Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/35f1cd-a424-41ef-8b3e-3bd2243b030b/1/w00XMjbTei5-2-x6DvSECugPpeA.roa
File: w00XMjbTei5-2-x6DvSECugPpeA.roa (raw, json)
Hash identifier: aNI2Foz8frJZhDIIR4/rX+oxkTtuqTgq214jNi90dmg=
Subject key identifier: C3:4D:17:32:36:D3:7A:2E:7E:DB:EC:7A:0E:F4:84:0A:E8:0F:A5:E0
Certificate issuer: /CN=4af4671bbfe1e38cccff8c9340039963344f23a3
Certificate serial: 01856F949513477B057E62908B4EDB2C0505
Authority key identifier: 4A:F4:67:1B:BF:E1:E3:8C:CC:FF:8C:93:40:03:99:63:34:4F:23:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SvRnG7_h44zM_4yTQAOZYzRPI6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/35f1cd-a424-41ef-8b3e-3bd2243b030b/1/w00XMjbTei5-2-x6DvSECugPpeA.roa
Signing time: Sun 01 Jan 2023 23:04:46 +0000
ROA not before: Sun 01 Jan 2023 23:04:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208241
IP address blocks: 194.29.52.0/24 maxlen: 24
2a11:87c0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:94:95:13:47:7b:05:7e:62:90:8b:4e:db:2c:05:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4af4671bbfe1e38cccff8c9340039963344f23a3
Validity
Not Before: Jan 1 23:04:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c34d173236d37a2e7edbec7a0ef4840ae80fa5e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:94:79:18:21:67:64:47:f7:39:2a:42:2d:5f:
8d:0d:9b:ce:6d:d4:46:8e:9f:c6:a9:64:4d:6d:cb:
5e:af:45:c9:f4:ba:7b:fa:ab:14:85:93:5f:9d:7c:
cf:cd:62:3c:1d:f1:2e:5f:75:82:b6:51:d1:bb:ac:
0e:3c:74:e7:60:6d:f2:50:b6:bb:52:ea:bf:8c:7c:
f9:b8:1d:77:f6:83:8e:59:74:e7:e5:9f:c8:d9:48:
30:c9:0f:49:c4:ba:ce:cb:86:76:b7:47:26:fc:99:
11:43:60:72:02:3d:bf:e9:09:53:31:25:d3:70:86:
1b:b5:27:92:bc:96:19:20:af:10:65:65:55:ba:79:
37:87:f4:aa:c9:fd:d9:8a:1f:56:27:4a:95:17:c3:
39:36:73:e3:dc:86:f2:6d:ed:f7:04:e1:d0:49:57:
ca:08:ae:03:f7:a2:f9:d8:a7:69:53:29:24:08:ca:
e1:09:81:da:96:5a:bb:8d:2d:25:71:a1:8e:12:52:
62:a3:38:4f:74:99:48:0e:02:02:4a:42:96:f2:71:
a4:0a:e5:f3:5f:e7:73:4e:2c:80:32:60:3b:d3:c2:
16:bf:c2:a5:a2:c1:19:e0:61:85:7c:6f:89:1f:ca:
01:74:46:20:36:26:e9:70:f8:a5:3f:37:bb:df:24:
96:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:4D:17:32:36:D3:7A:2E:7E:DB:EC:7A:0E:F4:84:0A:E8:0F:A5:E0
X509v3 Authority Key Identifier:
keyid:4A:F4:67:1B:BF:E1:E3:8C:CC:FF:8C:93:40:03:99:63:34:4F:23:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SvRnG7_h44zM_4yTQAOZYzRPI6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/35f1cd-a424-41ef-8b3e-3bd2243b030b/1/w00XMjbTei5-2-x6DvSECugPpeA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/35f1cd-a424-41ef-8b3e-3bd2243b030b/1/SvRnG7_h44zM_4yTQAOZYzRPI6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.29.52.0/24
IPv6:
2a11:87c0::/29
Signature Algorithm: sha256WithRSAEncryption
88:a9:5a:60:df:87:c8:97:10:3f:2b:3b:b9:bd:f3:52:0f:47:
3c:a3:d4:93:0a:1b:d4:a5:78:96:5c:63:ec:a7:ab:be:27:80:
e6:4f:e2:aa:94:e5:30:5e:6c:2f:a7:f4:c6:d7:03:ed:06:a4:
d0:e1:7c:6e:06:bc:50:fd:69:00:34:36:2e:8b:48:25:74:68:
83:c5:42:69:95:69:45:8b:f3:37:00:d6:84:c1:a4:8e:1e:44:
92:7b:68:d4:c1:c0:30:c3:bc:2b:17:86:6b:1a:63:02:67:43:
3d:47:c7:0a:cc:1b:84:38:26:be:58:d0:0d:eb:9a:a3:d4:7e:
cf:01:2c:f3:f3:f3:c6:7b:c2:a0:33:6e:76:88:72:e0:c2:1d:
f6:0b:31:75:86:bd:8a:40:6f:4d:00:cf:74:42:a3:8c:c2:a7:
c8:9f:25:35:b0:60:40:c5:72:26:3a:ac:bd:07:8f:2f:0a:6e:
e5:51:64:c5:5f:ff:24:b0:45:b3:60:5f:9d:ab:f8:e2:1c:dc:
5b:6e:c6:97:c9:6c:70:5b:5b:b8:35:0f:71:30:d8:3b:19:cf:
0f:04:76:2a:10:2f:98:d3:4e:34:fc:9c:15:2d:78:45:aa:cd:
8d:30:77:2a:f9:7d:03:8a:1e:70:30:f2:88:ba:ba:75:65:55:
0f:42:0f:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:13:05 2025 by rpki-client