Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/0951d7-3f67-4bd4-904d-c94feaa6cb79/1/1v5LfE7QSMsTpOzLKqzCURfmX5w.roa
File: 1v5LfE7QSMsTpOzLKqzCURfmX5w.roa (raw, json)
Hash identifier: w2nuaQNhRvGu0lo+ltxOVTqStT+rkM2BsuBlYT5QIho=
Subject key identifier: D6:FE:4B:7C:4E:D0:48:CB:13:A4:EC:CB:2A:AC:C2:51:17:E6:5F:9C
Certificate issuer: /CN=a5295237ab44bce35ddfc2627fd49a8c44612441
Certificate serial: 27F1293A
Authority key identifier: A5:29:52:37:AB:44:BC:E3:5D:DF:C2:62:7F:D4:9A:8C:44:61:24:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pSlSN6tEvONd38Jif9SajERhJEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/0951d7-3f67-4bd4-904d-c94feaa6cb79/1/1v5LfE7QSMsTpOzLKqzCURfmX5w.roa
Signing time: Sat 01 Jan 2022 13:00:27 +0000
ROA not before: Sat 01 Jan 2022 13:00:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48179
IP address blocks: 62.85.128.0/19 maxlen: 19
2a00:ec80::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 670116154 (0x27f1293a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5295237ab44bce35ddfc2627fd49a8c44612441
Validity
Not Before: Jan 1 13:00:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d6fe4b7c4ed048cb13a4eccb2aacc25117e65f9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d3:db:26:41:e7:1f:bc:c2:37:58:b8:09:ae:
96:01:ca:95:2c:e8:25:a0:d7:24:cc:85:ca:24:e0:
d4:ef:19:08:f0:33:25:09:c9:8a:c5:5c:0e:44:f2:
9e:70:de:94:45:68:35:ab:49:45:5a:c4:73:fa:7e:
5b:5a:f6:d7:8d:c1:65:9f:d3:81:96:e6:7e:a2:e1:
b4:2d:1f:2c:07:2a:8b:f5:d9:2d:cc:68:85:93:92:
8a:23:43:7e:21:3f:63:52:5a:7a:80:e8:1c:e1:21:
c8:92:24:71:c8:90:6f:41:ec:b4:1f:b4:1f:b2:cd:
da:da:11:7e:85:5d:ac:9d:e5:08:4a:53:a2:84:21:
53:0d:f0:ce:39:8b:7d:15:c4:0e:ff:a2:20:29:ba:
57:75:bd:ce:d0:ee:2f:0e:22:71:69:3b:55:62:0e:
61:d2:43:b9:49:21:03:e3:1d:46:13:98:4e:fe:2c:
99:e5:48:fc:ce:f7:7f:43:b6:7d:5a:c5:2d:46:1e:
f7:28:c7:a4:01:01:25:14:a4:c8:0e:54:3e:39:a9:
4f:b6:51:51:a6:4e:5c:f0:bc:8f:50:8f:4d:44:0e:
a8:d2:89:ec:eb:37:91:ac:4f:3e:42:11:74:04:6f:
8c:ee:2c:d3:cd:2e:c3:4b:e7:c4:41:f8:af:2d:e3:
d4:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:FE:4B:7C:4E:D0:48:CB:13:A4:EC:CB:2A:AC:C2:51:17:E6:5F:9C
X509v3 Authority Key Identifier:
keyid:A5:29:52:37:AB:44:BC:E3:5D:DF:C2:62:7F:D4:9A:8C:44:61:24:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pSlSN6tEvONd38Jif9SajERhJEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0951d7-3f67-4bd4-904d-c94feaa6cb79/1/1v5LfE7QSMsTpOzLKqzCURfmX5w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0951d7-3f67-4bd4-904d-c94feaa6cb79/1/pSlSN6tEvONd38Jif9SajERhJEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.85.128.0/19
IPv6:
2a00:ec80::/32
Signature Algorithm: sha256WithRSAEncryption
b9:f9:dd:d4:22:3f:89:20:25:17:9c:97:62:33:d4:a2:bf:0a:
e7:dc:78:d6:17:fd:1d:c8:94:fd:49:3e:8c:42:18:43:d6:61:
2e:09:b8:93:34:cf:38:73:21:53:6a:85:14:35:2d:33:d4:5f:
4c:0d:26:0c:5a:87:0a:62:5b:cc:49:c4:5a:38:35:07:c6:c1:
e8:52:83:27:5f:ef:af:f8:88:1f:f9:32:10:ef:54:48:2e:aa:
6f:e5:d3:65:18:f4:36:af:fb:45:e3:35:e5:ff:19:62:42:1a:
6c:98:bd:1a:11:55:7d:85:66:e6:f8:27:d6:51:c6:0a:2b:3b:
fe:4a:ba:67:a7:56:f7:98:77:0e:08:3c:ba:00:0e:eb:13:ce:
f9:f2:53:78:eb:db:4f:27:42:e6:bf:b2:e4:a9:7f:d5:a5:d7:
ec:9f:61:02:74:37:96:af:93:b2:b4:c4:7f:84:c1:b1:89:ae:
2f:80:82:9e:29:a2:53:a5:6f:1b:de:04:04:e0:c9:93:55:81:
ab:76:23:74:25:e3:16:f7:74:1b:b9:71:51:ad:9c:9e:d8:79:
2b:71:fa:b3:2b:00:ea:08:6f:65:e7:1b:73:ee:c7:10:ea:82:
3c:dd:35:7a:d2:d4:b3:cc:15:97:3c:4c:5c:2e:4d:b4:c1:16:
1c:b0:7e:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:40:15 2025 by rpki-client