Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/beda3e-ddeb-4c42-993c-518fb8638716/1/ROTPybee40bup9Au2j4bHbssXVU.roa
File: ROTPybee40bup9Au2j4bHbssXVU.roa (raw, json)
Hash identifier: 4CR+geChfFEYrg0hAyldiHNVjwRk/IFOgrmZkSIR7Y4=
Subject key identifier: 44:E4:CF:C9:B7:9E:E3:46:EE:A7:D0:2E:DA:3E:1B:1D:BB:2C:5D:55
Certificate issuer: /CN=6241ee2c44ace8a73384c255ad77c6c1f0452486
Certificate serial: 0182438D82E0453CADE67699CED284C67E21
Authority key identifier: 62:41:EE:2C:44:AC:E8:A7:33:84:C2:55:AD:77:C6:C1:F0:45:24:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YkHuLESs6KczhMJVrXfGwfBFJIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/beda3e-ddeb-4c42-993c-518fb8638716/1/ROTPybee40bup9Au2j4bHbssXVU.roa
Signing time: Thu 28 Jul 2022 06:45:23 +0000
ROA not before: Thu 28 Jul 2022 06:45:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201660
IP address blocks: 195.238.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:43:8d:82:e0:45:3c:ad:e6:76:99:ce:d2:84:c6:7e:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6241ee2c44ace8a73384c255ad77c6c1f0452486
Validity
Not Before: Jul 28 06:45:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=44e4cfc9b79ee346eea7d02eda3e1b1dbb2c5d55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:e3:ee:e5:49:5f:ef:c8:b9:da:88:e1:85:8e:
fe:bd:9a:6a:b3:49:a7:42:ff:f5:66:8a:68:b1:62:
6a:80:e5:55:e8:9f:73:48:0c:7e:46:be:f8:11:d7:
b6:35:38:a5:00:e9:4d:03:b9:4a:41:fc:93:2e:4d:
c8:6b:bc:92:81:2b:42:67:ff:a5:aa:0e:ac:97:cc:
af:66:d3:9c:d4:90:24:26:cc:8d:54:0c:fe:dd:91:
57:45:a1:19:2f:3d:76:c1:c0:f7:8f:f2:fe:c7:9b:
18:59:b9:b0:ba:a5:95:90:08:d9:71:1a:13:81:89:
9e:61:7e:09:7b:3f:57:13:0f:0d:2c:89:fe:bc:75:
d9:a6:24:52:a4:31:1d:1f:7d:4c:e3:59:2d:74:3b:
2f:84:f1:d2:a7:73:1b:03:56:1f:0f:1a:b1:8e:4c:
0c:11:54:15:2f:86:45:3d:05:a3:ec:3b:27:3e:90:
a9:d3:2d:d0:3d:b0:16:a9:84:1e:b4:78:7d:7d:24:
8c:b2:3d:66:c1:a3:01:1b:60:1a:45:10:6c:cf:41:
f9:08:b1:82:b8:c4:50:0f:b5:4d:0c:bd:01:5c:e1:
da:2b:49:04:cd:95:ac:e8:40:62:85:cc:71:bc:83:
44:17:67:0e:55:87:82:b9:ff:c6:a4:9f:3f:8d:44:
30:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:E4:CF:C9:B7:9E:E3:46:EE:A7:D0:2E:DA:3E:1B:1D:BB:2C:5D:55
X509v3 Authority Key Identifier:
keyid:62:41:EE:2C:44:AC:E8:A7:33:84:C2:55:AD:77:C6:C1:F0:45:24:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkHuLESs6KczhMJVrXfGwfBFJIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/beda3e-ddeb-4c42-993c-518fb8638716/1/ROTPybee40bup9Au2j4bHbssXVU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/beda3e-ddeb-4c42-993c-518fb8638716/1/YkHuLESs6KczhMJVrXfGwfBFJIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.238.120.0/24
Signature Algorithm: sha256WithRSAEncryption
32:3a:fd:20:a8:42:44:80:85:c3:6b:32:97:20:5c:6a:3c:53:
f3:94:f8:9d:be:91:fa:2c:32:0b:e1:49:79:21:08:03:94:a3:
7d:2f:23:25:76:47:94:e9:82:be:f3:46:cb:3d:b4:26:b5:3e:
f1:30:a5:ee:2d:82:c6:75:2c:f6:79:fa:21:a2:86:00:55:5c:
cd:a2:67:51:a8:fb:23:a4:40:18:19:0c:1b:7c:11:d9:7f:83:
2f:70:d7:05:86:62:38:bd:ae:b1:91:4b:1a:ad:aa:5f:c2:b4:
9a:ba:8e:dd:95:1e:e4:0d:f3:26:41:92:5f:b4:17:9f:e1:c2:
d4:d7:2a:a4:16:1a:95:92:d0:44:67:a6:c7:96:b8:f4:b4:4a:
7b:89:80:b9:31:50:0e:c9:bd:7c:33:bd:af:b2:89:a5:99:18:
9d:02:62:4e:0f:e3:b6:59:7a:9e:f3:9e:f9:41:6a:f3:a2:86:
06:d8:92:c0:9f:57:59:df:af:1f:df:d9:22:75:0a:31:1f:1a:
b3:0b:fe:55:6f:72:b0:42:6c:ab:c0:4e:4a:04:50:80:86:fa:
13:a6:69:45:1c:d3:90:78:5f:26:34:11:ef:ba:9e:d8:46:87:
21:a7:bf:55:e8:66:d7:94:13:bc:aa:a3:80:40:ec:7a:6f:5b:
b1:0f:c7:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 12:58:35 2025 by rpki-client