Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/da43f3-8c2f-485a-ab9e-1cd2e2d14597/1/1lYyyg63i7HB3Q1ec5wBPiMRFM8.roa
File: 1lYyyg63i7HB3Q1ec5wBPiMRFM8.roa (raw, json)
Hash identifier: P8oPJzIlEWbDF0OOm9Os0VUSu2ZW22WAdZNb5s5Ta0Y=
Subject key identifier: D6:56:32:CA:0E:B7:8B:B1:C1:DD:0D:5E:73:9C:01:3E:23:11:14:CF
Certificate issuer: /CN=95eccf8b46745bc256821529e58703b98e6b6567
Certificate serial: 0115881C
Authority key identifier: 95:EC:CF:8B:46:74:5B:C2:56:82:15:29:E5:87:03:B9:8E:6B:65:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lezPi0Z0W8JWghUp5YcDuY5rZWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/da43f3-8c2f-485a-ab9e-1cd2e2d14597/1/1lYyyg63i7HB3Q1ec5wBPiMRFM8.roa
Signing time: Sat 01 Jan 2022 11:58:53 +0000
ROA not before: Sat 01 Jan 2022 11:58:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212667
IP address blocks: 176.56.38.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18188316 (0x115881c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95eccf8b46745bc256821529e58703b98e6b6567
Validity
Not Before: Jan 1 11:58:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d65632ca0eb78bb1c1dd0d5e739c013e231114cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ac:0f:30:97:54:31:58:3d:c4:f0:e9:45:7a:
04:71:8a:93:76:a5:d7:f6:33:f0:fa:01:51:12:24:
29:4d:37:6a:b6:c1:01:ad:29:f3:4e:29:13:54:6f:
e4:cd:91:9e:71:94:84:c8:18:56:37:65:7c:ab:93:
83:f6:f3:87:21:68:2e:d8:5d:94:22:3d:6f:f5:ad:
23:99:43:44:fa:55:c4:78:8a:0a:bd:33:16:ae:73:
73:e6:6e:18:9c:7d:9c:39:30:95:5a:65:7d:99:75:
00:5a:b1:0b:f2:82:85:9f:e2:df:aa:23:fc:56:9b:
d7:13:ee:38:8d:a1:02:72:6f:9d:fe:6a:2e:33:41:
15:ed:49:62:f7:b9:54:03:87:9d:7e:65:56:c1:93:
2a:dc:6c:9d:e2:5a:1b:4a:42:51:72:fe:29:81:0a:
2d:8f:4d:9b:7e:ea:06:ed:9d:57:1c:23:d8:b8:61:
7a:5b:ce:14:de:3d:0a:7e:77:40:52:96:cb:cc:a7:
1a:0b:5a:01:f7:8c:5f:cf:8b:06:22:ec:f5:9d:1d:
8d:53:95:55:e6:56:5c:d5:22:b9:16:a1:ec:6e:88:
33:da:be:92:3c:29:73:f5:7b:55:8c:ef:8a:d7:c6:
de:7d:5a:8d:ad:e1:05:99:25:b7:41:3a:e3:45:0c:
7e:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:56:32:CA:0E:B7:8B:B1:C1:DD:0D:5E:73:9C:01:3E:23:11:14:CF
X509v3 Authority Key Identifier:
keyid:95:EC:CF:8B:46:74:5B:C2:56:82:15:29:E5:87:03:B9:8E:6B:65:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lezPi0Z0W8JWghUp5YcDuY5rZWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/da43f3-8c2f-485a-ab9e-1cd2e2d14597/1/1lYyyg63i7HB3Q1ec5wBPiMRFM8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/da43f3-8c2f-485a-ab9e-1cd2e2d14597/1/lezPi0Z0W8JWghUp5YcDuY5rZWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.56.38.0/24
Signature Algorithm: sha256WithRSAEncryption
10:d6:cd:97:12:ec:a5:9b:78:3b:f4:e2:a7:fa:43:6e:16:5a:
09:bb:4d:72:44:3f:50:ab:36:0b:7a:9c:ca:6e:ee:da:18:91:
d7:99:1d:25:53:bf:c8:8c:98:56:66:31:88:85:7d:ac:84:70:
b5:77:0e:1a:0c:5b:25:20:3b:aa:14:cf:73:22:d8:d4:eb:60:
5a:67:02:0b:46:ab:8d:ab:95:81:02:2e:7e:25:ef:96:05:22:
ad:0a:ee:c0:b3:6a:5b:bd:2b:8d:38:91:a0:48:6a:63:9b:12:
be:42:cf:b7:1a:64:ac:d6:6c:9f:69:00:0a:75:d7:c1:39:5b:
1d:1f:1c:ff:50:d1:a1:74:b1:e2:da:94:ee:94:7d:70:10:24:
89:f4:6d:f6:25:93:f2:23:ea:5c:3b:d0:8b:9a:81:31:ab:02:
10:f3:74:14:25:00:40:6c:9b:aa:01:cf:8f:a9:81:cf:f4:37:
b4:5a:e6:70:5b:d7:a5:9c:27:9b:14:8d:e6:bb:bf:57:e7:1a:
1c:da:ca:99:38:11:14:35:a7:c3:ca:d7:25:c8:28:81:79:ff:
9d:14:5d:6c:84:08:cf:97:f7:79:c6:06:ab:65:ef:65:65:38:
5e:67:5e:9c:b0:a5:fc:2b:0f:e1:be:85:39:af:fc:61:d1:c4:
88:0e:ab:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 00:32:25 2025 by rpki-client