Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/82cb3e-8199-4917-a176-e50e1e9bb4b3/1/MeStYchfIIM21gIjTEqDbpySbzo.roa
File: MeStYchfIIM21gIjTEqDbpySbzo.roa (raw, json)
Hash identifier: HjyEWI+y6IoPKwCyj+P1YglxdC4kh2ZH6Sa5Jx7lTg0=
Subject key identifier: 31:E4:AD:61:C8:5F:20:83:36:D6:02:23:4C:4A:83:6E:9C:92:6F:3A
Certificate issuer: /CN=8e622a34c55e39b8fa15a37ba9e370eaafd99774
Certificate serial: 01941FFA0DE1872EDF0CBBDD6A288A6B9A6C
Authority key identifier: 8E:62:2A:34:C5:5E:39:B8:FA:15:A3:7B:A9:E3:70:EA:AF:D9:97:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jmIqNMVeObj6FaN7qeNw6q_Zl3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/82cb3e-8199-4917-a176-e50e1e9bb4b3/1/MeStYchfIIM21gIjTEqDbpySbzo.roa
Signing time: Wed 01 Jan 2025 03:47:48 +0000
ROA not before: Wed 01 Jan 2025 03:47:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198395
IP address blocks: 195.60.168.0/23 maxlen: 23
195.60.169.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:0d:e1:87:2e:df:0c:bb:dd:6a:28:8a:6b:9a:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e622a34c55e39b8fa15a37ba9e370eaafd99774
Validity
Not Before: Jan 1 03:47:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=31e4ad61c85f208336d602234c4a836e9c926f3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:17:20:eb:41:30:b0:50:fe:fa:3b:3b:65:cb:
dd:c8:8a:fc:d6:d2:2d:0f:9e:09:48:f8:ac:2d:c5:
ea:3d:e0:3b:d2:ab:a3:f0:ba:9a:1a:31:af:71:68:
64:06:ca:99:3c:fa:a0:01:26:02:f5:83:27:09:4e:
0b:95:a8:2a:a9:e8:6f:7a:7c:fb:03:99:27:ee:a9:
bd:f5:b3:9b:34:e1:9e:d1:37:ab:87:ca:09:11:cf:
e2:09:fa:58:12:ad:e1:27:21:26:d1:2f:1b:37:c6:
c1:f0:6e:ef:9e:38:45:20:5e:cd:05:7a:9a:e6:b6:
08:33:ab:e3:5c:8d:ed:3a:c9:49:c2:c5:37:d7:40:
45:21:30:7b:e2:9d:4f:7e:2d:bd:0d:ef:51:70:d5:
16:e0:9b:6b:99:b0:46:94:1e:6c:c9:70:5a:f0:18:
6e:43:4a:fa:02:d9:14:22:e0:60:9e:6a:06:1d:26:
ea:7c:a8:8e:6e:a6:0b:d9:98:94:ab:a8:48:52:ff:
12:d1:1a:13:b1:cf:d4:f2:7c:5f:22:e2:6b:e5:b6:
81:0d:5e:17:4c:01:2d:23:37:f3:bd:a0:bc:50:d1:
34:8e:50:b6:94:33:36:b5:73:c1:3f:9d:45:f1:74:
10:05:81:59:18:bf:1d:51:d9:13:9e:d7:8c:f2:2e:
2a:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:E4:AD:61:C8:5F:20:83:36:D6:02:23:4C:4A:83:6E:9C:92:6F:3A
X509v3 Authority Key Identifier:
keyid:8E:62:2A:34:C5:5E:39:B8:FA:15:A3:7B:A9:E3:70:EA:AF:D9:97:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jmIqNMVeObj6FaN7qeNw6q_Zl3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/82cb3e-8199-4917-a176-e50e1e9bb4b3/1/MeStYchfIIM21gIjTEqDbpySbzo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/82cb3e-8199-4917-a176-e50e1e9bb4b3/1/jmIqNMVeObj6FaN7qeNw6q_Zl3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.60.168.0/23
Signature Algorithm: sha256WithRSAEncryption
26:66:cb:bb:3d:1f:20:04:96:7e:c9:69:a9:2a:64:dd:51:f3:
b7:28:b9:22:55:06:6f:fd:73:09:a6:f6:aa:12:3a:33:73:55:
cb:9a:47:83:10:e8:64:2c:a7:cf:1b:cb:59:6a:cf:58:cf:ec:
2d:31:28:3d:6f:b6:b9:25:96:57:5d:27:d2:d2:25:7e:03:fa:
74:d9:2c:79:29:94:0f:60:46:66:9d:d3:9e:4e:d4:5c:8f:f8:
83:1b:d3:c8:54:c9:e4:09:e0:45:6a:fd:ee:5b:c7:55:c9:1c:
d5:5a:16:3f:bf:ae:dd:c2:b9:5b:7a:67:3a:7e:dd:77:66:70:
81:f3:fc:a7:34:36:87:18:cf:75:64:7f:0a:97:d1:f2:3c:20:
87:1b:ff:2f:72:83:d6:03:1b:0f:d9:97:31:4a:eb:79:68:e4:
12:72:e2:a1:fe:bd:1b:7e:f8:1f:2b:a6:38:02:cd:e5:86:e1:
7f:a2:91:0f:26:bf:ea:89:89:2d:64:91:a2:56:f9:ea:70:2b:
1d:71:3f:26:c1:b4:7c:ec:b9:e4:55:77:c2:9f:83:a3:81:5b:
ae:56:74:fe:b8:70:23:28:4d:a8:eb:f7:18:06:76:ac:b1:c5:
6e:e8:c9:b3:95:8d:db:9b:2c:1c:8d:fe:79:8d:30:c3:2f:64:
28:99:81:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:45:43 2025 by rpki-client