Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/72ee7b-6018-49e8-85a7-258ecb4ee605/1/w9h2szYOQrX4psSGkbmDEKMgDts.roa
File: w9h2szYOQrX4psSGkbmDEKMgDts.roa (raw, json)
Hash identifier: Y9Z0oncCij0O0ZFfR5Asa3unGSao/FVd51BY8U5M9wQ=
Subject key identifier: C3:D8:76:B3:36:0E:42:B5:F8:A6:C4:86:91:B9:83:10:A3:20:0E:DB
Certificate issuer: /CN=600077f2148f6d8757949995114fdf510054a0a6
Certificate serial: 09F73DE4
Authority key identifier: 60:00:77:F2:14:8F:6D:87:57:94:99:95:11:4F:DF:51:00:54:A0:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YAB38hSPbYdXlJmVEU_fUQBUoKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/72ee7b-6018-49e8-85a7-258ecb4ee605/1/w9h2szYOQrX4psSGkbmDEKMgDts.roa
Signing time: Sat 01 Jan 2022 09:56:08 +0000
ROA not before: Sat 01 Jan 2022 09:56:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47387
IP address blocks: 195.190.20.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 167198180 (0x9f73de4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=600077f2148f6d8757949995114fdf510054a0a6
Validity
Not Before: Jan 1 09:56:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c3d876b3360e42b5f8a6c48691b98310a3200edb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:61:cc:aa:9c:9d:95:83:5e:f3:3b:56:38:bd:
b7:f6:11:50:70:d3:10:a7:9f:53:2e:61:ff:53:72:
db:d4:84:91:45:5b:bd:f1:02:e2:0e:af:5e:1c:b8:
c7:d0:de:d9:c6:c1:b9:50:72:89:f5:49:41:ed:a7:
cb:2b:c7:c9:2b:be:e4:9b:2f:f1:83:14:6c:19:5f:
6e:e6:9e:99:f4:fa:af:6d:24:15:52:d6:31:49:4e:
be:66:3f:c6:ab:b9:fc:fa:e1:85:b6:42:78:55:6d:
09:23:f2:8c:be:08:c1:3e:aa:1f:19:3b:7f:ba:73:
a1:43:17:02:28:95:2e:50:66:84:2e:b9:4a:5a:98:
0e:a3:dc:7e:57:ff:ef:90:a5:1d:47:06:dd:92:17:
df:be:0e:d3:64:61:88:b8:26:82:29:1d:47:4a:f0:
09:53:2d:cd:83:e9:e4:59:40:66:ed:7f:84:75:b4:
8c:7b:6c:df:18:3c:a2:e8:2a:62:b4:71:e6:89:69:
7e:d7:cb:3d:cb:57:db:63:bf:d6:1b:d7:f9:84:9c:
6a:91:11:f7:ca:91:c3:48:2c:d8:42:ad:c7:0c:1b:
ba:19:13:7a:87:ae:b4:1a:14:26:6e:71:40:d4:5d:
a5:1c:38:ea:ac:67:9c:37:3a:31:cb:2d:7e:fd:0a:
aa:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:D8:76:B3:36:0E:42:B5:F8:A6:C4:86:91:B9:83:10:A3:20:0E:DB
X509v3 Authority Key Identifier:
keyid:60:00:77:F2:14:8F:6D:87:57:94:99:95:11:4F:DF:51:00:54:A0:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YAB38hSPbYdXlJmVEU_fUQBUoKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/72ee7b-6018-49e8-85a7-258ecb4ee605/1/w9h2szYOQrX4psSGkbmDEKMgDts.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/72ee7b-6018-49e8-85a7-258ecb4ee605/1/YAB38hSPbYdXlJmVEU_fUQBUoKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.190.20.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:df:5d:d8:0b:0e:a8:34:ee:43:bb:1b:2e:a0:57:12:40:19:
29:fb:21:f6:03:69:39:ef:c5:69:28:dd:19:16:6e:00:28:66:
f3:48:76:3e:7c:e3:d4:d2:55:c8:c2:03:85:73:73:70:94:e1:
4e:37:e0:5f:2b:a9:e3:c5:5e:f0:a1:f5:2f:c2:9e:ed:f7:24:
07:ae:04:d6:93:4f:d0:c5:24:45:fa:55:d9:b6:47:94:e8:26:
d5:0d:2f:d9:d4:79:1a:47:9b:7c:ff:64:ac:93:9e:61:b9:16:
45:23:e0:38:3f:74:71:d6:fa:4a:ea:d0:1a:34:08:69:c3:ae:
06:f3:a9:92:84:2d:61:37:7f:68:c6:a9:ca:3b:e3:2c:40:ae:
ce:b5:f3:d0:4b:6c:2c:36:74:78:01:f4:a8:58:05:42:2c:6f:
62:96:2d:cd:02:99:0e:a6:78:5f:d6:9b:ac:ae:f2:62:7a:3e:
b0:d0:b6:2f:6b:47:72:04:c9:81:61:1e:61:88:78:90:be:3d:
32:e0:de:86:61:6e:fb:52:28:60:da:e1:d3:e4:fb:62:83:da:
c9:64:f8:aa:89:25:6e:d0:55:0a:a6:06:d4:fe:de:29:b9:7c:
79:50:ca:83:90:f6:e0:25:99:ae:68:02:6f:9e:a5:56:e4:d9:
cc:f2:51:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:30:55 2025 by rpki-client