Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/ed6ccf-929a-4e49-96fc-b5eb03dbf556/1/1-htL2pmqq4zfg-GYiBYRqnad4JU.roa
File: 1-htL2pmqq4zfg-GYiBYRqnad4JU.roa (raw, json)
Hash identifier: FgxkbyVvAirxzOoHUoKeZr8+3Wl2YbH7MMmABsoIYnk=
Subject key identifier: FA:1B:4B:DA:99:AA:AB:8C:DF:83:E1:98:88:16:11:AA:76:9D:E0:95
Certificate issuer: /CN=961ffbeddfe5dcf77f0206e0d73f164f0cd53268
Certificate serial: 018570DE5F5F7EE211AC3C48427258FCDDD0
Authority key identifier: 96:1F:FB:ED:DF:E5:DC:F7:7F:02:06:E0:D7:3F:16:4F:0C:D5:32:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lh_77d_l3Pd_Agbg1z8WTwzVMmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/ed6ccf-929a-4e49-96fc-b5eb03dbf556/1/1-htL2pmqq4zfg-GYiBYRqnad4JU.roa
Signing time: Mon 02 Jan 2023 05:04:59 +0000
ROA not before: Mon 02 Jan 2023 05:04:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58061
IP address blocks: 193.239.209.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:de:5f:5f:7e:e2:11:ac:3c:48:42:72:58:fc:dd:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=961ffbeddfe5dcf77f0206e0d73f164f0cd53268
Validity
Not Before: Jan 2 05:04:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fa1b4bda99aaab8cdf83e198881611aa769de095
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:04:8a:9b:05:08:48:04:c6:9d:34:d6:24:db:
ec:76:eb:67:15:ae:63:60:d5:f0:24:43:1e:27:98:
b2:42:4e:f8:ab:34:d2:f9:b2:cf:38:5e:d8:52:08:
fd:f6:9c:5f:ca:4d:ee:09:3b:a4:01:94:6c:2b:7a:
b7:d9:a9:70:74:e8:7e:6c:a6:5a:03:d7:de:42:44:
bc:95:47:12:7c:5c:17:52:98:ff:b4:5e:aa:9c:50:
2c:d3:39:34:31:17:54:a3:21:01:10:18:62:51:b5:
bc:e3:ed:7e:db:cc:be:2b:c9:b0:d8:04:4f:6b:39:
c8:7c:8b:d1:df:7f:ff:30:5d:71:a5:c2:71:c0:66:
00:c5:ad:de:26:85:04:ba:fc:b1:db:7f:c8:1e:a3:
69:0e:48:f5:95:c9:f8:58:58:78:5f:11:39:fa:ab:
63:2f:b2:15:1f:ec:ba:7c:e0:48:b3:3f:bc:c0:9e:
a8:bb:22:94:77:b4:a3:19:4a:39:b0:32:d9:5a:a2:
d4:a9:a3:97:fc:71:e0:b9:cb:83:1e:69:ad:14:cd:
df:80:a9:8b:14:67:8b:52:33:05:65:a0:63:d1:64:
c8:e9:3b:6f:d9:62:00:4a:dc:b6:76:54:23:bb:2f:
5b:2e:ad:6d:7f:8a:d7:3b:e9:ea:a6:a8:56:b9:9c:
10:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:1B:4B:DA:99:AA:AB:8C:DF:83:E1:98:88:16:11:AA:76:9D:E0:95
X509v3 Authority Key Identifier:
keyid:96:1F:FB:ED:DF:E5:DC:F7:7F:02:06:E0:D7:3F:16:4F:0C:D5:32:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lh_77d_l3Pd_Agbg1z8WTwzVMmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ed6ccf-929a-4e49-96fc-b5eb03dbf556/1/1-htL2pmqq4zfg-GYiBYRqnad4JU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ed6ccf-929a-4e49-96fc-b5eb03dbf556/1/lh_77d_l3Pd_Agbg1z8WTwzVMmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.239.209.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:e3:a0:b0:1c:ed:96:47:0a:ed:4e:c3:70:dd:1b:66:36:c2:
11:ac:3f:45:6d:b8:6f:c5:14:36:5e:53:05:de:b8:5e:b7:01:
10:53:a2:1b:ca:a4:64:13:fe:65:c1:21:a2:a1:11:e0:5f:00:
dc:e1:35:fc:3a:01:08:72:bd:7b:17:fe:61:fe:3d:18:e0:39:
07:4d:7b:22:87:f3:f4:ba:2e:df:e9:85:35:d9:e2:14:d8:dd:
38:eb:e1:da:c6:99:9e:b1:0e:70:36:3e:cb:43:6d:07:e7:b3:
90:69:71:d0:41:da:c9:4d:fb:fd:e5:d8:33:22:64:b0:5d:0c:
fc:a6:36:d4:8f:2b:1e:70:27:57:c5:9c:7c:35:95:df:eb:3c:
5a:9a:9c:19:e5:3f:79:f3:e4:22:29:04:86:77:b2:8b:3b:23:
21:f8:6c:09:37:5a:95:8b:5e:d4:09:f8:60:ef:66:12:b0:57:
a8:0e:77:db:16:15:29:51:45:e2:91:a8:f9:fe:49:ad:65:4f:
34:ac:7d:26:c2:c1:55:7f:7d:a2:45:7d:f0:5b:b1:e3:74:33:
9a:79:3c:4a:db:13:9f:0e:74:4d:61:7e:2f:14:a4:58:a5:c7:
e7:82:8a:11:32:88:30:14:02:f1:8c:8d:d7:8e:77:8c:c6:ee:
95:90:4d:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:44:27 2025 by rpki-client