Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/b7e78d-67d5-45af-b448-175383e82ef2/1/iMjDSEDi-z8KNSVBkjNpEslLDOw.roa
File: iMjDSEDi-z8KNSVBkjNpEslLDOw.roa (raw, json)
Hash identifier: R5MSKGQKSghYH9+Mu94Eqv0ljP59qnLYA02YrNOcMJE=
Subject key identifier: 88:C8:C3:48:40:E2:FB:3F:0A:35:25:41:92:33:69:12:C9:4B:0C:EC
Certificate issuer: /CN=866dee727e83997c0203c0f718d33b93d77d821d
Certificate serial: 01857230F950FC3A7266C7AC86791B3F963F
Authority key identifier: 86:6D:EE:72:7E:83:99:7C:02:03:C0:F7:18:D3:3B:93:D7:7D:82:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hm3ucn6DmXwCA8D3GNM7k9d9gh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/b7e78d-67d5-45af-b448-175383e82ef2/1/iMjDSEDi-z8KNSVBkjNpEslLDOw.roa
Signing time: Mon 02 Jan 2023 11:14:50 +0000
ROA not before: Mon 02 Jan 2023 11:14:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 22773
IP address blocks: 195.64.123.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:30:f9:50:fc:3a:72:66:c7:ac:86:79:1b:3f:96:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=866dee727e83997c0203c0f718d33b93d77d821d
Validity
Not Before: Jan 2 11:14:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=88c8c34840e2fb3f0a35254192336912c94b0cec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:d8:d9:dc:65:42:88:64:f4:23:cc:be:d1:f5:
c1:d3:b7:f2:a6:29:fd:5d:94:c7:15:f3:7b:61:25:
7f:69:b5:95:30:da:77:e8:4f:75:43:a3:ed:c5:48:
ff:07:cd:2e:15:03:df:4d:2b:24:3c:96:06:ec:bb:
d2:fe:4d:c1:76:3b:52:99:d6:77:0f:69:78:b2:dc:
cc:99:c3:d4:dd:85:00:5b:b0:67:1d:75:64:f5:eb:
34:f1:ad:e5:73:72:f8:07:65:e2:d6:db:90:0c:42:
e5:e4:12:7b:3a:ef:c8:81:46:83:58:db:15:2a:a4:
e0:c4:ca:07:62:77:e7:9d:92:a3:c3:35:ff:ca:c0:
33:ac:13:cd:77:1f:28:24:ed:dc:43:6a:36:8f:d6:
8e:9f:9d:1b:ba:b8:4e:4d:28:ba:00:5a:38:42:0b:
77:fd:54:78:91:03:af:59:7e:bc:b7:35:1d:59:5e:
1a:eb:1e:ba:3d:c9:5e:75:57:f7:2f:ba:c1:88:6d:
e5:99:6e:c9:fc:da:b3:04:67:54:db:f4:14:34:c3:
d6:9c:d0:3e:da:49:ba:3c:72:2e:36:d9:cb:d0:47:
f3:e8:72:b3:23:fb:74:cf:ed:a0:b1:81:f8:41:f5:
af:ed:b3:03:df:a5:ce:e1:74:e1:b7:41:08:99:91:
16:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:C8:C3:48:40:E2:FB:3F:0A:35:25:41:92:33:69:12:C9:4B:0C:EC
X509v3 Authority Key Identifier:
keyid:86:6D:EE:72:7E:83:99:7C:02:03:C0:F7:18:D3:3B:93:D7:7D:82:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hm3ucn6DmXwCA8D3GNM7k9d9gh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b7e78d-67d5-45af-b448-175383e82ef2/1/iMjDSEDi-z8KNSVBkjNpEslLDOw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b7e78d-67d5-45af-b448-175383e82ef2/1/hm3ucn6DmXwCA8D3GNM7k9d9gh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.64.123.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:e3:aa:a9:f9:ec:f0:b1:bf:ab:f6:de:55:1f:5e:7b:e8:fa:
1e:2b:5d:93:fd:50:3f:3d:48:b0:e5:69:39:69:33:a0:0a:06:
a5:23:f8:62:7e:94:1d:0a:2c:0b:44:7e:0d:80:05:12:63:fd:
b1:43:39:a0:bf:ca:17:3a:45:f8:3e:86:47:4b:22:18:30:f7:
e9:bd:51:14:1e:61:b4:66:eb:1a:c5:67:fd:fa:98:0b:10:fb:
8a:9b:e5:41:ff:a3:2f:1a:33:34:c9:63:24:87:78:b4:ee:7d:
6b:bf:c8:74:6f:69:04:d0:d3:22:27:85:e6:05:fc:5d:7d:65:
ac:84:7a:36:eb:a5:c6:6c:9b:6b:02:80:74:5c:96:45:cc:3c:
6e:4c:4d:ca:f9:ff:10:d3:6a:81:04:18:50:74:bd:5c:81:0b:
13:a2:cd:5c:8d:f9:21:03:7d:59:92:a3:67:4a:6b:e6:de:0e:
db:c5:e2:20:b1:d1:95:ea:2e:88:4f:e9:84:8d:e6:75:5d:f1:
c7:65:5a:2a:56:7c:c4:48:9d:1b:17:2c:ff:3e:ec:46:b9:24:
7d:dd:7f:46:e1:0f:1e:f0:53:e8:27:72:fc:74:87:5e:71:04:
ce:aa:45:5b:65:1d:4e:99:15:22:84:2f:09:68:e4:67:ea:e9:
5b:c9:69:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:52:04 2025 by rpki-client