Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/KTOjkXJjGnvNGB-O2xjhlc8S7vY.roa
File: KTOjkXJjGnvNGB-O2xjhlc8S7vY.roa (raw, json)
Hash identifier: c8mt6kPGKyCa8m0ctxE9IXJMODtAZGWgV6GuErR86ak=
Subject key identifier: 29:33:A3:91:72:63:1A:7B:CD:18:1F:8E:DB:18:E1:95:CF:12:EE:F6
Certificate issuer: /CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Certificate serial: 0C09555F
Authority key identifier: D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/KTOjkXJjGnvNGB-O2xjhlc8S7vY.roa
Signing time: Wed 02 Feb 2022 07:39:36 +0000
ROA not before: Wed 02 Feb 2022 07:39:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44486
IP address blocks: 194.233.31.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 201938271 (0xc09555f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Validity
Not Before: Feb 2 07:39:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2933a39172631a7bcd181f8edb18e195cf12eef6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:58:bc:66:b1:10:ef:af:62:f6:ff:05:dc:7e:
8e:df:92:b6:7e:77:d7:39:a1:96:f6:0e:42:65:f9:
2f:34:a0:d0:d8:32:c9:30:36:fb:19:78:37:f7:f9:
c5:5a:b5:8b:86:70:b2:cf:f6:3a:79:96:64:ea:b1:
a2:24:78:b3:e3:22:6f:39:43:1a:6d:8c:56:9a:ee:
1e:97:ac:35:a5:5b:00:c5:8d:7e:be:96:aa:84:8e:
db:04:c2:e4:74:fb:3e:87:4a:1b:b9:5d:2d:6f:f8:
de:78:7b:f0:dd:43:5b:be:ef:7c:66:92:d6:06:cd:
2e:ae:f1:28:7c:b2:a5:5e:68:29:3b:3c:b8:5e:65:
50:67:e0:9c:14:ff:3b:67:0b:24:73:b2:80:88:24:
ff:c3:f2:0b:6b:4b:9a:7b:88:ca:fe:30:4c:87:a0:
bc:38:0d:ae:4e:0b:63:fe:95:d3:bc:a3:34:cd:ea:
e9:08:35:c4:f7:21:f5:c0:39:58:08:32:24:cc:0b:
5e:2f:fa:49:22:df:8b:1c:17:46:e9:63:8d:2e:a8:
e0:48:a3:d7:ad:1f:22:f7:a1:bb:a8:07:d5:9f:81:
6c:18:54:b6:c0:f1:28:07:65:c9:38:9d:8a:5e:ca:
90:6d:3e:34:59:61:50:cf:8f:c1:4a:8f:d8:07:22:
d6:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:33:A3:91:72:63:1A:7B:CD:18:1F:8E:DB:18:E1:95:CF:12:EE:F6
X509v3 Authority Key Identifier:
keyid:D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/KTOjkXJjGnvNGB-O2xjhlc8S7vY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.233.31.0/24
Signature Algorithm: sha256WithRSAEncryption
33:1a:8b:f9:b3:08:d4:31:78:a8:89:c3:7b:29:59:fb:4d:c7:
c8:f9:37:fd:8d:53:3c:b4:12:fc:e9:e5:35:7d:31:28:b6:44:
0b:64:48:f1:e3:61:a0:95:45:9f:e1:b0:52:f4:f7:cf:00:14:
ab:d8:ed:55:41:3b:b7:0d:3c:12:0f:2a:15:26:10:c2:e4:51:
25:11:a3:05:f5:e3:c4:38:0a:82:05:44:86:09:e9:90:4d:96:
eb:be:6c:94:89:14:13:5d:4d:4e:b2:c3:3b:13:5c:ad:00:d9:
8f:53:d4:54:40:b4:64:e0:26:57:e7:46:e6:4c:cc:f5:8c:03:
1e:58:b2:4f:7a:a3:a7:68:ef:e7:aa:b5:e9:65:e0:c5:df:b9:
ed:5f:20:b3:cf:e1:cb:e9:83:f5:3d:a3:8b:8a:ee:4b:2f:24:
c7:5d:f3:43:3d:a2:bf:94:7a:38:b1:cb:64:a1:65:90:c9:d6:
06:37:65:d9:06:ba:44:9e:75:ec:ab:cf:ba:89:c7:7e:da:6b:
7e:f8:52:ec:11:a2:b3:61:bc:45:49:84:c7:5c:a1:ea:ea:40:
d4:b2:49:5a:1d:7d:27:33:d0:3c:10:d6:83:24:ef:5b:49:a7:
49:30:6d:d3:96:57:17:1c:43:2b:74:aa:af:47:06:be:bf:51:
4f:e4:04:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:00:36 2025 by rpki-client