Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/1e5d67-f626-4925-98f3-20dc7e0572f4/1/1jWqozF1aac41Ymc0ogY-rCqS04.roa
File: 1jWqozF1aac41Ymc0ogY-rCqS04.roa (raw, json)
Hash identifier: 1CwwaQOa2PxSkU41mYs9yluy7uDtMLKu37DJKFM3a2A=
Subject key identifier: D6:35:AA:A3:31:75:69:A7:38:D5:89:9C:D2:88:18:FA:B0:AA:4B:4E
Certificate issuer: /CN=85a96f0d3abe6a9c14e792a71156d3c6efcfd4cd
Certificate serial: 021492AF
Authority key identifier: 85:A9:6F:0D:3A:BE:6A:9C:14:E7:92:A7:11:56:D3:C6:EF:CF:D4:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/halvDTq-apwU55KnEVbTxu_P1M0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/1e5d67-f626-4925-98f3-20dc7e0572f4/1/1jWqozF1aac41Ymc0ogY-rCqS04.roa
Signing time: Wed 22 Jun 2022 20:11:32 +0000
ROA not before: Wed 22 Jun 2022 20:11:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203061
IP address blocks: 195.225.81.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34902703 (0x21492af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85a96f0d3abe6a9c14e792a71156d3c6efcfd4cd
Validity
Not Before: Jun 22 20:11:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d635aaa3317569a738d5899cd28818fab0aa4b4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e8:04:e5:b2:2b:21:4f:05:e4:c7:0b:6e:c4:
c9:cb:c9:d8:4b:4f:d7:66:3f:ff:52:46:c5:bd:3b:
9e:44:da:2a:f5:c3:b6:42:09:52:6b:96:37:1e:08:
14:9e:f2:fc:66:64:47:c1:60:7b:4f:1c:24:3c:16:
92:5d:85:77:3d:e9:23:aa:74:4c:23:2f:c9:1b:c3:
73:6f:7e:be:0b:11:10:2b:d7:70:6d:7a:6b:05:1e:
62:ac:31:ec:4c:6b:8d:9d:69:cf:e6:b9:fa:86:d7:
f8:59:98:0c:01:80:50:87:b4:fe:22:44:7e:9b:a6:
3e:e8:82:98:c1:62:25:f6:e3:73:10:36:e8:a3:09:
21:88:bd:48:b6:f7:d3:04:d4:1b:6f:9a:1e:cb:ff:
9c:56:f3:db:71:6f:98:b4:ca:51:3f:47:f6:81:4b:
2d:33:e2:f0:01:6d:a0:8e:75:5d:e1:0f:e7:dc:b2:
89:3b:60:a0:13:4f:b4:cf:c7:24:3c:64:24:d4:24:
9a:76:a6:aa:f1:70:b6:78:46:6c:f3:04:35:db:e0:
6b:52:d2:66:40:72:0c:44:d3:cc:46:0b:ad:53:49:
75:fd:bb:7d:2b:70:8b:2b:4c:eb:61:3a:f5:28:15:
c4:9e:a3:b6:0a:44:ab:80:25:10:a1:65:29:86:8e:
32:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:35:AA:A3:31:75:69:A7:38:D5:89:9C:D2:88:18:FA:B0:AA:4B:4E
X509v3 Authority Key Identifier:
keyid:85:A9:6F:0D:3A:BE:6A:9C:14:E7:92:A7:11:56:D3:C6:EF:CF:D4:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/halvDTq-apwU55KnEVbTxu_P1M0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/1e5d67-f626-4925-98f3-20dc7e0572f4/1/1jWqozF1aac41Ymc0ogY-rCqS04.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/1e5d67-f626-4925-98f3-20dc7e0572f4/1/halvDTq-apwU55KnEVbTxu_P1M0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.225.81.0/24
Signature Algorithm: sha256WithRSAEncryption
18:7a:55:a0:f0:c1:a4:34:76:4b:52:89:b5:91:9c:3d:c1:ba:
4d:5c:81:27:57:4e:22:f0:dd:0c:ee:e3:91:18:4d:03:90:67:
ed:3d:95:4c:0c:fb:d0:60:01:2a:e5:2c:fa:6a:06:6e:64:41:
37:8a:b5:c9:a1:90:03:86:ad:60:aa:ff:72:66:2b:78:f9:02:
02:53:09:c9:95:35:8b:88:e9:a3:3c:07:2e:2b:25:5a:28:05:
20:f4:e8:97:12:30:04:4a:6d:44:b4:28:b6:ad:32:62:30:4e:
b2:c2:e9:e4:25:96:8f:36:03:52:c2:aa:f4:8e:d5:14:3b:50:
64:e4:9c:d4:31:f8:43:34:20:54:53:4f:af:c9:86:a6:53:4d:
1d:9f:17:e9:2d:4d:48:c6:bc:6f:71:45:41:68:10:fd:15:74:
55:e6:6e:de:ec:ae:4e:27:69:41:00:93:c6:6d:72:30:5f:0c:
a3:47:2b:07:c4:47:9a:ac:21:41:9a:48:f3:c7:f8:56:cf:ce:
a0:44:da:70:45:df:9f:6a:e7:f9:47:43:20:d4:ba:8b:60:51:
e1:31:54:b1:76:44:02:eb:23:7f:bd:62:d7:c1:32:87:3e:cc:
2b:2c:35:0c:95:71:64:ea:07:2d:c4:57:00:a9:b1:b2:31:6c:
8b:8b:eb:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 19:05:16 2025 by rpki-client