Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/0951d7-3f67-4bd4-904d-c94feaa6cb79/1/1-KefWqefjmAw4ZQNFrIcy89Wu4M.roa
File: 1-KefWqefjmAw4ZQNFrIcy89Wu4M.roa (raw, json)
Hash identifier: H5wQCD4boDdeyTF89RAbRKVeldGQUiHkd1zDLsQkJ68=
Subject key identifier: F8:A7:9F:5A:A7:9F:8E:60:30:E1:94:0D:16:B2:1C:CB:CF:56:BB:83
Certificate issuer: /CN=a5295237ab44bce35ddfc2627fd49a8c44612441
Certificate serial: 27E99E6B
Authority key identifier: A5:29:52:37:AB:44:BC:E3:5D:DF:C2:62:7F:D4:9A:8C:44:61:24:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pSlSN6tEvONd38Jif9SajERhJEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/0951d7-3f67-4bd4-904d-c94feaa6cb79/1/1-KefWqefjmAw4ZQNFrIcy89Wu4M.roa
Signing time: Sat 01 Jan 2022 13:00:23 +0000
ROA not before: Sat 01 Jan 2022 13:00:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39005
IP address blocks: 95.157.192.0/18 maxlen: 18
88.219.0.0/16 maxlen: 16
2a00:e080::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 669621867 (0x27e99e6b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5295237ab44bce35ddfc2627fd49a8c44612441
Validity
Not Before: Jan 1 13:00:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f8a79f5aa79f8e6030e1940d16b21ccbcf56bb83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d5:a5:de:34:22:58:33:22:6f:22:e0:04:c5:
52:e3:a8:37:47:fb:bc:72:fe:ca:7a:2b:15:c5:d7:
0a:76:8a:5f:b2:4e:0a:2e:97:85:c5:14:5c:12:cd:
f7:92:3b:df:30:4a:1b:b4:6f:97:d9:76:ec:30:71:
5e:fd:8e:e1:76:e1:f7:0e:f9:39:b1:f1:c3:3b:59:
d6:3c:39:a4:f6:20:6d:38:83:39:b2:5a:39:41:93:
f8:c3:7c:ec:15:b7:13:a0:af:1d:a6:e7:e2:d5:e7:
b4:96:bc:e5:a7:67:71:f1:4b:4d:3f:74:9e:4c:9b:
f7:09:1c:93:78:ce:3f:69:1b:38:b4:0c:e6:17:5c:
bf:c1:b8:b2:6f:77:2c:d1:7c:9c:50:be:49:0f:65:
50:f2:60:a3:2e:81:1a:92:0f:0d:68:42:90:7c:08:
69:1c:4a:68:cd:b2:93:4b:68:39:71:fd:f2:67:06:
b4:6b:09:b8:bf:71:7f:b6:7e:36:4c:77:36:79:d3:
39:00:c1:51:9f:0c:79:35:67:b6:a0:9f:93:f8:2a:
fc:64:c1:ab:82:de:cd:ca:97:45:61:07:bd:cb:9f:
3c:6b:ee:b3:dd:87:8b:86:56:01:2f:73:4c:b6:0f:
9a:7b:ae:44:79:c9:c8:21:d3:a9:c2:2e:a4:ba:5f:
a7:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:A7:9F:5A:A7:9F:8E:60:30:E1:94:0D:16:B2:1C:CB:CF:56:BB:83
X509v3 Authority Key Identifier:
keyid:A5:29:52:37:AB:44:BC:E3:5D:DF:C2:62:7F:D4:9A:8C:44:61:24:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pSlSN6tEvONd38Jif9SajERhJEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0951d7-3f67-4bd4-904d-c94feaa6cb79/1/1-KefWqefjmAw4ZQNFrIcy89Wu4M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0951d7-3f67-4bd4-904d-c94feaa6cb79/1/pSlSN6tEvONd38Jif9SajERhJEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.219.0.0/16
95.157.192.0/18
IPv6:
2a00:e080::/32
Signature Algorithm: sha256WithRSAEncryption
2c:d8:c6:05:24:78:da:21:e4:04:13:12:25:9d:a5:e7:9b:9d:
65:5e:b7:60:8d:b1:4c:37:b1:72:b1:93:a6:d4:09:3a:bd:0e:
83:ae:6e:db:0e:a6:c9:de:69:82:8b:ef:a4:ca:cc:39:37:d2:
fd:93:fe:12:df:52:58:05:0b:4b:81:e1:f8:a8:23:61:25:b3:
fc:cd:9d:4a:40:e6:29:49:03:c3:eb:85:d8:34:4f:aa:1a:34:
a4:2c:77:7f:9d:7c:5a:4c:dd:6a:4e:54:97:0a:fe:05:84:3f:
5f:79:b8:a5:b8:4e:6f:a6:ad:88:66:34:c8:3d:31:06:a4:51:
48:c8:70:10:df:2a:6d:70:86:71:e8:2f:95:36:f4:e5:c6:f3:
38:67:a2:b7:16:85:89:98:8a:8c:6d:07:d4:8b:87:f3:5d:a9:
70:6b:b5:7b:41:bf:d7:03:30:63:1e:6f:00:4a:18:28:25:4a:
2f:c7:b0:4c:29:f0:e0:ec:d4:13:18:e1:64:eb:b4:09:08:e4:
1d:79:b2:ff:ad:95:0f:2a:34:e2:43:48:21:0b:1d:6d:06:3a:
60:7b:9f:df:f3:2f:52:45:48:73:5d:94:11:00:0c:f0:7d:0d:
36:20:2e:6f:b9:ab:61:7e:0a:2b:3f:88:93:ff:06:72:23:72:
4c:a8:4b:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 19:50:23 2025 by rpki-client