Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/0951d7-3f67-4bd4-904d-c94feaa6cb79/1/15UOx_m3aNm1h_10ezGLabJ5iVg.roa
File: 15UOx_m3aNm1h_10ezGLabJ5iVg.roa (raw, json)
Hash identifier: bbpTalDl1irqzpzCpLirdvrBLYJhMQ/76yh7co7tLN4=
Subject key identifier: D7:95:0E:C7:F9:B7:68:D9:B5:87:FD:74:7B:31:8B:69:B2:79:89:58
Certificate issuer: /CN=a5295237ab44bce35ddfc2627fd49a8c44612441
Certificate serial: 27EE6A38
Authority key identifier: A5:29:52:37:AB:44:BC:E3:5D:DF:C2:62:7F:D4:9A:8C:44:61:24:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pSlSN6tEvONd38Jif9SajERhJEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/0951d7-3f67-4bd4-904d-c94feaa6cb79/1/15UOx_m3aNm1h_10ezGLabJ5iVg.roa
Signing time: Sat 01 Jan 2022 13:00:26 +0000
ROA not before: Sat 01 Jan 2022 13:00:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43763
IP address blocks: 213.176.192.0/19 maxlen: 19
79.132.32.0/19 maxlen: 19
95.171.128.0/19 maxlen: 19
2a00:ba80::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 669936184 (0x27ee6a38)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5295237ab44bce35ddfc2627fd49a8c44612441
Validity
Not Before: Jan 1 13:00:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d7950ec7f9b768d9b587fd747b318b69b2798958
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:ad:bd:9c:b0:7b:45:84:29:a8:a5:d1:37:35:
dd:b8:67:6a:cb:b1:33:03:60:a8:a5:af:ad:85:9a:
52:29:ee:4e:dc:6f:89:6a:97:5f:91:44:65:e5:b0:
2d:42:13:a0:1e:de:d9:e0:92:d5:6d:e8:59:43:c3:
f1:8d:e4:1d:5a:88:26:92:f1:f0:aa:d7:72:39:6e:
89:51:46:55:05:5d:0d:41:34:45:28:50:8c:a9:97:
a6:fd:5f:3d:9b:6a:62:d1:25:20:35:4f:0d:98:dc:
93:6c:8b:7f:92:5d:20:d9:97:91:24:e2:1c:6d:e3:
b2:1f:78:02:e1:55:a9:8e:23:13:a0:b6:3d:27:b6:
8a:bd:81:cc:3f:f8:2a:b8:33:1e:b1:b1:0b:48:e0:
74:de:38:74:36:ee:b2:3c:9f:70:66:00:d4:e5:f7:
f3:58:92:dc:1d:61:d1:72:80:9a:9f:30:4b:a4:f4:
45:a4:87:75:be:3b:f5:fe:b5:de:19:a5:02:88:c4:
8b:26:b2:20:79:bf:b7:57:57:ad:e7:a1:09:9f:80:
dc:f1:df:e4:a3:ae:8e:42:56:d3:52:a9:9b:d3:b2:
68:70:50:98:ea:d6:dc:01:4e:f6:4d:69:ae:29:df:
c2:82:a9:1e:38:92:51:e7:43:e4:a4:25:cf:19:ec:
10:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:95:0E:C7:F9:B7:68:D9:B5:87:FD:74:7B:31:8B:69:B2:79:89:58
X509v3 Authority Key Identifier:
keyid:A5:29:52:37:AB:44:BC:E3:5D:DF:C2:62:7F:D4:9A:8C:44:61:24:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pSlSN6tEvONd38Jif9SajERhJEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0951d7-3f67-4bd4-904d-c94feaa6cb79/1/15UOx_m3aNm1h_10ezGLabJ5iVg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0951d7-3f67-4bd4-904d-c94feaa6cb79/1/pSlSN6tEvONd38Jif9SajERhJEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.132.32.0/19
95.171.128.0/19
213.176.192.0/19
IPv6:
2a00:ba80::/32
Signature Algorithm: sha256WithRSAEncryption
91:61:5b:8f:d3:b2:f8:99:b1:34:7e:2b:d5:a7:6b:ee:f0:1a:
3a:46:27:03:d6:01:6e:85:e7:a7:30:02:6b:8d:37:08:a7:9d:
b7:a5:e5:f4:31:ab:45:ab:13:d4:2f:aa:e2:27:c9:e8:22:64:
32:21:0a:64:f4:21:40:39:24:c0:4c:d0:91:36:47:80:8c:33:
be:a7:4a:b2:d3:08:ee:5f:15:ba:e4:d3:96:a4:77:f9:c1:97:
f4:4e:93:63:68:7c:71:7b:d0:0c:24:59:12:24:bc:81:1b:40:
c1:d7:65:13:f8:50:4a:4b:bc:1a:65:e6:26:42:b6:53:9f:92:
23:3f:26:a8:9a:d5:af:26:30:e1:0e:93:61:a1:c4:25:cb:8e:
19:54:46:2b:23:3f:6c:cd:0d:07:f2:2e:e2:56:14:c9:9e:c5:
c1:2a:96:bb:d3:44:e3:64:e4:c8:32:83:db:73:34:25:a4:f9:
d9:49:36:53:99:20:f4:92:1c:32:19:27:dc:16:b5:62:7a:d8:
00:09:f6:42:46:da:17:8e:9e:bc:7e:3c:e6:f8:dc:40:54:98:
b3:60:35:3d:db:bc:5d:3c:4c:d5:22:09:f8:0a:a0:11:02:c3:
0b:51:f6:86:1a:a3:75:9d:cd:d2:df:4e:3b:8b:31:ca:e4:a9:
75:fa:ea:c7
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:31:31 2025 by rpki-client