Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/fb618e-a4cc-4e83-b188-5afe5d237f1e/1/2G2gXniKy0OvQq82LNwU0OyS2Ak.roa
File: 2G2gXniKy0OvQq82LNwU0OyS2Ak.roa (raw, json)
Hash identifier: 6mFt+VmiEXFYzYpI7kT2/qDpOOT1kkGShJrXzypxOaI=
Subject key identifier: D8:6D:A0:5E:78:8A:CB:43:AF:42:AF:36:2C:DC:14:D0:EC:92:D8:09
Certificate issuer: /CN=f5541f8a3dddc58d5cff42b60f8e7d29cd761ba5
Certificate serial: 05D40994
Authority key identifier: F5:54:1F:8A:3D:DD:C5:8D:5C:FF:42:B6:0F:8E:7D:29:CD:76:1B:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9VQfij3dxY1c_0K2D459Kc12G6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/fb618e-a4cc-4e83-b188-5afe5d237f1e/1/2G2gXniKy0OvQq82LNwU0OyS2Ak.roa
Signing time: Sat 01 Jan 2022 09:02:39 +0000
ROA not before: Sat 01 Jan 2022 09:02:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8775
IP address blocks: 195.69.158.0/24 maxlen: 24
195.69.157.0/24 maxlen: 24
195.69.156.0/22 maxlen: 22
195.69.156.0/24 maxlen: 24
195.69.159.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97782164 (0x5d40994)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5541f8a3dddc58d5cff42b60f8e7d29cd761ba5
Validity
Not Before: Jan 1 09:02:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d86da05e788acb43af42af362cdc14d0ec92d809
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ff:c2:f2:a4:74:a9:99:49:6f:4a:99:60:a5:
72:18:4d:f9:42:56:0d:04:c4:17:3c:e3:13:af:79:
8a:b3:b2:94:25:9f:a2:65:95:8b:5c:29:42:94:57:
0e:a3:91:e2:83:86:3d:b9:23:78:75:7c:81:d5:6f:
10:ad:5d:85:7d:f3:b7:ed:1e:35:f9:e5:37:4c:a2:
20:95:11:ca:2a:b0:e1:f6:1f:1e:c4:44:90:a3:7a:
11:95:cf:4e:bd:2a:a6:28:5a:92:9e:e8:f8:63:db:
b4:16:b9:9c:29:3f:c3:5b:89:f1:89:6d:24:f3:43:
5a:16:f2:05:ae:12:f4:90:2b:35:e9:1a:37:fc:7f:
c4:a6:27:98:b7:5f:8e:e5:1b:5b:a2:c1:99:b6:44:
58:4c:a9:5e:d9:17:2c:fa:32:1c:2e:30:fe:a6:cb:
58:65:60:d4:5c:eb:f4:f2:13:78:fa:86:4b:b7:43:
e3:52:5d:28:3d:2b:52:7c:e6:4d:ff:45:ad:22:5d:
40:2c:5c:9e:57:82:15:05:70:6e:1e:d1:72:9d:75:
1a:32:55:46:ce:44:03:fb:8f:57:58:35:dc:cd:22:
79:2e:6c:dd:ac:a6:c7:32:9c:b7:d2:a9:e4:2b:81:
1f:2d:a8:8d:62:c7:66:cc:a3:67:5c:a1:30:38:f7:
d5:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:6D:A0:5E:78:8A:CB:43:AF:42:AF:36:2C:DC:14:D0:EC:92:D8:09
X509v3 Authority Key Identifier:
keyid:F5:54:1F:8A:3D:DD:C5:8D:5C:FF:42:B6:0F:8E:7D:29:CD:76:1B:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9VQfij3dxY1c_0K2D459Kc12G6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/fb618e-a4cc-4e83-b188-5afe5d237f1e/1/2G2gXniKy0OvQq82LNwU0OyS2Ak.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/fb618e-a4cc-4e83-b188-5afe5d237f1e/1/9VQfij3dxY1c_0K2D459Kc12G6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.69.156.0/22
Signature Algorithm: sha256WithRSAEncryption
42:d2:5e:b5:63:d3:1d:56:66:13:26:82:31:23:1e:ee:4d:be:
9f:b4:64:19:8d:cf:ad:21:60:9d:78:2f:f9:28:64:32:2b:06:
47:a9:4c:08:05:ad:29:f6:56:ed:4c:4c:7a:62:5d:aa:ce:2d:
3d:23:7d:65:a8:a6:04:6c:60:b4:18:05:aa:e7:99:dd:ca:66:
96:c1:89:95:11:59:7b:b9:8b:eb:4f:c9:5b:55:a4:e6:45:0c:
de:b7:e2:f8:9f:19:94:b8:06:c9:30:0d:10:98:2b:0b:34:f7:
f6:8a:51:bc:a7:eb:4a:d7:da:77:2d:0e:1d:53:a5:c0:26:23:
80:3e:7c:db:ab:a7:b4:8e:74:3b:50:e8:7d:92:d8:a9:ce:45:
0d:b6:4e:b8:37:4a:18:23:66:59:87:68:11:58:60:09:bf:0b:
ae:3b:d0:8c:a1:53:93:2d:7f:b9:c1:25:e1:bc:9f:ff:6c:59:
4e:de:43:30:79:85:c6:5e:03:56:20:8a:ce:42:74:2f:26:bb:
5f:c9:98:59:06:c5:e3:06:0e:27:93:16:28:db:33:31:6d:a3:
cd:8c:83:30:a4:96:bf:f4:58:85:9b:36:da:c6:fa:e2:5d:3c:
b9:87:a6:bd:60:84:c6:c3:dc:19:67:8f:89:dc:c0:79:a1:20:
0b:25:34:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 04:48:44 2025 by rpki-client