Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/bd6a19-2595-4df9-84b5-ebadbc34a124/1/0oB-y14LZc_BXhPZWL7P16IQYCQ.roa
File: 0oB-y14LZc_BXhPZWL7P16IQYCQ.roa (raw, json)
Hash identifier: Rf3IyHcmoJSr7txPzjFTSsKYVT1SWZCia3XGAhkPAyM=
Subject key identifier: D2:80:7E:CB:5E:0B:65:CF:C1:5E:13:D9:58:BE:CF:D7:A2:10:60:24
Certificate issuer: /CN=40665ce80820a47ce3b83f480289554a58a45df4
Certificate serial: 018452A22991F38AD4CFF92E72B84193E559
Authority key identifier: 40:66:5C:E8:08:20:A4:7C:E3:B8:3F:48:02:89:55:4A:58:A4:5D:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QGZc6AggpHzjuD9IAolVSlikXfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/bd6a19-2595-4df9-84b5-ebadbc34a124/1/0oB-y14LZc_BXhPZWL7P16IQYCQ.roa
Signing time: Mon 07 Nov 2022 15:07:49 +0000
ROA not before: Mon 07 Nov 2022 15:07:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 195.216.248.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:52:a2:29:91:f3:8a:d4:cf:f9:2e:72:b8:41:93:e5:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40665ce80820a47ce3b83f480289554a58a45df4
Validity
Not Before: Nov 7 15:07:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d2807ecb5e0b65cfc15e13d958becfd7a2106024
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:42:21:da:be:7a:a7:de:4d:9b:47:65:f5:40:
f3:df:85:2f:8e:07:ab:ce:61:13:27:18:2b:9a:8e:
0b:3d:93:80:d5:a8:3f:17:28:ac:9a:27:e6:af:10:
fa:e0:7c:c2:46:1c:ab:41:d5:91:d7:9f:e5:00:13:
fb:f9:60:39:f7:d2:3f:44:c8:ef:84:bf:61:14:cc:
b3:e3:6a:ca:8b:53:15:b8:2d:34:8b:49:52:76:ac:
d3:e4:44:01:40:79:ea:ad:f9:ec:ee:07:f7:bd:93:
9f:9f:62:a0:31:8c:10:b4:b0:14:dd:cf:4e:e1:4d:
3a:16:86:4d:4c:7b:f0:e9:41:3e:4b:57:ad:ff:33:
2b:d8:aa:37:33:d5:0b:f5:5e:af:11:fd:15:3b:db:
57:11:ac:a6:3e:da:d0:90:e5:a8:c2:8a:ce:1a:29:
e1:ae:b5:78:af:e2:93:89:58:2e:03:f9:9c:16:b6:
d5:1f:6d:eb:53:64:7b:7e:ca:38:db:84:13:79:89:
39:76:f4:09:09:19:40:4d:7d:e4:85:5a:54:d7:e0:
01:13:ec:79:f3:66:d1:28:9d:fc:96:c3:a3:6a:99:
e7:8f:82:f5:61:7b:6a:58:69:17:1c:9e:cb:54:a5:
f9:f9:84:86:1f:f5:1e:9f:92:53:ae:85:14:b1:7e:
89:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:80:7E:CB:5E:0B:65:CF:C1:5E:13:D9:58:BE:CF:D7:A2:10:60:24
X509v3 Authority Key Identifier:
keyid:40:66:5C:E8:08:20:A4:7C:E3:B8:3F:48:02:89:55:4A:58:A4:5D:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QGZc6AggpHzjuD9IAolVSlikXfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/bd6a19-2595-4df9-84b5-ebadbc34a124/1/0oB-y14LZc_BXhPZWL7P16IQYCQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/bd6a19-2595-4df9-84b5-ebadbc34a124/1/QGZc6AggpHzjuD9IAolVSlikXfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.216.248.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:09:66:fe:1f:a0:46:8f:82:c6:19:76:66:d1:1a:c9:6b:64:
44:a2:dc:87:f9:9a:70:f0:48:92:46:19:9b:63:29:fc:fc:c8:
e3:4e:5c:eb:de:99:e0:04:7a:17:e1:66:b3:1f:fd:55:ae:e3:
d2:b8:b3:2a:f8:03:1d:f7:41:29:f1:fe:9b:f9:bf:e6:cb:02:
fc:88:82:aa:cb:68:a9:5a:13:e3:e5:60:59:1d:1a:19:f8:49:
ba:08:41:66:61:2c:14:d9:07:47:e9:89:a6:69:79:a3:cf:49:
a5:77:20:bd:91:4b:4c:06:1e:8c:c5:e5:85:7d:ca:d7:2e:be:
29:0a:09:5a:d8:c4:9c:d4:09:72:b7:97:68:7d:91:d7:9f:dd:
3a:5b:4a:cb:3e:f0:48:26:d5:77:19:8b:c1:98:a4:0f:b2:c2:
28:f4:d0:50:54:d8:4c:aa:ef:49:16:62:5e:ba:24:26:81:40:
ae:20:28:ff:d2:4b:b4:c0:fd:93:76:7c:7f:bb:78:6d:df:6d:
62:d7:28:0a:9d:34:ab:84:21:2f:8d:32:26:9f:7d:6f:0e:b8:
06:ff:63:cd:91:25:2a:e0:37:d1:03:54:95:db:f7:cd:81:d3:
52:e8:d6:e9:17:be:7c:1a:08:8e:d7:9f:47:a2:5f:aa:87:8b:
3d:8d:17:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 17:40:00 2025 by rpki-client