Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/9113c7-fc3b-47c0-bca6-fe39a2553a5e/1/hTtX0Lff04UsBOF69m23g5y1_3E.roa
File: hTtX0Lff04UsBOF69m23g5y1_3E.roa (raw, json)
Hash identifier: nHw9EoF1KCMi9/4EisRbvANkEpzewGTL50434gH3meE=
Subject key identifier: 85:3B:57:D0:B7:DF:D3:85:2C:04:E1:7A:F6:6D:B7:83:9C:B5:FF:71
Certificate issuer: /CN=eead7e8a2349f402a87bfb32ab6e9946f8c4c3f0
Certificate serial: 01841998AAEF77594BF7274AC1675E39ACA0
Authority key identifier: EE:AD:7E:8A:23:49:F4:02:A8:7B:FB:32:AB:6E:99:46:F8:C4:C3:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7q1-iiNJ9AKoe_syq26ZRvjEw_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/9113c7-fc3b-47c0-bca6-fe39a2553a5e/1/hTtX0Lff04UsBOF69m23g5y1_3E.roa
Signing time: Thu 27 Oct 2022 13:19:06 +0000
ROA not before: Thu 27 Oct 2022 13:19:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 213183
IP address blocks: 194.147.93.0/24 maxlen: 24
194.147.94.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:19:98:aa:ef:77:59:4b:f7:27:4a:c1:67:5e:39:ac:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eead7e8a2349f402a87bfb32ab6e9946f8c4c3f0
Validity
Not Before: Oct 27 13:19:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=853b57d0b7dfd3852c04e17af66db7839cb5ff71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:af:32:49:62:7d:94:b4:ee:1b:ba:90:4d:16:
45:f8:10:f8:85:24:5b:01:6e:84:e4:18:c1:5d:7c:
43:c8:4c:0f:53:6f:27:32:f1:04:6e:a9:2d:0d:4a:
0f:f6:d1:fe:fc:cf:dc:8f:5d:60:e6:fe:29:b4:b9:
bd:17:2d:78:af:41:2a:8f:85:93:fe:4b:32:49:f1:
9e:05:0a:1d:ca:e2:be:b9:57:f2:ed:5a:17:23:02:
cc:48:4d:6a:31:f3:ed:dc:8b:2e:61:b9:55:95:93:
f6:2e:40:24:99:2e:d2:fb:ef:01:3c:ba:a6:91:ca:
46:42:ea:d4:63:a7:61:d1:7d:6b:c8:c1:0f:80:af:
85:52:c3:03:88:54:5d:56:e2:66:ce:b4:25:77:e1:
6f:bb:ac:9b:24:79:e4:3d:fe:63:3e:10:99:0c:9e:
74:35:be:c8:9e:a4:3f:df:f7:d1:07:c5:33:62:b2:
89:5c:f0:1d:e0:5c:22:4a:a5:be:b2:ea:4f:0e:85:
c4:96:2f:b9:c8:83:1c:50:30:1d:cd:24:b1:4e:78:
1b:d6:48:ee:73:cd:da:ce:34:29:03:e2:ef:16:04:
a5:87:d3:d5:f4:68:dd:39:b7:c5:05:e6:08:4f:f4:
58:f0:90:b0:2c:4e:43:51:5e:f1:57:c9:81:4c:4b:
08:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:3B:57:D0:B7:DF:D3:85:2C:04:E1:7A:F6:6D:B7:83:9C:B5:FF:71
X509v3 Authority Key Identifier:
keyid:EE:AD:7E:8A:23:49:F4:02:A8:7B:FB:32:AB:6E:99:46:F8:C4:C3:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7q1-iiNJ9AKoe_syq26ZRvjEw_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/9113c7-fc3b-47c0-bca6-fe39a2553a5e/1/hTtX0Lff04UsBOF69m23g5y1_3E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/9113c7-fc3b-47c0-bca6-fe39a2553a5e/1/7q1-iiNJ9AKoe_syq26ZRvjEw_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.147.93.0-194.147.94.255
Signature Algorithm: sha256WithRSAEncryption
45:62:af:35:c6:a2:95:40:e8:40:d8:1d:7a:ae:a1:ad:10:5c:
5b:ac:ed:2f:6c:35:bb:20:c1:20:11:fe:2a:b2:98:20:67:02:
0b:9d:bb:96:7d:d6:ee:1e:dd:ce:0e:a8:38:76:65:71:b1:68:
14:65:47:ff:48:c9:70:fc:2a:90:7b:49:89:f8:69:60:09:12:
71:cc:72:ed:2d:0f:70:ab:5b:01:9c:9d:e8:20:ec:51:16:44:
a9:9f:46:06:18:81:72:a1:93:c1:98:fa:8f:b5:99:cb:f4:f1:
76:e5:7b:25:07:26:4d:f1:42:76:e4:3a:c8:f0:78:9c:8e:43:
3b:e3:85:ce:8a:48:61:26:3a:68:bd:ae:cd:6d:b8:f6:8f:e5:
69:eb:84:e2:93:49:b7:98:6b:6e:08:62:3d:bd:28:fd:43:67:
83:df:47:b6:8c:63:04:3e:3f:d9:1f:b8:aa:a2:aa:8e:ce:0b:
2b:62:96:ad:56:f0:d1:ee:a6:2b:12:c2:ef:1a:84:00:29:c4:
1d:49:81:97:34:b8:b0:76:90:60:9a:25:1e:3f:4b:78:f0:df:
d3:c9:ca:70:41:32:18:ce:16:e1:b9:15:a8:22:2d:a0:3c:20:
d3:4b:5a:22:ad:b6:a7:bc:fd:44:28:a3:c5:85:96:a8:7b:e4:
1e:7a:73:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:11:26 2025 by rpki-client