Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/59d3be-8b42-4b8d-a7ce-ab7ea6de2534/1/RkaDUuIAvzY24a2PvV0Sp6QN7X8.roa
File: RkaDUuIAvzY24a2PvV0Sp6QN7X8.roa (raw, json)
Hash identifier: aHJDD6eeMesfZmGcncb/kReMqK2kysCmiesOUL2f4ek=
Subject key identifier: 46:46:83:52:E2:00:BF:36:36:E1:AD:8F:BD:5D:12:A7:A4:0D:ED:7F
Certificate issuer: /CN=9fbc64af9aee8c3ae72e0af79643bec8ec2ef827
Certificate serial: 035469B6
Authority key identifier: 9F:BC:64:AF:9A:EE:8C:3A:E7:2E:0A:F7:96:43:BE:C8:EC:2E:F8:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n7xkr5rujDrnLgr3lkO-yOwu-Cc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/59d3be-8b42-4b8d-a7ce-ab7ea6de2534/1/RkaDUuIAvzY24a2PvV0Sp6QN7X8.roa
Signing time: Sat 01 Jan 2022 06:57:39 +0000
ROA not before: Sat 01 Jan 2022 06:57:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50495
IP address blocks: 195.234.99.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 55863734 (0x35469b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fbc64af9aee8c3ae72e0af79643bec8ec2ef827
Validity
Not Before: Jan 1 06:57:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=46468352e200bf3636e1ad8fbd5d12a7a40ded7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:d9:e0:7f:92:8c:46:4b:8d:22:52:0a:01:f5:
6c:4e:a5:27:8a:98:a2:b9:47:73:51:18:9a:fa:43:
fd:88:35:c0:5b:2f:a6:aa:7f:0b:f6:fb:74:10:ad:
68:52:15:2a:91:d1:88:ea:8e:99:74:f2:3d:90:07:
9c:55:d9:56:3e:36:9e:78:70:b0:82:73:1c:ff:39:
91:9a:81:41:75:c3:d5:b2:a7:37:41:d8:b7:a3:35:
fa:ea:b6:8d:8b:f0:f1:8d:e7:00:a4:84:eb:7e:57:
a4:58:4a:2d:02:88:15:74:4d:05:8f:55:97:26:41:
6b:6c:9f:0b:ac:10:c1:cd:2f:f0:d9:f4:34:2a:11:
f2:80:b5:d6:c3:57:c7:f4:00:eb:0d:b1:ba:bc:e6:
8c:e3:2a:00:9d:a2:1a:ef:c7:b2:15:94:17:43:ec:
b6:a2:26:1f:d0:86:bc:32:79:15:aa:dc:d5:0d:d3:
38:91:33:c5:76:bd:df:47:d6:35:30:3b:74:32:4a:
84:5d:14:17:8d:c7:c2:45:81:96:51:a6:e5:b8:64:
00:5a:9e:a6:0d:96:29:45:a4:81:c6:68:f4:ff:61:
2f:5d:5a:49:4f:b0:42:f6:54:71:6c:3a:57:12:42:
b5:5f:17:74:a6:d6:02:c5:12:6b:6c:94:e1:ab:6b:
47:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:46:83:52:E2:00:BF:36:36:E1:AD:8F:BD:5D:12:A7:A4:0D:ED:7F
X509v3 Authority Key Identifier:
keyid:9F:BC:64:AF:9A:EE:8C:3A:E7:2E:0A:F7:96:43:BE:C8:EC:2E:F8:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n7xkr5rujDrnLgr3lkO-yOwu-Cc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/59d3be-8b42-4b8d-a7ce-ab7ea6de2534/1/RkaDUuIAvzY24a2PvV0Sp6QN7X8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/59d3be-8b42-4b8d-a7ce-ab7ea6de2534/1/n7xkr5rujDrnLgr3lkO-yOwu-Cc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.234.99.0/24
Signature Algorithm: sha256WithRSAEncryption
22:c4:4d:78:48:97:8c:46:71:f0:8d:6a:80:52:c6:ff:c8:c5:
73:11:04:e2:25:2c:1e:50:d0:c4:62:f8:9a:ee:c8:6f:0e:b7:
a3:39:24:88:c5:38:4a:02:f9:0e:45:ac:5b:fe:ce:17:a9:5d:
cf:fb:21:f0:a9:05:48:0d:59:e0:99:5f:a7:87:13:7d:37:1a:
50:af:50:ff:81:e9:14:dd:5c:85:ff:bf:be:98:d3:d5:8e:6d:
de:f0:75:67:82:13:13:a4:4e:d2:25:d6:30:3a:25:0b:eb:42:
bd:d7:ef:ca:2e:5b:3e:38:5f:4a:b9:fc:71:db:c0:5e:97:99:
40:c3:46:1c:97:2e:02:10:ff:f7:42:9d:a0:f7:90:2a:af:3f:
32:45:00:90:96:44:c1:2a:cb:33:0b:13:45:ee:ae:38:d9:01:
99:47:c6:bf:78:5c:ac:e4:5c:b7:f8:0e:a2:e5:85:73:9f:ad:
d8:1d:d0:e5:95:1e:6b:68:70:23:3b:e8:03:e6:6e:40:8d:d0:
ea:42:07:55:d9:c4:71:b5:69:71:07:f0:b2:a0:fa:c1:bf:5a:
27:29:11:28:7f:28:0a:36:1e:44:88:05:d7:1b:fe:49:04:0b:
a9:ac:0d:b4:10:11:12:9d:72:83:ac:fe:b0:17:7b:6f:9d:4c:
95:60:d1:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:51:01 2025 by rpki-client