Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/4089e8-bf78-4653-a5dd-08b4eb909f49/1/IBJEbkxgXBzwgtIimSnlMr3XWfs.roa
File: IBJEbkxgXBzwgtIimSnlMr3XWfs.roa (raw, json)
Hash identifier: Qz2hKChc3BWtZyIdMcd32MuZpEyJQXA4dY9Ni84n7cs=
Subject key identifier: 20:12:44:6E:4C:60:5C:1C:F0:82:D2:22:99:29:E5:32:BD:D7:59:FB
Certificate issuer: /CN=51a4a49050350a8a8d4321c8850654529b78f8bf
Certificate serial: 03468105
Authority key identifier: 51:A4:A4:90:50:35:0A:8A:8D:43:21:C8:85:06:54:52:9B:78:F8:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UaSkkFA1CoqNQyHIhQZUUpt4-L8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/4089e8-bf78-4653-a5dd-08b4eb909f49/1/IBJEbkxgXBzwgtIimSnlMr3XWfs.roa
Signing time: Sat 01 Jan 2022 05:02:35 +0000
ROA not before: Sat 01 Jan 2022 05:02:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 52212
IP address blocks: 195.68.224.0/22 maxlen: 22
2a07:f880::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54952197 (0x3468105)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51a4a49050350a8a8d4321c8850654529b78f8bf
Validity
Not Before: Jan 1 05:02:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2012446e4c605c1cf082d2229929e532bdd759fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:99:00:90:6e:36:dc:01:3b:a3:e4:17:5d:1b:
3d:43:06:0a:13:0c:1a:dd:1a:da:93:b9:9f:3f:88:
ed:ff:7e:e3:2c:8b:8d:51:ed:7b:f8:bf:ac:6c:f7:
21:e7:12:3e:1e:b7:02:8e:35:4e:10:b9:3c:2f:9a:
95:38:0a:c1:34:ff:8a:44:b9:ab:d5:14:ab:d1:c8:
c0:c6:64:60:47:11:12:52:04:a3:17:fb:c7:f3:ba:
99:04:b2:3f:a7:19:7f:a5:bb:1b:04:70:a7:0c:53:
bb:d8:7e:f1:60:0a:a7:0a:1f:91:eb:2d:46:f5:4d:
8b:06:60:6e:d6:10:e3:da:64:cd:f6:88:3e:87:9c:
dd:45:1e:db:fe:22:db:e7:87:af:01:70:b5:93:14:
bc:ef:79:c9:32:ed:da:cc:4f:ae:d3:6b:b0:60:06:
78:8c:c8:c5:9f:c6:3a:46:17:35:a8:2d:75:ce:bb:
49:7b:64:cd:44:04:a0:a7:82:42:85:7a:39:7b:23:
db:9f:9b:4e:ec:cb:e8:9c:39:93:7b:21:e2:c3:9c:
25:6c:2f:3d:85:12:4f:1b:d1:00:c0:d8:cf:b3:c1:
c0:4f:eb:d5:7b:70:1c:51:2c:a1:83:5d:6c:aa:07:
48:54:16:15:4f:00:ac:14:48:09:53:24:6b:89:4d:
0f:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:12:44:6E:4C:60:5C:1C:F0:82:D2:22:99:29:E5:32:BD:D7:59:FB
X509v3 Authority Key Identifier:
keyid:51:A4:A4:90:50:35:0A:8A:8D:43:21:C8:85:06:54:52:9B:78:F8:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UaSkkFA1CoqNQyHIhQZUUpt4-L8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/4089e8-bf78-4653-a5dd-08b4eb909f49/1/IBJEbkxgXBzwgtIimSnlMr3XWfs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/4089e8-bf78-4653-a5dd-08b4eb909f49/1/UaSkkFA1CoqNQyHIhQZUUpt4-L8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.68.224.0/22
IPv6:
2a07:f880::/29
Signature Algorithm: sha256WithRSAEncryption
1d:12:82:c4:18:71:11:55:46:99:5b:9d:a8:96:9d:a3:ef:ef:
26:74:cd:81:fd:64:7a:43:7f:b6:1d:ca:74:cc:2c:1f:11:10:
a0:79:81:88:82:78:cf:69:17:b2:a5:e1:4e:b1:83:7d:91:6a:
b2:5a:6c:5c:59:93:41:c6:e1:68:8a:dd:ed:13:7c:4f:05:89:
1c:c0:60:ba:7c:b1:8a:11:89:e5:cc:35:58:31:73:11:ac:37:
a3:61:6a:43:6a:a5:98:23:8f:1f:db:9d:fb:c8:5a:b9:c4:f6:
3a:87:4d:f4:09:c5:1c:25:4b:fd:e1:f6:37:e3:00:d2:ee:0c:
d3:c5:51:d3:79:12:db:46:bc:f9:15:b3:01:e4:5e:b6:bf:73:
0f:9e:8a:49:88:ba:bc:e8:e2:76:1d:e2:76:12:f7:a5:9a:bf:
3c:c7:24:64:14:bf:64:ee:4c:05:44:9e:10:ad:e6:df:ca:71:
48:72:b5:b2:31:f3:d2:9b:cd:39:0c:7e:7e:33:b1:7e:13:0e:
08:aa:ab:ca:69:ec:05:8f:ab:22:f5:b0:51:d2:e3:8c:4e:e9:
0b:ef:dd:37:8f:d8:e0:c0:9d:e2:75:3e:1c:ff:5a:eb:11:8a:
30:60:1c:43:2d:3d:54:8b:ff:c0:56:03:30:f0:26:a2:4b:28:
a0:69:2d:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:33:23 2025 by rpki-client