Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/4747b6-e3d8-461a-9613-e4a2e5251296/1/odE1XJ4jInspp7THAFNu_LDHjWM.roa
File: odE1XJ4jInspp7THAFNu_LDHjWM.roa (raw, json)
Hash identifier: JUQm5C1pibnb+OUxidSbyRohySnf8gymHgb+/esmI9w=
Subject key identifier: A1:D1:35:5C:9E:23:22:7B:29:A7:B4:C7:00:53:6E:FC:B0:C7:8D:63
Certificate issuer: /CN=865f2627a934b5204c7f7aeba588c8a8e3ed6703
Certificate serial: 14E60B7C
Authority key identifier: 86:5F:26:27:A9:34:B5:20:4C:7F:7A:EB:A5:88:C8:A8:E3:ED:67:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hl8mJ6k0tSBMf3rrpYjIqOPtZwM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/4747b6-e3d8-461a-9613-e4a2e5251296/1/odE1XJ4jInspp7THAFNu_LDHjWM.roa
Signing time: Sat 01 Jan 2022 13:56:08 +0000
ROA not before: Sat 01 Jan 2022 13:56:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8462
IP address blocks: 195.128.232.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 350620540 (0x14e60b7c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=865f2627a934b5204c7f7aeba588c8a8e3ed6703
Validity
Not Before: Jan 1 13:56:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a1d1355c9e23227b29a7b4c700536efcb0c78d63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:26:c2:b8:cc:16:22:f9:d9:a7:c5:2c:12:57:
39:c3:2c:e8:40:19:7b:d3:f0:7f:ee:53:fd:e0:65:
2e:c5:bc:fc:b6:62:30:72:7d:86:a3:9b:85:79:3c:
fc:b4:52:ab:87:96:58:02:f3:1e:33:8a:8c:97:dc:
b0:07:92:6e:98:a6:a0:89:62:2d:b7:39:8f:65:76:
9c:a5:4d:f8:5b:c7:bd:bc:14:21:00:14:f9:39:46:
cd:83:75:9d:d4:04:0a:aa:70:3a:c2:1b:39:d5:6f:
da:55:61:3f:67:1f:e1:2c:32:87:9a:1b:53:40:81:
7d:34:cb:8e:64:e4:d2:38:68:b1:1c:56:e3:c3:c9:
cc:c4:00:d2:8e:db:94:eb:c7:94:31:ff:2e:17:ea:
5c:dc:37:46:7f:89:fc:5b:76:ce:4a:61:70:76:ba:
6f:28:12:59:f8:da:31:1b:f0:55:fb:7f:b3:7d:13:
41:d9:c5:8f:26:c2:76:06:7e:15:21:63:25:9c:cb:
dc:ad:b6:d8:c1:18:3a:ba:07:dc:eb:74:a4:75:42:
40:88:57:d0:4f:c3:44:c9:1c:9b:c1:37:e4:21:df:
d4:d9:d0:f9:8f:b0:6b:ae:15:62:cc:e9:21:51:f3:
80:86:25:be:a9:06:50:ed:41:80:90:52:10:27:0b:
45:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:D1:35:5C:9E:23:22:7B:29:A7:B4:C7:00:53:6E:FC:B0:C7:8D:63
X509v3 Authority Key Identifier:
keyid:86:5F:26:27:A9:34:B5:20:4C:7F:7A:EB:A5:88:C8:A8:E3:ED:67:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hl8mJ6k0tSBMf3rrpYjIqOPtZwM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/4747b6-e3d8-461a-9613-e4a2e5251296/1/odE1XJ4jInspp7THAFNu_LDHjWM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/4747b6-e3d8-461a-9613-e4a2e5251296/1/hl8mJ6k0tSBMf3rrpYjIqOPtZwM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.128.232.0/23
Signature Algorithm: sha256WithRSAEncryption
13:26:1c:18:a1:28:85:37:ec:19:01:bd:51:1d:5f:64:fc:fd:
c1:3a:67:b6:d7:64:0b:6b:0f:84:a8:56:9a:26:af:be:df:21:
c5:32:87:54:3c:00:70:50:98:a5:79:9e:bd:d3:37:1c:72:81:
1b:55:1a:b7:ad:4a:7c:60:40:87:03:04:e8:e7:dd:69:a6:1d:
99:40:6b:63:18:97:6f:0f:74:64:df:06:52:80:db:ab:2f:f5:
3d:9d:38:60:ef:ce:53:fc:64:46:c8:f3:0d:79:3c:a2:f8:77:
a7:79:af:eb:06:ff:9b:c9:44:86:7d:5b:ab:ff:a4:ef:7e:5d:
62:eb:b4:e6:b2:45:e4:f6:80:63:92:2b:45:e6:23:80:8f:fa:
cb:02:58:3a:23:75:96:8c:2c:2b:91:6d:32:bd:5a:6b:78:71:
bf:57:5b:73:e0:b2:88:fb:e3:70:12:07:b7:b5:bf:81:f6:a4:
6b:37:bc:20:d4:80:c5:8d:3a:a7:48:20:c0:d4:f6:30:1d:33:
5a:98:e5:87:24:7e:40:59:78:a9:73:1a:c0:d8:87:d3:8f:5e:
38:49:67:aa:96:c2:01:af:38:e0:f6:3b:f3:a6:90:03:77:9e:
91:95:dc:a9:9f:2e:0d:00:c4:06:1e:52:51:64:19:34:0c:0d:
90:e7:e5:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 17:15:17 2025 by rpki-client