Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/4089e8-bf78-4653-a5dd-08b4eb909f49/1/M5Lq3EiaCa9Zu-AMXreuwx6Lob0.roa
File: M5Lq3EiaCa9Zu-AMXreuwx6Lob0.roa (raw, json)
Hash identifier: hx/2gBaUyJRj2Rq4exFCFWJyKXo6r9xugG9V9goYDIY=
Subject key identifier: 33:92:EA:DC:48:9A:09:AF:59:BB:E0:0C:5E:B7:AE:C3:1E:8B:A1:BD
Certificate issuer: /CN=51a4a49050350a8a8d4321c8850654529b78f8bf
Certificate serial: 01857315D7008403E7F774F7D9C950E319D3
Authority key identifier: 51:A4:A4:90:50:35:0A:8A:8D:43:21:C8:85:06:54:52:9B:78:F8:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UaSkkFA1CoqNQyHIhQZUUpt4-L8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/4089e8-bf78-4653-a5dd-08b4eb909f49/1/M5Lq3EiaCa9Zu-AMXreuwx6Lob0.roa
Signing time: Mon 02 Jan 2023 15:24:49 +0000
ROA not before: Mon 02 Jan 2023 15:24:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 52212
IP address blocks: 195.68.224.0/22 maxlen: 22
2a07:f880::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:15:d7:00:84:03:e7:f7:74:f7:d9:c9:50:e3:19:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51a4a49050350a8a8d4321c8850654529b78f8bf
Validity
Not Before: Jan 2 15:24:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3392eadc489a09af59bbe00c5eb7aec31e8ba1bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:3c:1a:14:85:13:32:18:f4:bc:91:f2:af:88:
b7:8b:76:4a:ed:a9:f6:83:a3:d4:4f:81:f7:2c:98:
1e:b1:bd:66:07:35:3b:ba:5e:1e:75:47:09:10:38:
64:90:20:7c:a0:31:d3:a3:99:d9:3a:01:07:95:0f:
ce:0b:59:49:93:54:b3:41:0e:71:a3:3c:c6:5c:db:
fe:32:79:f3:e6:77:34:9f:b0:89:97:63:e2:fc:5a:
e7:c4:85:f4:4b:8d:9d:37:83:65:84:54:39:11:dd:
b8:bf:be:8d:6e:e9:38:dd:a3:2a:f3:bc:27:da:c8:
40:36:d7:1a:9d:19:c3:00:86:f1:ac:0c:0e:a7:cc:
e4:aa:82:4f:c9:86:50:bd:cb:40:bc:74:c5:e4:42:
56:66:95:d5:5c:24:d1:db:f5:5e:a1:a0:7e:0e:f0:
bf:66:2d:9d:8c:4d:b8:b7:4a:d3:25:ba:ed:d4:f2:
88:b0:31:87:6b:64:b1:24:59:28:40:59:30:70:ab:
7f:3d:ea:b5:80:f5:a9:a5:0d:d9:7e:2c:3e:5b:00:
5c:7a:38:32:81:5b:d2:27:53:69:67:4f:0c:9d:27:
17:77:40:90:55:6c:17:a3:30:43:31:f7:71:15:37:
e3:12:65:b9:a1:30:70:4d:0a:bf:99:b8:f4:0c:c7:
53:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:92:EA:DC:48:9A:09:AF:59:BB:E0:0C:5E:B7:AE:C3:1E:8B:A1:BD
X509v3 Authority Key Identifier:
keyid:51:A4:A4:90:50:35:0A:8A:8D:43:21:C8:85:06:54:52:9B:78:F8:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UaSkkFA1CoqNQyHIhQZUUpt4-L8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/4089e8-bf78-4653-a5dd-08b4eb909f49/1/M5Lq3EiaCa9Zu-AMXreuwx6Lob0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/4089e8-bf78-4653-a5dd-08b4eb909f49/1/UaSkkFA1CoqNQyHIhQZUUpt4-L8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.68.224.0/22
IPv6:
2a07:f880::/29
Signature Algorithm: sha256WithRSAEncryption
94:97:a2:af:71:70:8c:73:7e:dc:8c:a3:15:4b:aa:d1:4d:83:
b9:e5:b1:d1:e4:08:2b:e6:66:6b:58:b0:d3:b2:0e:26:4e:0d:
56:dc:13:c3:84:6a:00:18:93:b9:57:99:5d:2d:3d:77:5e:53:
9d:9e:26:97:17:1c:19:88:87:6b:48:be:55:9f:bd:5a:b5:a7:
58:b9:a1:9f:63:58:66:8d:a7:aa:d8:1f:e5:30:11:bc:60:f6:
c0:fc:88:25:eb:e3:0e:ec:5c:f5:3f:3c:1d:ed:92:af:3c:94:
00:5f:48:a2:b9:fa:27:ca:4e:40:01:39:ab:ca:78:e7:71:95:
6c:08:46:81:18:c4:d8:91:92:e7:c3:37:ac:05:b2:78:08:77:
f4:5c:20:52:0a:10:01:c2:83:78:a5:7a:24:ca:8b:f1:39:a2:
8d:e1:8e:c2:db:14:8a:dd:c1:5f:7c:ef:ed:ba:c5:29:b2:59:
7d:08:f6:32:17:11:36:40:4c:2b:19:7c:96:8a:c6:27:69:f8:
8a:78:96:d5:ac:ba:46:77:e6:77:f4:e1:3b:71:55:13:3c:fb:
0c:d9:2f:a8:b4:a5:8d:14:0d:af:6e:32:0a:06:db:b4:82:16:
5b:6b:f3:78:09:15:7b:6a:5b:c1:bd:e7:36:39:20:96:89:84:
ba:9a:b5:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:35:31 2025 by rpki-client