Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/RSwe2oDbr81qoGmVZt4-N8vb1xc.roa
File: RSwe2oDbr81qoGmVZt4-N8vb1xc.roa (raw, json)
Hash identifier: WmPP5R3fjITVCmTu5yZR6FSNfBRbYCmSBvhqXb4ohn4=
Subject key identifier: 45:2C:1E:DA:80:DB:AF:CD:6A:A0:69:95:66:DE:3E:37:CB:DB:D7:17
Certificate issuer: /CN=1c7b06bf41300dc4d30f3d0e180c9b95d2bcddff
Certificate serial: 018CDE56EEEFA8667F92FB5621655A261CE6
Authority key identifier: 1C:7B:06:BF:41:30:0D:C4:D3:0F:3D:0E:18:0C:9B:95:D2:BC:DD:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHsGv0EwDcTTDz0OGAybldK83f8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/RSwe2oDbr81qoGmVZt4-N8vb1xc.roa
Signing time: Sat 06 Jan 2024 10:34:48 +0000
ROA not before: Sat 06 Jan 2024 10:34:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215968
IP address blocks: 194.49.55.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:de:56:ee:ef:a8:66:7f:92:fb:56:21:65:5a:26:1c:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c7b06bf41300dc4d30f3d0e180c9b95d2bcddff
Validity
Not Before: Jan 6 10:34:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=452c1eda80dbafcd6aa0699566de3e37cbdbd717
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:9b:0c:a6:5e:0f:16:09:52:f9:ae:a1:d5:a0:
59:33:8b:56:bc:6b:94:89:07:5c:5f:bd:d7:d1:04:
5b:1b:e9:6a:d3:85:44:dd:28:e9:29:85:39:73:d8:
f1:8c:f0:f4:56:bf:ba:03:a2:20:b4:68:55:a9:ad:
08:f1:1d:0d:ee:6d:dc:21:6d:80:a4:c9:8d:e2:5b:
2f:91:be:ec:86:a0:8f:67:3e:6d:a4:3e:79:04:fe:
01:9a:d0:e7:a9:13:8b:94:f5:f4:72:72:0f:da:ce:
36:c9:70:e5:ec:1c:6e:d6:61:e2:b0:68:be:b5:ad:
fa:d8:65:db:62:3f:71:05:29:ba:b7:9a:e8:b7:a7:
6a:55:1a:55:76:0e:82:22:82:c5:3a:2a:09:d1:07:
5c:36:f2:42:93:ed:41:d0:30:56:52:2e:f8:0e:52:
0a:22:5e:6f:e5:ae:ad:4a:b5:d4:27:ca:4f:c7:3b:
a6:ca:d1:b7:f6:57:6a:6c:cf:24:55:f5:fc:ad:0b:
48:38:cc:33:0d:b2:89:1f:71:b1:05:35:87:d8:be:
da:b6:6a:2e:92:ff:1f:c2:7c:e8:b6:9d:ac:50:06:
f0:a9:85:9d:a1:73:6c:b4:f9:20:6b:44:3b:2f:e5:
de:8a:ea:03:3d:99:35:09:8f:f8:e8:a2:cb:c6:41:
1c:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:2C:1E:DA:80:DB:AF:CD:6A:A0:69:95:66:DE:3E:37:CB:DB:D7:17
X509v3 Authority Key Identifier:
keyid:1C:7B:06:BF:41:30:0D:C4:D3:0F:3D:0E:18:0C:9B:95:D2:BC:DD:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHsGv0EwDcTTDz0OGAybldK83f8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/RSwe2oDbr81qoGmVZt4-N8vb1xc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.49.55.0/24
Signature Algorithm: sha256WithRSAEncryption
38:38:79:78:c0:57:9f:bd:cb:3b:24:12:a4:b3:12:37:8c:f2:
7f:d8:ba:41:45:d8:8e:b0:41:5f:56:b1:ec:09:1a:27:5a:9c:
e7:ad:ae:96:54:d5:82:63:03:89:c8:6c:d7:d0:6f:d7:ad:3c:
c5:7f:21:99:59:9e:af:2e:07:ce:a0:9a:fa:0a:cb:8b:cb:a8:
42:ea:e7:fa:7c:fb:57:61:4a:07:77:2a:23:6e:6d:56:e1:ca:
dd:b0:29:20:13:f5:08:24:7e:2a:ef:8d:14:35:e8:df:a4:39:
e7:28:ba:eb:07:30:c0:09:fe:7b:39:06:14:8d:ff:57:f7:e8:
c3:86:5f:3b:43:b4:de:8b:e4:19:96:88:6d:ff:0d:47:f7:b5:
45:ea:8e:87:3d:69:aa:87:fa:66:f8:de:fb:2c:a2:96:a4:eb:
28:40:41:b6:38:ca:fc:9f:b4:19:92:be:82:48:b0:f3:5e:3b:
a7:dd:a5:a8:31:8e:86:ca:42:7e:23:2f:28:97:57:80:49:28:
f2:5f:3f:b1:86:0d:90:cb:f7:ea:24:61:a7:1f:9d:f2:51:c1:
95:e9:c9:a3:d3:dc:e2:2a:bd:dd:09:32:96:2a:e4:2d:09:ae:
17:cf:a5:f4:65:eb:85:e7:7c:bb:b8:fa:6e:1b:2e:23:65:ce:
d2:eb:9a:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 07:44:10 2025 by rpki-client