Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/beda3e-ddeb-4c42-993c-518fb8638716/1/C868aCYNVUdK8lSIAiElHtvBRRc.roa
File: C868aCYNVUdK8lSIAiElHtvBRRc.roa (raw, json)
Hash identifier: rfIapnPSBPAAtW2/tBpMIGpqHG67Z8DCeS8MzqvOAWM=
Subject key identifier: 0B:CE:BC:68:26:0D:55:47:4A:F2:54:88:02:21:25:1E:DB:C1:45:17
Certificate issuer: /CN=6241ee2c44ace8a73384c255ad77c6c1f0452486
Certificate serial: 0186352DA1702B702DB7F730111767178688
Authority key identifier: 62:41:EE:2C:44:AC:E8:A7:33:84:C2:55:AD:77:C6:C1:F0:45:24:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YkHuLESs6KczhMJVrXfGwfBFJIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/beda3e-ddeb-4c42-993c-518fb8638716/1/C868aCYNVUdK8lSIAiElHtvBRRc.roa
Signing time: Thu 09 Feb 2023 07:57:08 +0000
ROA not before: Thu 09 Feb 2023 07:57:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41436
IP address blocks: 195.238.121.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:35:2d:a1:70:2b:70:2d:b7:f7:30:11:17:67:17:86:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6241ee2c44ace8a73384c255ad77c6c1f0452486
Validity
Not Before: Feb 9 07:57:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0bcebc68260d55474af254880221251edbc14517
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:af:81:63:cf:a1:10:bb:ce:77:50:35:f9:8b:
07:19:06:b1:50:48:62:fb:17:a7:2d:55:a7:7a:ff:
8d:84:4c:c8:f6:bd:29:42:15:61:84:38:62:57:6f:
ea:d1:f8:a4:9d:47:eb:9a:c1:34:a3:d6:6d:a9:47:
52:b1:a9:01:6b:f3:ea:b3:69:33:41:b1:1f:6e:16:
78:bc:bf:71:f2:f4:a4:1b:23:60:3d:af:a1:90:35:
40:06:6b:c9:a3:c8:e3:f8:77:5d:99:16:16:00:1f:
6d:db:f2:ce:9d:26:c6:da:9f:27:cf:49:99:0a:09:
7d:85:80:d8:72:2e:35:3e:b5:68:44:3d:86:70:f5:
06:98:91:a9:a2:67:d5:fb:0a:04:07:c1:29:f8:49:
de:0d:90:a9:39:87:fd:e7:cf:d7:6c:98:38:ad:b8:
57:7a:d9:18:cb:81:54:0e:bf:1d:66:57:4f:5d:9c:
d9:47:45:5e:e1:23:ca:88:99:c1:51:19:2c:4b:23:
af:d4:62:23:ef:21:bd:5e:e4:e2:a2:94:aa:4e:ad:
75:5c:be:78:9c:d0:18:f4:bf:8b:f9:89:ae:62:2a:
b8:2c:f2:ad:0a:51:47:d9:75:23:e8:3a:7e:0c:ba:
6e:c7:e5:a3:2c:40:bb:be:2d:07:59:89:f1:5c:c1:
75:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:CE:BC:68:26:0D:55:47:4A:F2:54:88:02:21:25:1E:DB:C1:45:17
X509v3 Authority Key Identifier:
keyid:62:41:EE:2C:44:AC:E8:A7:33:84:C2:55:AD:77:C6:C1:F0:45:24:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkHuLESs6KczhMJVrXfGwfBFJIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/beda3e-ddeb-4c42-993c-518fb8638716/1/C868aCYNVUdK8lSIAiElHtvBRRc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/beda3e-ddeb-4c42-993c-518fb8638716/1/YkHuLESs6KczhMJVrXfGwfBFJIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.238.121.0/24
Signature Algorithm: sha256WithRSAEncryption
37:b8:a6:07:f6:8f:96:00:eb:97:50:0e:09:c4:51:63:0b:b8:
a7:ee:51:46:7a:ef:33:27:c4:76:29:77:bb:e3:df:fc:69:27:
7c:f3:08:bc:83:2e:94:4a:06:a2:1c:c7:cd:c1:2c:9a:13:36:
bb:66:46:c2:7b:01:a2:bf:90:30:6f:50:8a:ee:74:56:bd:d3:
8c:a6:05:a5:f6:aa:e5:5d:b8:e6:52:13:b9:8d:de:9f:44:bc:
8b:b3:c1:e6:c4:ca:17:53:12:9c:8e:28:d3:87:c8:9e:35:ff:
8a:e6:22:c6:93:12:db:df:31:c4:46:77:b1:4e:fa:a4:50:75:
ab:19:61:91:a2:9a:f9:c0:eb:d0:45:8b:54:45:2b:85:3a:4d:
aa:00:49:4b:59:0d:53:fe:ee:7c:4a:6e:be:b3:30:59:9e:a2:
87:bf:3e:b9:7b:44:df:0b:7f:36:74:67:51:70:ae:b2:71:79:
30:a8:ab:dc:4c:02:db:b0:15:b4:0f:57:42:ca:bd:a6:b3:8e:
59:55:65:69:2b:a6:fd:71:78:18:c4:52:c9:05:55:e2:65:53:
bf:df:18:2b:96:fe:81:06:10:3b:60:c1:71:8a:f2:64:8e:e3:
90:0a:b9:11:55:58:20:32:af:30:c4:af:67:24:06:f2:f6:8f:
91:4f:85:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 12:54:05 2025 by rpki-client