Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/8c820f-1a78-423b-8196-5bdf5932f4f0/1/kuB1tBHdPSVwMg1UwZYi6mslfxw.roa
File: kuB1tBHdPSVwMg1UwZYi6mslfxw.roa (raw, json)
Hash identifier: DorHlXEZM9IUcSy3TutX5e4UsdszhdXR46ucOj3qHFE=
Subject key identifier: 92:E0:75:B4:11:DD:3D:25:70:32:0D:54:C1:96:22:EA:6B:25:7F:1C
Certificate issuer: /CN=ee8470f640487378be9d77a6ede477435a06ca99
Certificate serial: 296955
Authority key identifier: EE:84:70:F6:40:48:73:78:BE:9D:77:A6:ED:E4:77:43:5A:06:CA:99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7oRw9kBIc3i-nXem7eR3Q1oGypk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/8c820f-1a78-423b-8196-5bdf5932f4f0/1/kuB1tBHdPSVwMg1UwZYi6mslfxw.roa
Signing time: Sat 01 Jan 2022 00:55:50 +0000
ROA not before: Sat 01 Jan 2022 00:55:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 191177
IP address blocks: 195.191.96.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2713941 (0x296955)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee8470f640487378be9d77a6ede477435a06ca99
Validity
Not Before: Jan 1 00:55:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=92e075b411dd3d2570320d54c19622ea6b257f1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b6:d6:1d:1e:f2:4f:7a:d4:db:15:74:dc:5e:
10:e4:9a:20:37:85:ac:14:ef:5a:b7:73:a2:df:19:
b5:fe:24:9e:9b:39:f2:f9:90:72:9f:33:f7:f5:c7:
91:55:4c:6c:a6:b9:a7:9b:b7:4a:bd:91:a9:96:93:
1c:c7:63:dc:80:7c:f0:65:16:d3:59:b7:ba:4e:e6:
9c:12:90:dc:f3:f7:37:06:90:b5:a0:e7:d8:78:1e:
93:5a:27:25:6d:88:c0:12:f4:ec:13:58:ca:d6:5e:
db:e1:f5:7d:29:bb:97:e9:55:b6:99:eb:e0:d4:bb:
67:80:86:0d:8e:a9:8f:b9:bf:f4:40:bc:08:a4:62:
41:b0:65:4c:ce:f8:64:f3:be:ab:f6:75:34:b2:b7:
64:ab:57:01:76:bf:69:b2:79:fa:94:bb:2b:0b:11:
66:d3:ce:2e:64:cd:bb:49:3c:03:a0:7d:c1:dd:9a:
54:5c:72:89:66:98:4f:a9:c8:f9:c6:04:7a:e2:d4:
62:ea:41:3d:2c:c1:05:3d:ba:c7:63:40:da:1b:b4:
78:fc:f6:c0:94:1f:49:43:e1:71:a7:47:1b:99:ff:
00:dc:ea:5b:55:c0:fe:6e:f1:70:b9:44:84:f7:f1:
5f:72:8f:50:27:e0:c8:5a:d8:5a:36:88:01:57:dc:
c4:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:E0:75:B4:11:DD:3D:25:70:32:0D:54:C1:96:22:EA:6B:25:7F:1C
X509v3 Authority Key Identifier:
keyid:EE:84:70:F6:40:48:73:78:BE:9D:77:A6:ED:E4:77:43:5A:06:CA:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7oRw9kBIc3i-nXem7eR3Q1oGypk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8c820f-1a78-423b-8196-5bdf5932f4f0/1/kuB1tBHdPSVwMg1UwZYi6mslfxw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8c820f-1a78-423b-8196-5bdf5932f4f0/1/7oRw9kBIc3i-nXem7eR3Q1oGypk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.191.96.0/24
Signature Algorithm: sha256WithRSAEncryption
50:68:7b:87:1d:7c:1c:e4:57:be:81:79:dd:86:90:d4:59:80:
c6:3e:28:80:d0:47:a0:23:a0:d7:d8:b8:fc:b5:e2:8f:f7:9b:
c5:fc:6b:ef:f1:65:d1:fb:8d:8d:62:24:a4:41:83:1d:11:10:
4b:d8:57:6c:6a:9a:86:c6:6b:be:45:bc:bd:e1:75:6e:1c:e4:
6f:3b:fe:d2:07:db:72:c6:dc:1a:4b:8e:2b:ea:4d:23:96:04:
b0:2f:db:8b:1e:66:3b:07:65:ca:e8:f3:42:2b:db:26:15:3c:
e7:9e:1e:3f:59:bf:8a:dd:e5:40:89:90:f0:bf:9b:a0:84:f0:
a2:88:f1:a9:c9:24:10:f9:8b:fb:d9:5f:49:bd:aa:59:f0:71:
83:25:e9:80:3a:3b:23:ce:82:23:9f:05:b8:70:d1:1a:f9:8c:
d0:b0:a6:e5:d4:13:32:34:fe:75:fb:ee:6f:c9:07:50:0e:31:
3d:79:26:50:1c:87:b7:52:94:5f:c8:e0:96:24:39:1e:75:e6:
c6:1f:62:df:fe:60:ac:27:fe:74:92:e4:75:6f:ae:72:01:27:
37:48:63:1f:22:09:07:67:f5:25:e6:2c:bd:c9:7b:cb:5a:6e:
c5:0d:74:d8:81:c8:85:94:79:03:fa:c2:ac:24:87:be:be:37:
ba:c3:26:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 00:11:15 2025 by rpki-client