Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/565aed-610a-44ab-91c8-7dd5ed0e70d6/1/R_diLf1IJx3M82yYORYFbPNDPS0.roa
File: R_diLf1IJx3M82yYORYFbPNDPS0.roa (raw, json)
Hash identifier: O6869V8f22YF6U+nCAEAtyfCA/YJHltj9F4nGQFornc=
Subject key identifier: 47:F7:62:2D:FD:48:27:1D:CC:F3:6C:98:39:16:05:6C:F3:43:3D:2D
Certificate issuer: /CN=947e4676545658de09aa778f8b00e9a4fda0d00f
Certificate serial: F1CB8E
Authority key identifier: 94:7E:46:76:54:56:58:DE:09:AA:77:8F:8B:00:E9:A4:FD:A0:D0:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lH5GdlRWWN4JqnePiwDppP2g0A8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/565aed-610a-44ab-91c8-7dd5ed0e70d6/1/R_diLf1IJx3M82yYORYFbPNDPS0.roa
Signing time: Wed 11 May 2022 21:56:02 +0000
ROA not before: Wed 11 May 2022 21:56:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58061
IP address blocks: 195.93.249.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15846286 (0xf1cb8e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=947e4676545658de09aa778f8b00e9a4fda0d00f
Validity
Not Before: May 11 21:56:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=47f7622dfd48271dccf36c983916056cf3433d2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:70:ba:92:f3:b2:10:e1:cf:b4:36:5f:cd:be:
9d:77:43:af:15:a5:7e:5e:cb:c3:ae:79:bd:85:f0:
46:a5:cf:de:a3:4e:bb:1a:e8:56:66:8e:1a:8d:da:
06:10:f3:da:02:a8:72:8f:33:c4:5d:04:8a:82:30:
a4:1f:b8:24:e1:b9:78:9c:8f:41:67:30:ad:48:60:
16:67:de:0a:47:cf:e4:e8:cd:9e:88:2a:67:e7:e4:
30:89:46:f9:34:5a:fc:57:82:ad:93:8d:78:16:85:
95:74:ad:94:1c:62:f7:0e:5c:70:d7:ff:bd:62:8e:
e1:f6:ee:e2:d1:95:30:3d:d4:08:6f:aa:d4:f1:f5:
c9:3e:20:39:e8:50:d5:47:1d:15:a4:28:a4:9c:28:
de:f6:61:f5:6b:b7:59:6f:6a:83:3e:04:ee:10:1f:
82:a9:e1:09:45:79:5f:ca:d4:4e:d1:8f:c2:1c:45:
75:5a:ca:29:3d:6b:8f:48:55:7d:c8:4c:b6:ef:5d:
66:17:0f:f6:37:36:60:61:29:0e:16:ad:e9:42:bb:
42:2d:13:ad:05:6c:74:92:25:e7:db:16:5a:2b:57:
fe:fb:6c:8a:2b:e4:dc:e6:7c:c3:0d:25:b5:ba:bd:
27:fe:3b:c2:29:cb:00:ff:7c:04:de:e1:ac:86:17:
7f:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:F7:62:2D:FD:48:27:1D:CC:F3:6C:98:39:16:05:6C:F3:43:3D:2D
X509v3 Authority Key Identifier:
keyid:94:7E:46:76:54:56:58:DE:09:AA:77:8F:8B:00:E9:A4:FD:A0:D0:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lH5GdlRWWN4JqnePiwDppP2g0A8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/565aed-610a-44ab-91c8-7dd5ed0e70d6/1/R_diLf1IJx3M82yYORYFbPNDPS0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/565aed-610a-44ab-91c8-7dd5ed0e70d6/1/lH5GdlRWWN4JqnePiwDppP2g0A8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.93.249.0/24
Signature Algorithm: sha256WithRSAEncryption
92:d8:b2:52:3b:31:16:86:72:00:ab:59:2a:8f:e1:57:38:68:
45:6b:d8:e3:4c:6e:2c:a0:d0:d9:c0:6a:95:95:81:44:d5:37:
b8:2c:09:4f:fc:84:f4:9c:fd:67:e5:32:c0:6e:65:ca:df:97:
3a:8b:0a:67:aa:45:7e:16:a3:bb:7c:3e:97:d8:e7:b1:3e:94:
a7:7c:ce:86:2f:91:5a:c6:1d:03:3a:53:4b:c4:9d:d1:b9:46:
8b:d6:bb:84:8d:91:6e:8e:b2:52:82:3d:ca:57:13:15:91:14:
7c:c9:28:7d:89:81:22:a3:3d:4f:ac:b2:10:86:9e:3f:26:e6:
23:93:12:d2:f2:9d:cb:ce:07:ab:f5:32:76:9a:c8:6b:6a:ec:
6c:72:83:42:5e:13:f3:a5:f0:74:2b:58:be:13:4c:e8:f3:c8:
82:6c:8c:91:16:c3:74:a4:1e:e8:0a:8b:c0:a2:6e:f8:38:24:
29:16:05:8f:51:d3:09:6c:f1:b5:4a:35:3a:b4:02:40:08:dc:
50:c1:5e:36:e1:4a:68:44:85:d9:8e:2e:86:83:0a:5e:23:d3:
03:48:38:40:cb:3b:45:15:64:d2:3b:c1:d3:8a:f9:e1:4d:0b:
28:1c:60:2e:dd:e8:b5:16:e7:75:02:0e:67:b1:6d:82:57:3a:
55:69:a4:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:20:22 2025 by rpki-client