Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/B1EfUaQ59qrxqS3aAVKPx2-J3Fw.roa
File: B1EfUaQ59qrxqS3aAVKPx2-J3Fw.roa (raw, json)
Hash identifier: EpWoc8Kn+PsqINPGo5HJJthZNxF3McMMNI3lnhudRTs=
Subject key identifier: 07:51:1F:51:A4:39:F6:AA:F1:A9:2D:DA:01:52:8F:C7:6F:89:DC:5C
Certificate issuer: /CN=dbe8cc8f5af1e7362d454f3dd91a82952919db61
Certificate serial: 02A2567D
Authority key identifier: DB:E8:CC:8F:5A:F1:E7:36:2D:45:4F:3D:D9:1A:82:95:29:19:DB:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2-jMj1rx5zYtRU892RqClSkZ22E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/B1EfUaQ59qrxqS3aAVKPx2-J3Fw.roa
Signing time: Sat 01 Jan 2022 02:53:16 +0000
ROA not before: Sat 01 Jan 2022 02:53:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59210
IP address blocks: 195.128.136.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44193405 (0x2a2567d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbe8cc8f5af1e7362d454f3dd91a82952919db61
Validity
Not Before: Jan 1 02:53:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=07511f51a439f6aaf1a92dda01528fc76f89dc5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:0e:2f:87:b2:ae:07:58:9b:f9:ad:48:b5:9a:
d3:d4:4a:48:18:c3:13:da:12:aa:51:9a:c1:8d:ff:
a4:4b:81:d1:d3:6e:d7:67:97:fa:5f:47:58:f2:cd:
a5:9c:7f:2f:a3:df:a4:40:a0:83:5f:93:40:ce:3c:
7c:96:24:e8:76:d3:74:ca:19:e5:23:98:df:c4:51:
b5:45:73:73:60:7f:d1:40:36:d9:d0:b8:5f:db:f8:
a5:7e:d5:84:62:c7:6b:f3:9d:63:8c:31:87:85:b8:
ea:52:9f:d4:4c:ef:4e:a5:eb:7b:b8:bc:2d:01:ca:
a1:f8:7d:37:5d:c2:70:b0:4c:09:fe:53:49:ef:b9:
d6:98:34:67:d5:ba:91:9b:a9:bf:9c:f3:02:0e:3d:
93:f9:53:40:9e:a8:7a:ad:4d:b0:c6:d6:06:76:74:
5a:fc:de:83:1f:c5:9f:d4:00:18:83:13:d8:38:db:
3d:80:bc:fe:72:c5:e0:d2:2e:1e:a0:6d:9b:b7:f3:
31:25:1b:6e:6e:67:9d:58:d3:db:16:de:bc:01:08:
c5:46:c0:19:8f:ee:6b:cf:15:24:0f:36:eb:27:6e:
fa:46:dd:28:63:ce:41:b7:1c:ff:4b:13:93:65:0f:
ef:b3:70:b9:ed:2c:7d:31:5e:c9:6f:57:77:df:ea:
4e:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:51:1F:51:A4:39:F6:AA:F1:A9:2D:DA:01:52:8F:C7:6F:89:DC:5C
X509v3 Authority Key Identifier:
keyid:DB:E8:CC:8F:5A:F1:E7:36:2D:45:4F:3D:D9:1A:82:95:29:19:DB:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2-jMj1rx5zYtRU892RqClSkZ22E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/B1EfUaQ59qrxqS3aAVKPx2-J3Fw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/2-jMj1rx5zYtRU892RqClSkZ22E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.128.136.0/24
Signature Algorithm: sha256WithRSAEncryption
66:f4:e6:74:18:7d:8f:e4:0e:9e:3f:61:77:28:82:86:20:82:
cb:8e:ca:af:7a:f4:03:f7:7c:d6:c9:9b:db:85:a1:61:10:5f:
25:b5:e4:e9:6e:2d:cd:3a:9d:8d:26:70:96:8f:d3:9b:0e:0a:
cc:ae:d3:13:5d:e8:48:72:14:ec:89:6f:3a:5c:b3:d2:a9:ec:
19:a7:93:87:4e:8e:ec:bf:39:5f:ac:7f:ef:25:58:96:25:b0:
58:70:39:9a:ea:31:74:a5:4f:52:21:ba:ac:23:53:b1:a8:36:
1a:c1:20:9c:2a:3b:d1:0c:e2:ba:ae:8c:82:95:b5:ac:79:00:
72:f1:44:c1:7d:d9:fb:ea:60:ab:2c:4f:4b:d1:13:b5:8c:ef:
de:a2:07:42:4f:79:b7:03:b6:d7:c5:7a:52:74:57:c8:87:9e:
b5:93:09:07:91:f6:36:53:ef:97:2c:6a:18:a0:3e:6e:e0:63:
67:d3:95:de:d3:2e:ba:fb:5c:82:a4:48:ac:10:3f:bb:d4:95:
9a:ef:e5:02:8e:2e:3b:d3:10:14:55:a9:02:dc:d4:aa:c7:12:
a2:41:df:b2:88:8a:2a:0c:09:9f:66:01:4f:4f:6e:95:b8:29:
41:c5:6b:0c:ff:70:9c:fb:75:d0:9e:d1:53:04:71:0e:34:60:
f5:86:bb:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 07:02:21 2025 by rpki-client