Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/ccb9bd-fec4-4cf7-9fe4-e193a28f6838/1/vO5XZNp0n9N_Y9kMwPgWVcA6Yb4.roa
File: vO5XZNp0n9N_Y9kMwPgWVcA6Yb4.roa (raw, json)
Hash identifier: KbtvqTICPlbzjGlBg4QZhzCMwMFwEUmcHoz+BOE3J7g=
Subject key identifier: BC:EE:57:64:DA:74:9F:D3:7F:63:D9:0C:C0:F8:16:55:C0:3A:61:BE
Certificate issuer: /CN=5a81f54036aef754ad94130072ab0879d83a0c74
Certificate serial: 01836003FF314DD164EE46C6E041397F8055
Authority key identifier: 5A:81:F5:40:36:AE:F7:54:AD:94:13:00:72:AB:08:79:D8:3A:0C:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WoH1QDau91StlBMAcqsIedg6DHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/ccb9bd-fec4-4cf7-9fe4-e193a28f6838/1/vO5XZNp0n9N_Y9kMwPgWVcA6Yb4.roa
Signing time: Wed 21 Sep 2022 12:26:58 +0000
ROA not before: Wed 21 Sep 2022 12:26:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 13287
IP address blocks: 195.177.90.0/24 maxlen: 24
195.177.89.0/24 maxlen: 24
195.177.88.0/22 maxlen: 22
195.177.88.0/24 maxlen: 24
195.177.91.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:60:03:ff:31:4d:d1:64:ee:46:c6:e0:41:39:7f:80:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a81f54036aef754ad94130072ab0879d83a0c74
Validity
Not Before: Sep 21 12:26:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bcee5764da749fd37f63d90cc0f81655c03a61be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:4c:70:f5:ac:bc:03:ae:fc:f6:48:1b:1e:e8:
49:2e:dc:78:70:14:bc:5f:e2:55:80:56:87:7a:27:
52:17:d5:03:37:17:b1:e0:97:bf:c3:52:1d:3f:84:
36:dd:96:54:c6:a6:47:fb:64:4f:8f:31:49:78:88:
29:68:0c:b3:8c:65:6a:71:71:10:6a:1f:d5:c5:ab:
41:cd:3a:d2:67:2c:e1:46:9c:5b:42:b3:7c:31:12:
5f:8d:71:d5:b8:9a:74:d2:a7:6e:44:5a:e7:43:4f:
83:cf:ae:42:81:0e:0c:fe:a6:b4:ab:bd:56:0a:39:
a2:05:fd:d3:50:2d:d9:ac:88:c1:e5:b8:ac:91:4f:
32:b3:a6:fd:4a:74:ab:35:b3:56:14:11:0f:c4:22:
3e:2b:7d:80:be:94:d0:95:c6:e4:7f:9d:b9:63:77:
4a:a6:f0:d1:bc:ea:f6:cf:e4:36:5a:8c:c4:f2:13:
a8:32:75:0d:6a:99:0b:db:71:af:58:30:85:6a:d3:
94:e2:d1:bd:5d:f4:76:27:d0:46:31:2f:34:82:22:
6c:84:e5:eb:af:5c:cd:fc:fe:b5:8b:b1:8b:67:96:
78:b4:e4:22:2a:09:08:cc:db:4d:06:ff:33:51:ab:
6d:be:a9:9f:44:db:a5:3d:be:33:79:dc:2e:41:f2:
6c:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:EE:57:64:DA:74:9F:D3:7F:63:D9:0C:C0:F8:16:55:C0:3A:61:BE
X509v3 Authority Key Identifier:
keyid:5A:81:F5:40:36:AE:F7:54:AD:94:13:00:72:AB:08:79:D8:3A:0C:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WoH1QDau91StlBMAcqsIedg6DHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/ccb9bd-fec4-4cf7-9fe4-e193a28f6838/1/vO5XZNp0n9N_Y9kMwPgWVcA6Yb4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/ccb9bd-fec4-4cf7-9fe4-e193a28f6838/1/WoH1QDau91StlBMAcqsIedg6DHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.177.88.0/22
Signature Algorithm: sha256WithRSAEncryption
29:bd:8c:f9:cf:41:fc:0b:01:35:a4:ca:03:a7:84:c2:1a:5d:
6a:62:3a:8c:25:b2:52:1b:5d:76:d1:e7:ac:f0:90:56:e8:8c:
50:75:17:12:9e:d0:f4:a6:b3:27:5d:9a:29:1e:6a:b0:e3:85:
7d:e5:fc:b0:6e:51:02:f5:57:44:d8:90:4f:88:b6:8e:8f:96:
2e:04:fb:d8:54:4b:a9:0a:c1:7a:1d:d5:08:29:ec:b4:52:3a:
83:98:eb:c3:02:dc:c0:d2:3b:26:05:bf:fe:48:d6:b4:03:e1:
0d:bb:09:06:99:bf:59:68:77:76:e2:c2:e6:9f:80:29:52:38:
0e:20:2f:96:d3:70:1e:2b:57:60:6c:c2:5b:55:d3:ad:f9:e1:
e3:52:60:3d:ce:68:91:c3:15:6a:47:7e:d2:ec:8a:51:3d:9c:
9c:0f:3f:c0:81:0c:bb:b1:47:f6:fb:58:17:24:94:78:a6:eb:
70:28:ab:4d:bf:30:ff:fd:ac:ac:f1:96:1f:74:19:a0:96:0e:
15:66:11:03:94:0e:35:6a:f4:65:4e:e0:cb:88:4e:96:a5:c1:
ee:69:48:02:0b:ae:7a:75:1f:91:92:e1:58:ad:34:55:26:1d:
a6:58:69:04:c5:0c:fa:c0:33:73:6c:b3:e8:1a:76:fe:19:a0:
97:a0:cb:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 13:04:54 2025 by rpki-client