Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/ln19a7X8rBe2_MjqLg73xQBYH00.roa
File: ln19a7X8rBe2_MjqLg73xQBYH00.roa (raw, json)
Hash identifier: t1xGc83YV+6z0fvYaGP4pr26zknTxLo6Sux5lI/mWkc=
Subject key identifier: 96:7D:7D:6B:B5:FC:AC:17:B6:FC:C8:EA:2E:0E:F7:C5:00:58:1F:4D
Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d
Certificate serial: 513E1D77
Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/ln19a7X8rBe2_MjqLg73xQBYH00.roa
Signing time: Tue 01 Feb 2022 12:26:11 +0000
ROA not before: Tue 01 Feb 2022 12:26:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212823
IP address blocks: 194.209.192.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1363025271 (0x513e1d77)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d
Validity
Not Before: Feb 1 12:26:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=967d7d6bb5fcac17b6fcc8ea2e0ef7c500581f4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:bd:d7:a1:d3:91:87:25:c9:59:a2:d1:3d:aa:
52:7f:e5:cd:42:53:8f:d2:65:0f:db:a6:d8:5e:8f:
33:9d:ac:bf:e6:9a:93:ab:b7:fd:76:38:68:be:e3:
19:a1:07:5b:bb:2a:6d:8e:54:d1:f8:5e:ff:f2:98:
a3:7e:2e:ed:cd:87:9f:a0:c1:44:59:55:d1:d5:87:
eb:0e:e7:47:ea:87:84:90:10:47:d2:d5:c2:25:22:
8d:08:88:81:e9:3c:43:c5:7e:7d:18:1d:d8:cc:ca:
93:44:d6:ef:a4:fe:05:3c:a3:97:d7:2d:44:0c:64:
44:62:0b:b2:49:45:0f:e9:6d:a5:62:4d:74:78:fe:
a2:87:75:80:21:1b:00:33:0a:af:e4:4a:1c:2b:46:
b2:b6:59:18:8c:c1:4a:4a:e6:56:66:cb:b3:8c:86:
44:b9:4e:e0:9d:33:75:ed:72:b1:b1:57:47:21:bf:
e6:6e:42:9c:b2:df:87:a6:c9:2d:eb:a1:19:76:e1:
a9:14:a7:e0:d5:18:f3:50:db:f3:22:d5:54:07:07:
e9:c6:b4:75:ea:3c:bf:b8:05:ce:17:f3:1b:f0:8d:
4a:2b:53:e8:d9:b9:cd:73:1c:63:1f:28:4e:4a:6b:
09:87:c4:f7:6c:b1:38:7f:23:81:34:fc:05:ac:9d:
0b:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:7D:7D:6B:B5:FC:AC:17:B6:FC:C8:EA:2E:0E:F7:C5:00:58:1F:4D
X509v3 Authority Key Identifier:
keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/ln19a7X8rBe2_MjqLg73xQBYH00.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.209.192.0/23
Signature Algorithm: sha256WithRSAEncryption
0e:fc:80:df:01:7c:74:90:bf:af:51:23:3a:47:4e:b3:90:b6:
da:8a:99:0c:32:1a:ae:92:0a:cf:12:6a:20:2d:94:8c:ce:db:
a0:ba:fd:65:01:31:b8:ad:38:c8:1b:4e:ac:c3:1b:10:6b:21:
3f:48:c6:d3:c0:9b:6c:b6:c6:a3:60:cb:cd:0d:11:b9:47:75:
68:46:3c:f7:6a:b5:3d:ee:13:25:87:db:b8:5e:28:af:ac:54:
9e:d0:73:9e:63:10:d8:f9:2e:41:b9:25:c5:2b:fb:ed:3b:5b:
e8:8c:5b:e1:f0:29:c7:29:7f:80:a2:60:bc:59:cb:36:2e:a4:
3b:c2:bf:c8:63:c6:f6:e4:e4:6b:23:b9:70:a2:af:94:04:08:
f1:b8:1a:db:ee:00:bd:61:40:89:f1:10:ce:c7:a3:17:f8:fa:
c4:cb:2f:3f:67:20:ea:7a:03:b8:97:3d:89:aa:b2:65:4b:bd:
ba:68:8d:92:56:92:5d:0c:33:90:40:4c:e8:a2:60:ce:7b:a3:
10:5f:82:8a:8c:35:20:25:ad:6d:4c:e5:52:94:97:ef:a9:27:
cb:52:87:55:84:96:ce:f7:5a:dd:73:d9:96:54:42:f2:7a:dd:
fd:30:a3:1a:26:58:2f:c3:2f:80:d5:c0:ff:60:5b:e1:8c:16:
6f:1a:09:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:53:12 2025 by rpki-client