Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f58645-00ae-43e2-a4df-015cb0b82d4c/1/1-UZ7GfndjdjXbJoiBfbLEVUdiCw.roa
File: 1-UZ7GfndjdjXbJoiBfbLEVUdiCw.roa (raw, json)
Hash identifier: Z2TC0STzHsLFmrpUlGoAipGYcmo708b9s+3fD4Q5ovU=
Subject key identifier: F9:46:7B:19:F9:DD:8D:D8:D7:6C:9A:22:05:F6:CB:11:55:1D:88:2C
Certificate issuer: /CN=9766354188ee68dd038f8b90a6574cce8e95add3
Certificate serial: 951ECD
Authority key identifier: 97:66:35:41:88:EE:68:DD:03:8F:8B:90:A6:57:4C:CE:8E:95:AD:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l2Y1QYjuaN0Dj4uQpldMzo6VrdM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f58645-00ae-43e2-a4df-015cb0b82d4c/1/1-UZ7GfndjdjXbJoiBfbLEVUdiCw.roa
Signing time: Sat 01 Jan 2022 00:53:02 +0000
ROA not before: Sat 01 Jan 2022 00:53:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44092
IP address blocks: 195.96.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9772749 (0x951ecd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9766354188ee68dd038f8b90a6574cce8e95add3
Validity
Not Before: Jan 1 00:53:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f9467b19f9dd8dd8d76c9a2205f6cb11551d882c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:63:23:ec:0e:13:0d:ac:58:8d:13:aa:e7:c4:
33:82:56:a0:ef:36:df:c9:e0:1b:6f:02:1d:a0:fd:
2f:2c:21:ed:1c:fe:b4:29:c7:b0:6a:c7:69:28:10:
82:af:bb:30:18:4a:fe:c1:f5:62:6b:ae:34:c5:0c:
0e:6e:bc:49:aa:4f:80:88:ad:15:7e:0c:6a:24:84:
94:c1:4d:af:50:4b:2a:fa:bb:fa:30:c5:d9:37:38:
da:29:9d:20:00:7d:45:7b:5b:ad:4f:66:4a:8d:17:
bc:62:90:94:72:87:45:15:fb:13:34:cf:6e:fc:00:
e8:55:2e:83:e5:9e:0f:e6:d4:18:56:b2:79:e5:02:
e6:d5:a5:31:55:4c:f0:41:7d:0d:ef:5d:2e:f9:e9:
16:75:16:3f:54:3e:b5:65:95:9f:8c:e6:82:5d:cc:
be:74:84:58:7b:a5:d9:77:8d:42:08:96:04:b2:84:
8c:a9:19:cd:2b:cb:e7:88:64:63:8e:21:29:71:ce:
e3:3e:f2:41:24:98:db:60:14:4a:94:02:88:de:4a:
d6:1f:56:53:d4:33:b8:a6:7a:5e:77:89:03:47:4f:
5c:a2:0e:90:47:2c:de:65:bf:84:36:15:56:17:08:
5c:2a:4f:07:07:cd:9a:fa:0a:7e:ea:2d:e3:a2:62:
44:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:46:7B:19:F9:DD:8D:D8:D7:6C:9A:22:05:F6:CB:11:55:1D:88:2C
X509v3 Authority Key Identifier:
keyid:97:66:35:41:88:EE:68:DD:03:8F:8B:90:A6:57:4C:CE:8E:95:AD:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l2Y1QYjuaN0Dj4uQpldMzo6VrdM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f58645-00ae-43e2-a4df-015cb0b82d4c/1/1-UZ7GfndjdjXbJoiBfbLEVUdiCw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f58645-00ae-43e2-a4df-015cb0b82d4c/1/l2Y1QYjuaN0Dj4uQpldMzo6VrdM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.96.129.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:13:53:c2:c5:dd:fb:e7:4b:99:97:5e:71:b3:e9:64:52:ba:
96:fd:af:a2:fc:f6:af:bb:32:78:6b:75:1d:9c:d7:d2:31:2b:
ef:1d:89:a1:18:f4:fd:87:86:19:8b:63:38:7b:53:e6:3d:f7:
2d:d6:29:ee:a8:dd:ae:22:9b:97:24:ad:60:e3:32:b5:cb:8a:
ce:fe:f8:fe:b5:f5:8a:c6:4b:34:97:88:4e:60:74:f1:03:25:
2f:da:d1:19:09:1a:19:2b:d4:0a:cc:cb:37:b2:6d:ee:7b:79:
af:6d:6a:20:4f:22:f4:5e:04:8b:8f:f4:54:ea:de:b9:9f:f3:
62:52:6f:97:2e:1d:8d:cf:e4:b8:be:b7:3c:15:0d:97:d2:c6:
da:73:e9:64:b1:75:4c:79:f7:3a:5b:b0:c6:ab:6c:1a:79:de:
62:43:ec:47:46:35:a9:8c:4e:88:49:dd:ed:0a:c0:f7:b9:19:
b4:13:4f:79:36:01:fb:15:6e:3e:0a:20:59:e4:e4:fb:f8:93:
4f:02:2a:d5:9f:8b:8e:2d:99:be:b9:f9:4b:7e:c6:de:9c:b1:
ac:94:91:30:3f:5e:3b:bf:1d:8f:3f:13:83:9e:7c:70:41:aa:
bc:56:a1:26:d1:34:ec:67:da:76:4f:70:00:3f:8d:3b:41:2e:
54:5d:e2:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:23:46 2025 by rpki-client