Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/K_JkzcbM_QPoxIQF_akyS7JQqDw.roa
File: K_JkzcbM_QPoxIQF_akyS7JQqDw.roa (raw, json)
Hash identifier: 9jaHgfeCRoz0NVDhg+OXrVJtPJHaxitCFsk+uUieBGI=
Subject key identifier: 2B:F2:64:CD:C6:CC:FD:03:E8:C4:84:05:FD:A9:32:4B:B2:50:A8:3C
Certificate issuer: /CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Certificate serial: 0C97FE94
Authority key identifier: D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/K_JkzcbM_QPoxIQF_akyS7JQqDw.roa
Signing time: Mon 21 Mar 2022 10:34:50 +0000
ROA not before: Mon 21 Mar 2022 10:34:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 140947
IP address blocks: 194.233.30.0/24 maxlen: 24
194.163.95.0/24 maxlen: 24
194.163.94.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 211287700 (0xc97fe94)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Validity
Not Before: Mar 21 10:34:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2bf264cdc6ccfd03e8c48405fda9324bb250a83c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:a2:9f:49:c1:5f:25:95:6a:db:7c:35:70:a2:
04:42:fa:75:a1:5d:66:57:a8:4c:fa:15:9d:53:9f:
5c:ed:1e:63:a8:ba:a1:0b:68:66:62:b3:b7:01:d5:
c5:6e:80:fe:80:8b:84:17:3f:32:6c:60:a0:bc:5e:
7c:ee:b9:6b:28:76:95:bf:2a:0a:c2:8e:fd:98:0a:
54:bf:8b:48:9f:94:a0:00:cf:57:b8:00:a6:00:46:
a3:c2:34:ea:71:09:83:59:60:98:bc:e5:ba:d0:e5:
fd:07:f1:a0:3d:86:aa:d8:27:5d:c2:6b:27:28:68:
c4:bd:2c:c5:25:b5:2e:53:9f:73:68:e7:38:19:3c:
96:ee:37:98:ee:f2:e9:c9:00:51:28:57:e5:dc:55:
66:f8:05:0e:5c:b8:96:9a:21:f0:8e:ce:ca:71:9b:
92:20:3e:36:55:f6:66:ac:0f:a9:96:45:1b:52:29:
63:f8:c0:f2:57:38:a9:0d:eb:80:05:c8:3f:31:1c:
6a:e2:b0:5f:17:7c:d0:2a:3e:8f:6e:0a:80:92:b6:
43:c8:c3:9d:bc:8d:00:42:11:47:be:58:fe:91:d7:
93:5a:d9:17:46:6f:39:19:8b:a6:9d:f3:d7:4c:44:
93:dd:74:d0:a0:ef:14:68:bb:6b:aa:09:98:7f:f5:
90:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:F2:64:CD:C6:CC:FD:03:E8:C4:84:05:FD:A9:32:4B:B2:50:A8:3C
X509v3 Authority Key Identifier:
keyid:D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/K_JkzcbM_QPoxIQF_akyS7JQqDw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.163.94.0/23
194.233.30.0/24
Signature Algorithm: sha256WithRSAEncryption
03:9a:46:70:9f:b2:e1:f8:d9:6f:9f:33:89:85:64:e8:3a:06:
24:e4:43:72:dd:a9:73:57:2f:8b:a8:5a:6c:1a:aa:5e:1d:03:
d4:17:07:d1:10:6e:de:03:f6:a6:33:c0:36:6b:91:b9:67:ec:
e0:da:72:6b:98:54:b4:fa:c1:5f:e0:64:05:98:8f:ef:17:60:
26:24:d0:af:57:a5:3a:a9:bf:b3:5b:ad:c0:09:1f:7d:c4:91:
d7:27:35:83:5b:3a:0d:6e:35:43:7a:44:7e:c8:9a:32:24:38:
cf:9c:0c:54:7f:a7:ce:c2:1d:28:88:9d:cc:7a:e6:02:7f:20:
e3:eb:03:5c:93:46:c6:45:ed:59:0c:fe:07:de:18:5e:f4:8a:
4f:33:b8:c6:84:86:9b:a5:f6:cb:87:7c:f8:28:33:f8:c9:a8:
2e:f3:a7:5f:a4:b5:75:e1:45:e0:9d:52:72:7b:8a:bc:b4:90:
b7:31:50:80:5d:3d:e5:e5:73:60:47:62:d5:4d:61:99:2e:a0:
fd:c4:db:d0:a5:bc:ab:2c:3d:44:78:0d:ad:84:6f:bc:31:a1:
43:23:08:cb:eb:20:c2:83:6f:0b:83:a0:ac:ba:e9:be:ea:85:
71:a1:f3:95:64:ab:18:c3:7a:07:84:77:7a:58:30:96:ae:cb:
5a:f6:3f:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:07:13 2025 by rpki-client