Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/6c4d22-8ed7-4844-a298-21259dfb6ac0/1/nEsDP9iqkPRDv5i1Xu7tC_onWoc.roa
File: nEsDP9iqkPRDv5i1Xu7tC_onWoc.roa (raw, json)
Hash identifier: Zo36D70b6kIC2Ho3GM3xyb/MhFf+6fYau71Z6mKIn8M=
Subject key identifier: 9C:4B:03:3F:D8:AA:90:F4:43:BF:98:B5:5E:EE:ED:0B:FA:27:5A:87
Certificate issuer: /CN=f21d5f37506de4905e173c0f581150817250efe1
Certificate serial: 01869BFC90356726F9668564A2EDC5A6959F
Authority key identifier: F2:1D:5F:37:50:6D:E4:90:5E:17:3C:0F:58:11:50:81:72:50:EF:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8h1fN1Bt5JBeFzwPWBFQgXJQ7-E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/6c4d22-8ed7-4844-a298-21259dfb6ac0/1/nEsDP9iqkPRDv5i1Xu7tC_onWoc.roa
Signing time: Wed 01 Mar 2023 07:04:25 +0000
ROA not before: Wed 01 Mar 2023 07:04:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 393427
IP address blocks: 194.69.160.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:9b:fc:90:35:67:26:f9:66:85:64:a2:ed:c5:a6:95:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f21d5f37506de4905e173c0f581150817250efe1
Validity
Not Before: Mar 1 07:04:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9c4b033fd8aa90f443bf98b55eeeed0bfa275a87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:6f:21:1d:2d:d1:44:5f:68:4b:13:a3:e8:bf:
e7:e4:1f:d6:bd:dd:99:bb:8c:55:5a:8e:16:c0:bd:
e0:c6:dd:48:37:25:17:1c:05:8b:4a:9d:a7:4e:85:
c0:d6:df:7e:9e:5b:fd:f7:5e:a4:3e:96:06:fc:a3:
7b:ae:be:7f:a0:6c:5d:22:e5:1e:7b:37:bb:a7:bf:
48:75:78:db:b6:70:c7:f1:f6:a8:55:0f:e7:c8:61:
fd:70:cc:59:e7:6e:7b:0a:04:1f:f2:ef:0e:e1:9a:
ae:78:5d:5d:7b:75:5e:00:f6:74:82:bb:97:f6:ae:
d6:d9:72:29:20:25:b6:fc:30:e3:1c:ae:f2:be:ed:
2c:3c:e8:f6:cd:06:64:ea:7a:50:0c:b0:73:e0:8b:
bb:bd:23:77:3f:21:e5:6d:07:34:a9:72:e5:f5:6b:
2d:fe:37:0c:03:9d:8a:10:c0:9c:78:7b:47:45:7d:
32:27:80:c4:ef:05:e2:f0:e0:de:ec:8c:66:55:04:
d2:07:cb:49:ea:dd:3b:9d:31:5b:d6:ce:a9:bb:03:
7b:cd:b1:3e:45:a4:b7:6a:fe:ae:0c:f4:51:32:fd:
69:0d:9e:13:4f:b0:78:e1:ea:98:5d:9c:e8:52:b4:
40:4d:40:ac:75:c1:39:98:0f:72:e9:7d:8e:82:a4:
b3:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:4B:03:3F:D8:AA:90:F4:43:BF:98:B5:5E:EE:ED:0B:FA:27:5A:87
X509v3 Authority Key Identifier:
keyid:F2:1D:5F:37:50:6D:E4:90:5E:17:3C:0F:58:11:50:81:72:50:EF:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8h1fN1Bt5JBeFzwPWBFQgXJQ7-E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/6c4d22-8ed7-4844-a298-21259dfb6ac0/1/nEsDP9iqkPRDv5i1Xu7tC_onWoc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/6c4d22-8ed7-4844-a298-21259dfb6ac0/1/8h1fN1Bt5JBeFzwPWBFQgXJQ7-E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.69.160.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:af:74:30:72:16:50:87:fa:97:10:ef:c6:f1:85:ca:06:04:
17:a3:f7:a6:1d:23:40:2d:2f:aa:f1:c3:a8:e6:db:43:a8:c5:
1f:25:a1:3f:2a:6b:22:98:98:ff:6d:c5:da:31:ea:b9:18:9e:
19:1b:fd:db:a0:3c:b0:b3:93:5d:0c:d8:f4:60:ca:ef:2a:bc:
02:d5:fd:36:03:3b:e3:73:f4:df:26:60:9c:c6:67:be:4d:75:
05:49:0a:b0:1f:28:3d:fd:33:0b:cb:14:f5:60:c2:e3:b4:2e:
17:8a:65:e6:85:dd:72:84:7c:be:25:9f:7c:7d:f4:43:29:74:
1e:bb:e9:7c:22:38:5d:54:25:e5:12:03:62:22:9c:9a:02:ee:
e3:02:fa:52:1e:13:cd:42:fa:c9:c1:90:de:7e:8e:f2:8a:da:
60:5c:cd:06:ea:a7:c3:fb:f6:bb:80:28:a1:85:08:41:44:e4:
bf:21:9f:f6:b5:aa:0c:ce:e6:ef:a6:31:c3:42:66:5b:f9:cc:
02:84:5c:cd:00:6e:9b:f5:f7:54:b6:d7:3b:a4:46:18:92:96:
d5:8b:cd:49:bc:bb:d8:41:05:79:db:55:01:be:6d:ea:94:da:
c6:8e:50:32:00:65:36:db:fb:79:2e:69:c4:d0:54:08:76:c6:
78:db:6c:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:40:04 2025 by rpki-client