72:c9:
f3:7f:46:13:88:d4:c1:ce:36:a2:fb:89:02:4f:cb:5b:a7:55:
ae:9c:9a:83:e4:2d:3c:e9:26:99:af:f7:20:98:52:b7:03:95:
5a:ec:11:1c:4e:ea:8d:b9:f4:f1:69:85:b9:4c:0d:31:78:47:
8d:11:13:30:2f:4f:a2:4f:a2:22:b0:d2:f2:c0:9e:fa:5a:18:
3c:91:16:1e:e9:8e:4b:d5:69:d8:16:a6:e6:71:4d:f5:ef:57:
6a:12:bd:6c:3c:81:5e:e1:d6:6e:2c:ea:a3:d1:65:0d:5b:db:
11:a2:3b:6d:47:90:61:55:89:a6:9e:ea:15:74:8a:b0:5d:6a:
e0:e1:72:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 01:02:30 2025 by rpki-client