Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/h8eZoT8MDtAOITVJzt1gmNWjYlU.roa
File: h8eZoT8MDtAOITVJzt1gmNWjYlU.roa (raw, json)
Hash identifier: NQFcftdVFI1RV2nKL30EPRgxlC//sKlTvS66ifFoRPA=
Subject key identifier: 87:C7:99:A1:3F:0C:0E:D0:0E:21:35:49:CE:DD:60:98:D5:A3:62:55
Certificate issuer: /CN=9e3533d662c3f0d6bb1e692f3fab6d7ba3824c28
Certificate serial: 018243F6C9BEEA2387B206443F867C125E73
Authority key identifier: 9E:35:33:D6:62:C3:F0:D6:BB:1E:69:2F:3F:AB:6D:7B:A3:82:4C:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/njUz1mLD8Na7HmkvP6tte6OCTCg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/h8eZoT8MDtAOITVJzt1gmNWjYlU.roa
Signing time: Thu 28 Jul 2022 08:40:23 +0000
ROA not before: Thu 28 Jul 2022 08:40:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39521
IP address blocks: 193.34.51.0/24 maxlen: 24
195.13.62.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:43:f6:c9:be:ea:23:87:b2:06:44:3f:86:7c:12:5e:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e3533d662c3f0d6bb1e692f3fab6d7ba3824c28
Validity
Not Before: Jul 28 08:40:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=87c799a13f0c0ed00e213549cedd6098d5a36255
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:1f:88:18:ee:80:b5:25:94:7c:fc:1f:cd:11:
dc:29:f6:a1:c7:00:23:ce:33:55:07:be:d5:61:13:
79:81:40:b1:9d:ce:be:6b:86:28:3a:28:6e:02:9e:
1c:8b:5e:ba:40:74:89:a5:a4:6a:87:45:3d:60:fa:
20:3e:5c:9a:13:4b:5d:4c:ad:87:5c:87:cd:62:f2:
9d:80:c7:86:0d:15:e1:f5:b5:6b:29:a4:27:75:a3:
1d:61:17:cd:8e:ae:47:4e:d6:9b:f1:af:77:59:8c:
73:67:32:98:aa:18:df:f6:cb:00:55:19:cd:32:10:
d6:20:15:a8:75:28:70:6f:22:dc:66:12:15:50:9c:
1c:6e:d5:a0:c3:f7:15:cc:af:0c:0b:43:b9:1a:ac:
50:5d:3e:04:27:b0:b1:e5:a0:96:80:ee:ee:d8:08:
48:79:87:35:74:79:94:61:91:1b:bf:17:bf:f4:3a:
47:73:39:a2:41:64:1a:ab:15:52:79:4c:1e:23:43:
b5:8c:3c:98:f5:66:9d:f5:0b:d5:2e:6a:56:0e:8b:
d1:fa:14:3d:84:22:c2:c6:ad:ec:ce:07:2a:91:83:
00:cb:53:52:a7:80:6b:5f:46:a8:d9:89:66:7a:dd:
75:81:0b:6e:01:5e:40:a7:0b:6f:b2:e7:14:f3:7c:
7a:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:C7:99:A1:3F:0C:0E:D0:0E:21:35:49:CE:DD:60:98:D5:A3:62:55
X509v3 Authority Key Identifier:
keyid:9E:35:33:D6:62:C3:F0:D6:BB:1E:69:2F:3F:AB:6D:7B:A3:82:4C:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/njUz1mLD8Na7HmkvP6tte6OCTCg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/h8eZoT8MDtAOITVJzt1gmNWjYlU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/njUz1mLD8Na7HmkvP6tte6OCTCg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.34.51.0/24
195.13.62.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:f6:d4:c1:bb:be:7a:83:15:63:e7:c7:f2:60:e0:23:55:ef:
f5:f2:81:16:aa:3c:a4:a1:65:27:a9:aa:c0:3c:0f:65:36:4e:
51:c9:0c:4a:bf:38:02:fb:b6:9d:99:88:79:20:61:af:5a:0c:
19:ae:86:53:b4:eb:fc:e0:79:56:5c:32:e7:bc:c5:37:c6:c4:
aa:e6:1f:dd:29:10:6a:2b:e8:78:1e:fd:38:9b:83:b5:2a:b1:
d2:28:91:51:4b:5e:6f:ea:3d:c2:b0:91:52:47:69:d5:bc:85:
45:88:4f:de:75:f2:79:e9:9e:40:00:13:a7:ef:31:80:a9:1f:
07:9e:f1:bb:a1:6a:88:25:7c:38:a5:1b:6b:f9:4f:66:a9:91:
1f:88:d1:64:7c:29:f8:05:21:ef:4f:c0:51:61:8d:28:4b:56:
9e:4a:b4:97:2a:67:1a:82:dc:16:c7:23:e2:97:9e:08:05:6d:
c8:25:25:53:21:6d:4e:c8:52:74:a0:cc:60:35:24:b9:9b:65:
89:9f:88:d1:0e:b1:92:b4:32:cf:61:cf:22:3c:73:fc:46:c6:
09:eb:68:39:79:af:3f:f4:49:dc:d0:9b:15:40:eb:07:ff:c0:
ae:54:cf:a4:53:f5:23:cc:0d:b3:45:45:89:ae:ea:07:61:1f:
69:8b:2d:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 03:31:17 2025 by rpki-client