Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/K1Q_N35zdFY5HWQKXpC4SOE3dA0.roa
File: K1Q_N35zdFY5HWQKXpC4SOE3dA0.roa (raw, json)
Hash identifier: KaXZ0m5Os5PP1reqJcb7n7G4eQKglGw4IRYKXhl1Nfk=
Subject key identifier: 2B:54:3F:37:7E:73:74:56:39:1D:64:0A:5E:90:B8:48:E1:37:74:0D
Certificate issuer: /CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Certificate serial: 018570399CB11E24D26E3C6EF4ABF9E7D44A
Authority key identifier: D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/K1Q_N35zdFY5HWQKXpC4SOE3dA0.roa
Signing time: Mon 02 Jan 2023 02:05:01 +0000
ROA not before: Mon 02 Jan 2023 02:05:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1299
IP address blocks: 194.163.92.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:39:9c:b1:1e:24:d2:6e:3c:6e:f4:ab:f9:e7:d4:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Validity
Not Before: Jan 2 02:05:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2b543f377e737456391d640a5e90b848e137740d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:16:b5:e5:53:da:68:2b:8d:52:8e:a9:2b:49:
39:a1:ba:44:20:47:56:73:89:74:b3:d4:63:57:ae:
2b:89:52:08:7f:ae:87:1e:8d:cb:8e:77:36:62:bd:
1a:c0:21:5a:e3:07:fe:b5:a1:3b:1f:33:15:04:c4:
ae:89:e9:d4:a3:c6:e1:7e:de:94:5f:b5:a2:81:df:
ac:d0:c5:6d:cb:4f:2f:a4:e5:cf:09:10:53:55:98:
df:a8:7c:d3:0d:9a:c9:31:ca:2a:83:b5:f3:3f:ed:
ff:22:f2:bf:d7:38:a5:15:5f:c1:00:d6:09:5d:3a:
32:aa:1e:4f:a1:d7:77:d4:4b:26:2a:63:f2:5e:1d:
d1:ce:b7:3e:22:32:bd:32:8a:75:7c:ac:16:fe:cd:
65:88:66:c0:f8:82:27:0d:3b:52:07:a4:71:19:b9:
41:ef:8e:1a:71:58:da:e0:50:ca:73:3f:a4:34:82:
92:4c:2e:99:61:22:7a:78:17:cc:48:c6:69:53:ae:
c1:c5:d4:d5:9d:58:ac:26:83:9f:c3:58:98:96:ea:
d3:d7:1f:ed:8a:77:6f:90:f6:4a:6b:7b:0f:03:3b:
b8:44:68:2b:f8:d6:f5:d0:75:9f:c9:50:aa:6a:f8:
1e:78:ed:dc:25:00:16:00:c0:15:8e:99:a4:82:92:
80:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:54:3F:37:7E:73:74:56:39:1D:64:0A:5E:90:B8:48:E1:37:74:0D
X509v3 Authority Key Identifier:
keyid:D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/K1Q_N35zdFY5HWQKXpC4SOE3dA0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.163.92.0/24
Signature Algorithm: sha256WithRSAEncryption
77:17:0c:6a:3e:48:a4:da:af:5f:a4:62:a9:9e:e2:19:38:ae:
74:bd:5e:a9:f5:84:b1:bf:96:2a:b4:d6:00:f8:9f:58:0c:75:
d0:16:e5:89:bf:d2:31:12:45:0e:10:27:a4:25:27:f0:15:be:
7c:38:c8:ce:c6:07:eb:39:8a:9f:30:76:b9:9a:72:d5:e2:d7:
f0:75:50:54:5c:98:29:89:78:f2:47:b0:de:23:33:73:09:d2:
6b:98:bd:63:67:eb:a1:d1:0d:fc:0e:0b:fe:49:2d:16:bd:a9:
31:e4:7e:64:d2:33:92:96:b6:c0:4f:bb:6c:3b:22:ae:0f:45:
4a:81:64:9c:de:11:4c:18:9f:dc:fc:cd:f1:92:fd:9a:eb:86:
ea:98:be:b6:e7:9e:b4:38:f3:b2:fd:9b:45:fc:49:4c:31:e9:
86:91:d1:f2:11:c4:41:a5:22:12:02:34:9f:a9:fa:cd:58:b6:
f7:cc:d8:4f:7e:11:56:fd:35:87:af:b3:87:0c:a4:fc:cd:c2:
0f:6c:9d:b3:49:40:7e:57:bb:b9:bc:f9:3f:d1:43:8d:f9:60:
24:31:f8:12:50:ec:b0:77:80:be:2e:7d:4c:c3:1e:f9:16:dd:
62:e1:ff:16:72:90:b9:07:34:0d:8a:e1:c8:ae:15:99:ea:87:
57:b0:15:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:57:30 2025 by rpki-client