Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/f68113-73a7-400d-8c99-99befa476a8f/1/oXpUFzlQftmKb046jKN5kottcS8.roa
File: oXpUFzlQftmKb046jKN5kottcS8.roa (raw, json)
Hash identifier: MJi5xCAXiXcRkDOuMz2/+xZHoE8pjRRrIntmLtPeI+4=
Subject key identifier: A1:7A:54:17:39:50:7E:D9:8A:6F:4E:3A:8C:A3:79:92:8B:6D:71:2F
Certificate issuer: /CN=62fc2ed6557d0ce80e81505b1f9d580698887c6e
Certificate serial: 094803
Authority key identifier: 62:FC:2E:D6:55:7D:0C:E8:0E:81:50:5B:1F:9D:58:06:98:88:7C:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yvwu1lV9DOgOgVBbH51YBpiIfG4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/f68113-73a7-400d-8c99-99befa476a8f/1/oXpUFzlQftmKb046jKN5kottcS8.roa
Signing time: Mon 04 Apr 2022 07:52:07 +0000
ROA not before: Mon 04 Apr 2022 07:52:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49058
IP address blocks: 95.131.176.0/21 maxlen: 32
185.25.9.0/24 maxlen: 32
185.25.10.0/23 maxlen: 32
2a00:7b60::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 608259 (0x94803)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fc2ed6557d0ce80e81505b1f9d580698887c6e
Validity
Not Before: Apr 4 07:52:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a17a541739507ed98a6f4e3a8ca379928b6d712f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:a4:5f:34:b1:44:56:2f:42:5b:84:a3:de:6d:
04:f0:09:d4:5a:e3:fb:4d:00:5c:fd:5b:93:f7:83:
29:1b:7c:18:16:7a:a0:bf:9a:8d:52:cb:27:9e:42:
00:ae:03:c2:29:37:1b:8e:4c:65:e8:c1:20:79:54:
5e:10:f5:4f:d6:ec:b2:10:ac:7c:e0:d7:72:2f:5b:
72:8f:b6:79:fa:b5:a3:00:80:cd:24:68:62:d4:5f:
dd:ee:be:b8:0f:ee:1e:8a:70:93:f7:8d:a9:bb:f8:
29:f8:a0:14:62:60:e2:0c:62:b9:31:84:43:8b:43:
d7:26:9e:f6:27:90:c4:33:53:7f:17:73:fa:36:67:
56:44:a9:65:1d:c6:12:61:d6:a4:b9:0d:26:a0:01:
a3:51:90:d4:ca:fe:bd:f0:2c:45:7b:f2:0d:08:2e:
d6:89:af:cd:47:bd:55:91:d9:c3:e5:3f:a9:b3:04:
cc:a6:63:61:f5:66:f3:f4:79:e5:c0:05:f5:3b:43:
57:a6:92:17:fd:ea:38:fb:f6:e5:32:25:a9:a9:8c:
da:0f:e8:b3:87:f1:5a:8c:58:7d:61:2b:f6:90:9e:
d5:04:9a:ca:e8:ea:8f:64:68:8d:52:33:46:1d:55:
6b:9f:26:ff:f4:6a:90:cb:26:14:b9:0d:fb:9e:b2:
b1:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:7A:54:17:39:50:7E:D9:8A:6F:4E:3A:8C:A3:79:92:8B:6D:71:2F
X509v3 Authority Key Identifier:
keyid:62:FC:2E:D6:55:7D:0C:E8:0E:81:50:5B:1F:9D:58:06:98:88:7C:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yvwu1lV9DOgOgVBbH51YBpiIfG4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f68113-73a7-400d-8c99-99befa476a8f/1/oXpUFzlQftmKb046jKN5kottcS8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f68113-73a7-400d-8c99-99befa476a8f/1/Yvwu1lV9DOgOgVBbH51YBpiIfG4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.131.176.0/21
185.25.9.0-185.25.11.255
IPv6:
2a00:7b60::/32
Signature Algorithm: sha256WithRSAEncryption
41:77:70:05:15:19:fb:70:ff:70:05:68:bd:0d:9b:0e:7e:bf:
9f:8c:89:82:aa:73:8f:37:df:13:2e:9a:ae:bb:4a:a6:52:fb:
23:9a:a9:2e:e4:c0:75:29:35:2a:3c:33:cd:f8:13:7d:d0:92:
fb:dc:1f:0e:5a:17:7e:d2:3f:73:29:ca:aa:27:95:44:12:a6:
6b:d8:20:cf:49:87:b2:77:ed:3a:62:fc:4d:16:b7:65:5b:2f:
21:c9:ee:3d:54:f1:7a:65:6e:0d:68:8a:9b:5c:40:3c:15:7d:
03:7d:52:5c:9f:ab:d2:6a:f4:44:09:88:bc:0e:67:57:64:5d:
8e:c1:f5:11:84:c9:d3:df:db:b0:65:06:c6:7f:11:9d:73:58:
9d:07:7d:90:c1:f5:bb:1f:d5:85:40:08:c7:51:a5:cf:03:c0:
9f:75:21:c1:51:4e:0c:c4:b8:01:1e:e2:3d:6b:8e:a7:b4:40:
96:c7:5b:46:9b:09:36:fe:49:c0:d2:27:0e:3f:e4:64:1d:a3:
11:05:10:da:e0:34:32:f8:65:ee:62:0f:f7:72:9b:92:78:00:
5a:23:5f:1b:fa:8f:13:6b:ee:2e:5e:3a:89:89:bf:ec:51:bb:
bf:52:d7:3c:a2:49:98:1e:cd:08:7f:95:8f:37:46:94:d4:6d:
1d:40:da:9a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:28:07 2025 by rpki-client