Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/ORNcnv0BhC3LaZ5a_ZD9RE_cGz8.roa
File: ORNcnv0BhC3LaZ5a_ZD9RE_cGz8.roa (raw, json)
Hash identifier: BPMmHsKQx+evfgkIx+u8Jz0+gI6t8lC8xvYMXdV+gNY=
Subject key identifier: 39:13:5C:9E:FD:01:84:2D:CB:69:9E:5A:FD:90:FD:44:4F:DC:1B:3F
Certificate issuer: /CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Certificate serial: 0D23DE54
Authority key identifier: D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/ORNcnv0BhC3LaZ5a_ZD9RE_cGz8.roa
Signing time: Wed 04 May 2022 07:01:42 +0000
ROA not before: Wed 04 May 2022 07:01:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 240443
IP address blocks: 194.163.88.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 220454484 (0xd23de54)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Validity
Not Before: May 4 07:01:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=39135c9efd01842dcb699e5afd90fd444fdc1b3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:4b:89:18:50:fa:ca:6b:eb:d7:b6:0c:db:37:
9e:33:04:f7:3c:d5:69:c9:51:18:ff:29:a6:4f:be:
be:15:e0:cf:a2:94:24:89:6c:50:c6:ac:9f:91:67:
19:a5:4b:e4:38:c3:37:a3:70:b9:b9:af:b5:6e:87:
e5:c2:93:60:14:7a:af:ad:da:de:3c:05:47:61:4c:
31:4a:3a:fa:29:ed:1a:32:1c:6b:38:d4:b6:6c:48:
db:bc:bf:93:78:cf:ff:e3:6b:a1:a5:d2:d4:54:38:
6a:64:c4:83:38:8c:c9:42:05:91:b3:68:78:a0:c8:
af:48:6f:4a:bf:4b:58:89:52:27:58:d4:f0:80:8c:
b7:78:e5:9e:a4:13:a9:dd:1a:42:f0:aa:5c:d3:6f:
a8:9d:41:75:06:3b:b3:8e:1c:ab:d3:81:af:4e:e1:
32:56:c5:48:89:72:91:16:37:6a:2d:a9:be:c2:1e:
04:fd:19:8e:c0:08:77:57:b0:28:89:1d:de:d5:aa:
21:03:5b:80:93:5f:4a:ae:3e:75:63:3d:67:21:af:
39:1b:2e:ef:af:06:90:64:76:30:bb:00:91:8a:af:
25:85:ef:af:0c:e7:55:35:bb:1a:cb:d0:6e:ba:bf:
ed:0e:a8:30:95:7c:54:6f:b6:95:0d:4f:2a:a6:4a:
09:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:13:5C:9E:FD:01:84:2D:CB:69:9E:5A:FD:90:FD:44:4F:DC:1B:3F
X509v3 Authority Key Identifier:
keyid:D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/ORNcnv0BhC3LaZ5a_ZD9RE_cGz8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.163.88.0/23
Signature Algorithm: sha256WithRSAEncryption
2b:f3:48:f1:98:46:cc:68:b9:94:e4:eb:6f:0b:80:97:43:c2:
6a:1b:d2:61:3b:a4:00:85:31:ed:46:0d:08:f8:8b:5e:33:58:
0d:a1:75:fb:3b:a4:88:0a:4c:d4:5c:38:72:97:d9:ff:8e:2f:
dc:a7:6f:65:b0:22:0d:32:52:c2:4e:52:b2:c6:7a:d7:f5:96:
41:28:02:ee:06:3d:a8:90:f3:7c:ce:14:b8:92:89:6a:69:e5:
1a:ec:06:33:68:bf:90:70:93:24:ab:0d:7f:cc:90:83:02:93:
d9:0d:d6:3b:a5:17:23:a8:f7:45:1f:46:b2:92:a5:f3:eb:09:
de:3c:6f:11:e3:c3:ef:ed:2f:73:c1:e9:f8:4a:4a:c7:3e:4d:
f6:2a:3f:a0:69:ba:73:69:85:b5:c9:fd:2c:a5:34:a7:86:e6:
a6:41:d6:74:f5:55:d9:d8:51:1f:3f:dd:26:2d:55:f4:93:67:
42:a9:a6:f0:09:2b:80:a9:21:aa:be:3f:df:42:59:68:c2:27:
a6:f4:c0:cb:24:40:e3:bf:ca:74:db:c2:36:88:56:3d:9a:27:
54:59:cb:6b:14:34:28:67:e3:29:9e:bd:02:4d:c8:ce:22:e6:
0a:28:4e:71:27:3f:0d:3f:61:e9:97:d5:7b:75:2f:31:0b:00:
9f:22:07:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:08:23 2025 by rpki-client