Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/fb618e-a4cc-4e83-b188-5afe5d237f1e/1/XXt3IVjmZkjuQWVjz4PTSNj0R6w.roa
File: XXt3IVjmZkjuQWVjz4PTSNj0R6w.roa (raw, json)
Hash identifier: bM+9rXozM9hsRPGLfrvyzeegYpO1zXlU3mJffKoroOE=
Subject key identifier: 5D:7B:77:21:58:E6:66:48:EE:41:65:63:CF:83:D3:48:D8:F4:47:AC
Certificate issuer: /CN=f5541f8a3dddc58d5cff42b60f8e7d29cd761ba5
Certificate serial: 01856F0B3B3792FBE7CF13829E2E2BB14209
Authority key identifier: F5:54:1F:8A:3D:DD:C5:8D:5C:FF:42:B6:0F:8E:7D:29:CD:76:1B:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9VQfij3dxY1c_0K2D459Kc12G6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/fb618e-a4cc-4e83-b188-5afe5d237f1e/1/XXt3IVjmZkjuQWVjz4PTSNj0R6w.roa
Signing time: Sun 01 Jan 2023 20:34:44 +0000
ROA not before: Sun 01 Jan 2023 20:34:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8775
IP address blocks: 195.69.158.0/24 maxlen: 24
195.69.157.0/24 maxlen: 24
195.69.156.0/22 maxlen: 22
195.69.156.0/24 maxlen: 24
195.69.159.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:0b:3b:37:92:fb:e7:cf:13:82:9e:2e:2b:b1:42:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5541f8a3dddc58d5cff42b60f8e7d29cd761ba5
Validity
Not Before: Jan 1 20:34:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5d7b772158e66648ee416563cf83d348d8f447ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:14:a5:c0:4d:ef:6e:5d:b1:d9:33:be:95:b9:
14:48:07:a4:bc:64:79:6d:63:63:02:7c:70:b1:60:
6e:0f:d0:0e:6d:7f:43:f9:d7:f2:90:75:8c:d9:12:
c7:97:ac:40:b1:d9:96:48:ac:bb:26:80:79:2b:0c:
09:98:c2:46:9f:54:fe:c0:31:8c:68:da:64:9c:64:
25:58:90:56:1c:c5:7c:c3:30:cf:07:a2:e8:c5:ec:
ca:53:f4:4c:30:c9:ea:15:6d:2a:b5:6a:94:1c:c2:
de:11:d4:be:2c:33:93:e9:ac:b0:ab:1e:8a:68:92:
70:c6:49:52:44:8b:85:e6:b0:b7:bb:2b:5a:4c:86:
bb:7a:e7:a9:d1:79:c1:3f:87:a3:cb:3e:6f:a0:1d:
38:f7:8a:e0:5b:10:7f:89:0d:d2:bb:c3:b3:fc:b3:
43:b1:24:6e:6a:3a:d2:c3:af:4b:a4:34:09:33:36:
97:51:03:10:6b:75:75:c3:43:1e:c0:07:bb:29:8a:
4d:b6:dd:11:9c:67:8d:79:e9:4e:43:20:93:47:69:
81:3a:75:44:9c:bb:ff:9b:ee:0e:91:39:25:c9:85:
66:28:60:da:8c:e4:0a:c2:1a:be:33:a8:b6:c6:5d:
28:3a:8e:73:96:f5:87:59:97:ce:d2:d2:0a:8f:52:
bf:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:7B:77:21:58:E6:66:48:EE:41:65:63:CF:83:D3:48:D8:F4:47:AC
X509v3 Authority Key Identifier:
keyid:F5:54:1F:8A:3D:DD:C5:8D:5C:FF:42:B6:0F:8E:7D:29:CD:76:1B:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9VQfij3dxY1c_0K2D459Kc12G6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/fb618e-a4cc-4e83-b188-5afe5d237f1e/1/XXt3IVjmZkjuQWVjz4PTSNj0R6w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/fb618e-a4cc-4e83-b188-5afe5d237f1e/1/9VQfij3dxY1c_0K2D459Kc12G6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.69.156.0/22
Signature Algorithm: sha256WithRSAEncryption
62:ec:50:ea:08:7c:ff:d9:99:ba:a2:70:b9:97:7e:8f:45:d5:
c6:03:39:77:21:a0:50:d3:8f:d0:6a:79:c0:66:cc:95:d1:b6:
d3:b0:e1:1a:99:ca:8b:d5:d9:4d:6f:09:74:1b:01:4d:4b:92:
48:03:72:a1:5a:3a:38:21:85:d6:d4:b5:37:bb:70:9c:0d:5e:
3a:72:15:d0:bb:f7:47:5e:f2:81:29:e3:dc:d0:47:df:62:cd:
9f:ba:b0:8b:5a:13:8d:0c:49:fb:1e:96:e7:7e:5b:bb:eb:2b:
40:de:d9:99:d6:11:60:c1:74:1a:22:89:26:ec:f8:79:b9:8e:
f8:7e:4b:cf:14:e9:ec:fa:6a:37:2a:12:3d:d4:64:15:78:39:
7b:53:ba:f4:20:7e:df:65:25:5a:fd:84:c8:7c:36:ae:34:14:
86:3a:72:53:69:09:eb:6d:d3:dd:e0:4a:3f:76:bb:34:24:c7:
7f:ed:46:70:ea:08:e3:15:82:57:66:e6:e5:a8:f8:61:23:0a:
80:38:b0:80:39:a9:52:bf:fa:dc:c0:04:ae:db:6a:80:a7:45:
67:d5:ae:2c:14:82:be:f1:49:43:94:cd:39:cd:2f:ec:bc:26:
fc:b4:8c:b5:b2:b8:20:71:f1:1c:19:77:bb:16:86:00:3c:50:
e9:80:75:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 04:44:26 2025 by rpki-client