Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/59369b-5981-4bbc-bdc2-7b551eb97363/1/_2jogeO0kEeQVfuMkqE1pYnlB14.roa
File: _2jogeO0kEeQVfuMkqE1pYnlB14.roa (raw, json)
Hash identifier: uGRBG2mrp6sQhxCJvjX80sZBCx1BmFKNdGaNg9QNvsw=
Subject key identifier: FF:68:E8:81:E3:B4:90:47:90:55:FB:8C:92:A1:35:A5:89:E5:07:5E
Certificate issuer: /CN=ce570223aac4013c7ad2c934500e6f430264fe4b
Certificate serial: 018CC86F41421B8E29850239F0F8DF68A05D
Authority key identifier: CE:57:02:23:AA:C4:01:3C:7A:D2:C9:34:50:0E:6F:43:02:64:FE:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zlcCI6rEATx60sk0UA5vQwJk_ks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/59369b-5981-4bbc-bdc2-7b551eb97363/1/_2jogeO0kEeQVfuMkqE1pYnlB14.roa
Signing time: Tue 02 Jan 2024 04:29:43 +0000
ROA not before: Tue 02 Jan 2024 04:29:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213183
IP address blocks: 194.42.98.0/23 maxlen: 23
194.42.98.0/24 maxlen: 24
194.42.99.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:41:42:1b:8e:29:85:02:39:f0:f8:df:68:a0:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce570223aac4013c7ad2c934500e6f430264fe4b
Validity
Not Before: Jan 2 04:29:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ff68e881e3b490479055fb8c92a135a589e5075e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:cb:de:c6:f0:80:09:f6:73:d2:14:b7:d6:bf:
fa:b5:fc:f8:80:e9:a4:97:39:5b:95:21:23:91:c2:
da:0f:10:38:b7:4c:e8:52:25:3c:96:cb:64:38:2c:
53:d2:92:2c:36:89:a2:1d:5c:b3:c1:80:22:59:8a:
d7:16:e1:f9:85:68:08:84:c5:16:fa:e2:49:df:fe:
9c:10:78:d6:65:54:2e:48:c7:71:7f:e8:49:0c:d4:
80:c4:69:02:e8:2f:ae:01:56:2d:14:ba:e3:da:70:
2a:26:b8:79:f0:26:e5:3a:f0:44:cf:c4:06:bf:02:
22:b8:5d:00:14:f3:94:72:b4:30:63:d3:77:37:fd:
fb:79:41:e8:ba:1d:72:6d:0b:72:52:9f:5b:50:36:
1d:ba:cd:38:c4:20:91:19:c9:65:ab:bf:dd:fc:eb:
9b:c1:75:9b:5e:2b:77:9b:43:0c:79:14:15:86:77:
e4:d2:28:77:dc:b1:ef:cf:73:7e:0f:2c:83:87:c9:
93:31:bd:63:dd:e7:06:1d:13:db:79:a1:02:cb:45:
be:b2:45:93:cb:fd:ba:f3:c9:34:28:59:e8:ed:29:
ba:19:5f:69:de:44:7b:b8:11:9e:80:ab:90:2f:e5:
84:76:ec:d7:c4:a7:d8:06:0a:3f:e1:2d:b2:d0:34:
77:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:68:E8:81:E3:B4:90:47:90:55:FB:8C:92:A1:35:A5:89:E5:07:5E
X509v3 Authority Key Identifier:
keyid:CE:57:02:23:AA:C4:01:3C:7A:D2:C9:34:50:0E:6F:43:02:64:FE:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zlcCI6rEATx60sk0UA5vQwJk_ks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/59369b-5981-4bbc-bdc2-7b551eb97363/1/_2jogeO0kEeQVfuMkqE1pYnlB14.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/59369b-5981-4bbc-bdc2-7b551eb97363/1/zlcCI6rEATx60sk0UA5vQwJk_ks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.42.98.0/23
Signature Algorithm: sha256WithRSAEncryption
56:55:8f:14:77:b5:9c:3e:e9:4d:51:c2:5a:2f:9e:bd:28:f8:
6b:53:22:b7:be:db:a0:b8:cf:d0:45:01:41:84:08:a1:a9:e6:
ff:c4:23:43:4e:28:c0:29:e5:2d:e0:ff:35:d9:6e:4e:2c:0a:
26:42:a3:f2:e1:d5:af:23:c5:b3:a3:1f:8a:b2:15:10:57:ca:
9b:61:23:6c:bd:2d:ac:0e:37:f9:f6:29:b0:20:32:d0:bb:bf:
85:57:0b:5f:1d:75:b4:b7:6a:80:a7:7b:c1:a4:64:db:b5:e9:
21:ac:40:69:a0:22:b7:1d:14:96:5b:38:53:83:38:aa:ae:b7:
fa:bf:29:ae:f1:67:47:63:9d:27:3c:f7:05:14:e8:da:67:1c:
d1:82:d8:16:35:94:e8:a1:93:9b:e8:40:fa:84:f2:fd:de:1c:
68:83:2a:50:96:ce:a3:10:92:33:76:ce:a9:43:8c:91:e6:d4:
0a:63:08:e0:04:4a:d9:e6:c4:6f:d8:25:65:28:81:c2:27:a3:
7f:a7:66:6f:46:16:a1:e1:ca:46:48:65:b9:17:e4:90:21:1e:
7c:42:22:7a:71:e8:5b:58:31:0a:73:44:5f:5e:d5:ef:38:b3:
90:6e:8a:e0:60:19:51:87:ef:df:2c:82:13:50:ad:79:7c:e9:
b8:01:32:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:32:40 2025 by rpki-client