Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/c4091f-0478-416c-bfee-79aa8a4bdaaa/1/Hwu9SGOybWdUjgTFZzxRj7w97iI.roa
File: Hwu9SGOybWdUjgTFZzxRj7w97iI.roa (raw, json)
Hash identifier: I9Iu2R0DJZuhmpMFu3rTMKbSSf502vO0m5PKayoeffA=
Subject key identifier: 1F:0B:BD:48:63:B2:6D:67:54:8E:04:C5:67:3C:51:8F:BC:3D:EE:22
Certificate issuer: /CN=c01e01a400975975ce86b15f59a652a80dc3509c
Certificate serial: 07153B6E
Authority key identifier: C0:1E:01:A4:00:97:59:75:CE:86:B1:5F:59:A6:52:A8:0D:C3:50:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wB4BpACXWXXOhrFfWaZSqA3DUJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/c4091f-0478-416c-bfee-79aa8a4bdaaa/1/Hwu9SGOybWdUjgTFZzxRj7w97iI.roa
Signing time: Sat 01 Jan 2022 14:55:24 +0000
ROA not before: Sat 01 Jan 2022 14:55:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 45035
IP address blocks: 195.60.178.0/24 maxlen: 24
195.60.179.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118831982 (0x7153b6e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c01e01a400975975ce86b15f59a652a80dc3509c
Validity
Not Before: Jan 1 14:55:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1f0bbd4863b26d67548e04c5673c518fbc3dee22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:b1:9e:00:78:5b:86:a8:08:5b:e5:5e:fc:e3:
1e:ce:4d:4a:a4:e3:93:4a:f8:bb:03:ea:f3:81:db:
db:eb:e2:62:74:23:c3:8b:99:4b:b9:9d:37:83:0b:
20:10:fa:23:ce:b8:37:fc:e4:cb:13:1d:c0:f7:0b:
d3:44:63:41:b9:15:0e:7a:ac:2e:42:05:c4:1e:b3:
90:da:12:a9:06:d7:b7:2d:2e:23:7d:ff:4c:bc:e9:
f9:2a:06:42:d1:80:5b:8a:2c:55:94:0f:d3:d6:ce:
76:e8:53:ed:d9:0e:76:88:9e:f8:5f:3d:fc:77:dd:
e8:43:85:bb:b4:8a:b6:6c:c6:81:27:51:f7:e4:1f:
41:84:e6:bd:33:de:5a:3e:c2:54:1b:85:c0:9e:2b:
c8:93:dc:d1:43:54:c1:00:1a:c6:e4:69:8d:72:f6:
8b:f2:8a:66:68:34:f6:4c:f0:d2:95:d2:4f:c8:c1:
91:1a:4f:38:c1:60:41:ba:40:90:ce:4d:cb:99:79:
23:19:19:9e:89:b2:5e:cf:44:5c:0a:26:79:87:84:
9c:ce:37:75:50:0f:1c:ff:c8:78:3a:92:72:ab:5b:
62:53:d5:a3:37:c5:ce:b7:f0:ca:c0:b6:d6:cf:f5:
6d:d6:f7:6c:58:d3:d3:97:c2:ff:52:4a:64:d4:e5:
e9:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:0B:BD:48:63:B2:6D:67:54:8E:04:C5:67:3C:51:8F:BC:3D:EE:22
X509v3 Authority Key Identifier:
keyid:C0:1E:01:A4:00:97:59:75:CE:86:B1:5F:59:A6:52:A8:0D:C3:50:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wB4BpACXWXXOhrFfWaZSqA3DUJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/c4091f-0478-416c-bfee-79aa8a4bdaaa/1/Hwu9SGOybWdUjgTFZzxRj7w97iI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/c4091f-0478-416c-bfee-79aa8a4bdaaa/1/wB4BpACXWXXOhrFfWaZSqA3DUJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.60.178.0/23
Signature Algorithm: sha256WithRSAEncryption
93:42:84:bc:58:0c:35:d3:88:d2:25:c0:23:8e:49:18:62:23:
47:72:03:99:02:bd:f7:20:9c:d6:cd:31:eb:4f:e0:af:6e:f4:
76:ee:dd:5a:c9:be:89:d3:23:be:24:68:14:54:29:41:98:74:
1c:6e:1d:cf:0e:be:54:8a:ae:8e:af:53:2d:0a:a1:b3:90:13:
53:cd:7d:d1:8d:a9:54:c9:20:bf:20:a9:9e:58:a0:07:de:d6:
76:c5:8a:9c:b8:17:9a:dc:bb:7e:4f:5d:45:eb:42:4f:3e:7a:
ea:d4:9d:17:a7:20:54:20:80:65:79:3e:d7:4d:37:70:59:65:
bc:fc:79:e9:d2:a1:6d:a0:22:2e:8f:ec:bc:b1:54:69:5b:d8:
9c:07:7a:fe:da:13:01:59:44:f8:4b:9f:10:b7:3c:7b:11:6b:
07:54:76:b2:3f:1b:9d:33:bb:ba:7d:3f:11:76:1d:6c:19:1c:
48:e5:46:2b:d4:e4:87:a0:02:39:5f:74:f2:b9:c7:88:6c:64:
7c:43:f3:45:5c:d8:33:85:5e:a9:df:83:fc:04:01:2b:2d:38:
9f:aa:dc:fe:4e:d4:32:73:b6:34:01:50:db:b8:fb:39:82:96:
18:a0:bd:f7:28:3c:ff:b8:eb:5c:b5:6a:01:54:a0:9d:9d:12:
47:ef:00:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 02:05:37 2025 by rpki-client