Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/2a8f88-b05d-4291-93d4-07f7d5195c2c/1/sX8eqPNYGHgoOMPFOX57h6etB1c.roa
File: sX8eqPNYGHgoOMPFOX57h6etB1c.roa (raw, json)
Hash identifier: n0vapGuJmgP/CZRi0Vf/gufkxnSkXDgUhS9G102R358=
Subject key identifier: B1:7F:1E:A8:F3:58:18:78:28:38:C3:C5:39:7E:7B:87:A7:AD:07:57
Certificate issuer: /CN=e4bdd6b1ebfc95899a58333dc94cf82a19a6b3be
Certificate serial: 08CE1953
Authority key identifier: E4:BD:D6:B1:EB:FC:95:89:9A:58:33:3D:C9:4C:F8:2A:19:A6:B3:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5L3Wsev8lYmaWDM9yUz4Khmms74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/2a8f88-b05d-4291-93d4-07f7d5195c2c/1/sX8eqPNYGHgoOMPFOX57h6etB1c.roa
Signing time: Sat 01 Jan 2022 15:59:53 +0000
ROA not before: Sat 01 Jan 2022 15:59:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34655
IP address blocks: 188.227.231.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 147724627 (0x8ce1953)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4bdd6b1ebfc95899a58333dc94cf82a19a6b3be
Validity
Not Before: Jan 1 15:59:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b17f1ea8f35818782838c3c5397e7b87a7ad0757
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:4d:cf:51:c2:56:fc:ac:22:16:76:dc:dc:ec:
9c:b8:f6:ae:7e:b4:07:a6:76:a9:cc:35:5b:61:0c:
9a:8e:30:6a:ce:c6:f5:7d:63:9f:de:e0:11:46:5f:
5c:82:83:e5:d3:3f:d6:b3:71:ce:4e:db:89:9c:a1:
94:8e:e9:31:85:5a:8d:0b:31:7b:98:37:bf:7f:85:
64:63:0b:bb:e9:de:d8:93:78:72:51:6f:02:86:0e:
ab:22:78:f4:7b:87:7c:7e:d3:c0:7b:1f:dc:e2:da:
de:0c:6f:6f:0c:af:db:48:73:85:e6:73:ee:9a:99:
98:17:29:04:53:8a:23:e8:f3:4f:30:84:1f:82:1d:
bb:50:3f:b9:cf:29:cb:ab:69:65:91:e8:8d:af:c6:
39:bb:dc:83:c0:b5:0e:0f:5c:14:1d:a7:22:7e:73:
66:2f:49:2c:ac:d3:b3:3a:7d:12:40:83:cd:fa:8b:
bb:e7:48:df:3e:42:de:71:8f:bc:68:97:13:21:cb:
e9:21:8d:7e:f8:ec:60:2a:32:9f:82:3f:26:77:df:
ee:10:22:85:0b:29:d3:da:f9:4b:dc:53:3b:f6:e1:
ba:2d:25:c1:d1:ba:f4:a1:bb:99:40:98:71:a4:50:
53:67:24:b0:f5:6a:2a:52:1a:ba:80:5d:bb:8c:36:
8b:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:7F:1E:A8:F3:58:18:78:28:38:C3:C5:39:7E:7B:87:A7:AD:07:57
X509v3 Authority Key Identifier:
keyid:E4:BD:D6:B1:EB:FC:95:89:9A:58:33:3D:C9:4C:F8:2A:19:A6:B3:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5L3Wsev8lYmaWDM9yUz4Khmms74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/2a8f88-b05d-4291-93d4-07f7d5195c2c/1/sX8eqPNYGHgoOMPFOX57h6etB1c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/2a8f88-b05d-4291-93d4-07f7d5195c2c/1/5L3Wsev8lYmaWDM9yUz4Khmms74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.227.231.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:59:0a:6f:3b:93:cd:e8:8d:56:97:39:e9:48:46:a3:f6:2f:
61:ae:df:98:1a:e1:ef:83:0e:b7:81:fa:37:c5:dd:1c:76:60:
de:13:1c:b2:0c:c7:97:f4:25:c0:78:a1:55:2a:bd:77:aa:19:
49:4c:2e:7b:7f:31:e0:d2:ae:cb:2b:a0:48:4b:5e:18:8c:d3:
ef:23:12:9d:ab:00:17:e3:1b:44:91:7a:39:26:18:aa:09:63:
7c:a9:04:39:5b:74:9b:b9:3f:bc:07:28:91:03:13:d5:94:8d:
3d:45:df:ce:f3:11:49:26:ee:91:48:d7:fe:c1:8c:3a:6c:94:
f2:8a:66:8a:1b:34:61:9e:84:42:59:20:c1:17:0c:ba:1a:0d:
53:ae:8c:d2:d9:90:46:3a:b3:1a:7e:3b:c4:19:8a:1f:ae:32:
15:28:45:30:b5:37:4b:d8:c7:f6:04:d0:c5:3f:b0:f8:ee:c7:
9b:46:2e:d5:b2:fc:2b:7c:94:1b:5e:f3:00:2f:ed:72:fa:0e:
83:80:c7:c0:3a:84:9e:0d:ba:e6:4e:79:9e:af:53:43:86:c8:
7a:25:05:a4:26:35:cf:d6:a5:21:df:86:60:c9:88:61:b6:6b:
a8:8c:2c:d2:cc:65:47:84:71:d0:3d:e6:dd:79:1d:e9:c4:d2:
34:d9:7c:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 00:36:30 2025 by rpki-client