Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/c4091f-0478-416c-bfee-79aa8a4bdaaa/1/0qTFJYM3-VUqL-PNRZXZqSVpVqA.roa
File: 0qTFJYM3-VUqL-PNRZXZqSVpVqA.roa (raw, json)
Hash identifier: TroVyPe/9EFn9oLSq9mh1rVmvwo20eY/YPQDlYM73Aw=
Subject key identifier: D2:A4:C5:25:83:37:F9:55:2A:2F:E3:CD:45:95:D9:A9:25:69:56:A0
Certificate issuer: /CN=c01e01a400975975ce86b15f59a652a80dc3509c
Certificate serial: 0713DAE6
Authority key identifier: C0:1E:01:A4:00:97:59:75:CE:86:B1:5F:59:A6:52:A8:0D:C3:50:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wB4BpACXWXXOhrFfWaZSqA3DUJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/c4091f-0478-416c-bfee-79aa8a4bdaaa/1/0qTFJYM3-VUqL-PNRZXZqSVpVqA.roa
Signing time: Sat 01 Jan 2022 14:55:23 +0000
ROA not before: Sat 01 Jan 2022 14:55:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39082
IP address blocks: 195.60.178.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118741734 (0x713dae6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c01e01a400975975ce86b15f59a652a80dc3509c
Validity
Not Before: Jan 1 14:55:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d2a4c5258337f9552a2fe3cd4595d9a9256956a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:88:8e:98:aa:ea:36:d5:dc:c6:03:c6:a0:1e:
aa:63:82:98:a0:4a:bc:9e:34:3d:25:94:61:9b:f6:
3f:26:8b:f1:39:8b:ca:66:83:a2:92:b0:4e:32:12:
76:4a:a6:dc:14:5a:20:5b:ef:23:0e:a6:d5:a4:4d:
b5:c9:00:d9:e4:3e:07:d2:9c:8e:8c:19:eb:d4:74:
8a:00:e0:e1:e2:22:a5:8c:92:a5:ed:df:f2:48:20:
a1:56:ab:db:e8:d3:a5:ca:d7:e6:7c:2b:b0:3a:51:
dc:1a:d2:5a:41:25:f1:14:b4:ce:00:c2:a9:db:cb:
ac:01:d7:8c:81:4b:f2:08:81:df:52:0c:44:b2:3f:
68:b2:ea:b5:4f:4f:2d:69:48:db:dc:ac:cf:ac:2a:
b9:d5:3c:f4:dd:e1:88:20:4b:ea:a8:72:cd:0b:56:
96:c9:ab:87:64:42:e5:16:8e:26:bd:12:a3:fa:da:
44:c9:9b:da:50:df:55:b9:23:20:20:55:f1:3d:75:
1e:05:82:c2:c3:4b:59:c4:7f:21:e3:a3:11:80:ca:
f1:a7:50:1c:13:3a:e3:82:d1:bc:f6:5d:6d:84:62:
0d:13:80:b0:11:f6:3c:79:84:a2:47:7d:db:02:81:
78:ef:ea:65:d5:73:c9:9a:8a:2c:2d:4c:74:45:7b:
34:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:A4:C5:25:83:37:F9:55:2A:2F:E3:CD:45:95:D9:A9:25:69:56:A0
X509v3 Authority Key Identifier:
keyid:C0:1E:01:A4:00:97:59:75:CE:86:B1:5F:59:A6:52:A8:0D:C3:50:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wB4BpACXWXXOhrFfWaZSqA3DUJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/c4091f-0478-416c-bfee-79aa8a4bdaaa/1/0qTFJYM3-VUqL-PNRZXZqSVpVqA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/c4091f-0478-416c-bfee-79aa8a4bdaaa/1/wB4BpACXWXXOhrFfWaZSqA3DUJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.60.178.0/23
Signature Algorithm: sha256WithRSAEncryption
3c:68:99:d3:35:c3:11:61:31:00:35:ed:87:4f:54:53:95:08:
bb:cd:dd:94:85:3a:41:a0:d7:ee:46:1c:c0:f3:bb:5e:94:58:
b0:92:f9:77:15:bb:1d:73:96:b3:aa:64:15:1c:62:85:ab:e6:
ee:59:50:5d:af:50:91:e5:e0:9d:66:58:d9:98:67:03:a7:20:
66:9f:84:6d:f5:13:73:a5:68:6b:bf:b4:7f:0b:43:ee:3b:f4:
f4:9c:bb:d1:95:f7:23:78:68:2e:b3:98:83:2f:25:c8:85:a2:
bb:74:ab:04:ed:18:d6:9a:d3:54:9d:5e:71:a6:98:de:25:5d:
86:67:80:7e:2b:e9:10:8e:96:75:c6:22:bf:01:0b:06:95:84:
a8:50:51:37:3a:20:97:0a:df:0e:93:97:0b:2f:95:c9:6e:d9:
a0:71:ba:94:43:9d:4e:9e:35:8b:ed:fa:d5:be:ac:aa:6a:16:
fd:41:fc:fd:a3:74:e4:ac:41:29:7c:ea:8a:da:28:dc:df:07:
d0:fd:b0:a1:cf:e9:7c:da:cd:bc:a1:8e:d3:50:f4:cb:6c:9c:
28:13:ce:5f:31:05:cf:12:a8:94:d8:c6:d4:cb:f8:7a:85:88:
c7:3a:46:bc:92:1d:7a:fd:54:51:a2:ff:66:d0:e7:ce:49:ac:
6e:62:f3:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 01:59:33 2025 by rpki-client