Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/b69695-a990-4a6e-8f0a-22dc1a41f84f/1/1-SXKQr6Z9imvoFenSyWTfaLnhus.roa
File: 1-SXKQr6Z9imvoFenSyWTfaLnhus.roa (raw, json)
Hash identifier: c/Urk3t/B0xfwmyQGHJoq2Fwj3EjqijArRLCsTku8l0=
Subject key identifier: F9:25:CA:42:BE:99:F6:29:AF:A0:57:A7:4B:25:93:7D:A2:E7:86:EB
Certificate issuer: /CN=650354e1002248dc70ba40f18d6958fcef569df3
Certificate serial: 01856EA6BA2DF77CAFBF8A3490BBA60C730D
Authority key identifier: 65:03:54:E1:00:22:48:DC:70:BA:40:F1:8D:69:58:FC:EF:56:9D:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZQNU4QAiSNxwukDxjWlY_O9WnfM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/b69695-a990-4a6e-8f0a-22dc1a41f84f/1/1-SXKQr6Z9imvoFenSyWTfaLnhus.roa
Signing time: Sun 01 Jan 2023 18:44:58 +0000
ROA not before: Sun 01 Jan 2023 18:44:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6453
IP address blocks: 194.104.226.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:a6:ba:2d:f7:7c:af:bf:8a:34:90:bb:a6:0c:73:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=650354e1002248dc70ba40f18d6958fcef569df3
Validity
Not Before: Jan 1 18:44:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f925ca42be99f629afa057a74b25937da2e786eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:c3:09:9c:ee:f8:5c:fe:23:84:4b:7e:d0:bd:
de:da:63:4e:6c:d1:50:f6:e8:98:2e:05:61:82:82:
2c:d3:86:37:37:8b:9e:76:1b:36:28:9d:6a:c2:e9:
a1:3f:fa:b2:08:6d:9a:65:69:cb:91:ed:05:4f:17:
62:0c:fc:b8:0d:4d:d4:ed:aa:78:18:ac:47:ab:3c:
e7:d1:a8:8e:c1:f4:75:b7:10:b1:e2:3d:57:04:83:
32:7e:63:fb:6e:ee:b1:97:09:8d:6d:4e:b6:4d:93:
4e:57:93:c7:e5:7d:74:a5:48:13:33:92:06:b6:0b:
f8:43:02:ac:ea:66:3a:d0:92:33:d7:53:14:f9:c7:
7f:33:e3:2e:7e:64:e9:e8:5e:44:85:27:3f:59:2d:
4d:2c:38:66:b1:c8:09:1a:c8:ff:55:9b:ef:a2:e2:
18:95:b5:d0:d3:03:e2:13:4c:bb:9b:ef:14:00:33:
19:96:1b:95:6b:61:4b:2d:2a:f9:e4:e7:44:3b:7a:
af:02:e9:d9:6d:56:ca:cc:46:58:c5:f9:1e:25:0e:
5a:8f:a9:71:39:1f:e0:27:cb:62:82:e2:d5:df:d0:
13:92:34:18:1f:22:f1:d0:ca:1b:10:34:4f:17:82:
b8:d9:76:00:8a:be:f1:b4:9d:5c:c3:92:7a:a7:be:
92:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:25:CA:42:BE:99:F6:29:AF:A0:57:A7:4B:25:93:7D:A2:E7:86:EB
X509v3 Authority Key Identifier:
keyid:65:03:54:E1:00:22:48:DC:70:BA:40:F1:8D:69:58:FC:EF:56:9D:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZQNU4QAiSNxwukDxjWlY_O9WnfM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/b69695-a990-4a6e-8f0a-22dc1a41f84f/1/1-SXKQr6Z9imvoFenSyWTfaLnhus.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/b69695-a990-4a6e-8f0a-22dc1a41f84f/1/ZQNU4QAiSNxwukDxjWlY_O9WnfM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.104.226.0/24
Signature Algorithm: sha256WithRSAEncryption
22:97:5a:f0:2d:1a:66:ab:07:54:7e:fb:ec:7e:e5:37:e7:ec:
50:28:8a:8d:b4:7f:b0:68:f4:45:55:18:06:bd:a7:9d:ad:c5:
f4:dc:55:45:29:65:4b:1b:ff:62:b0:2c:a4:3f:72:78:03:2b:
9c:2a:6c:55:4f:79:fa:0f:bc:91:72:61:66:75:09:58:71:38:
75:d2:6f:7e:95:e1:03:9b:12:ff:db:ba:87:51:29:03:00:f3:
b4:93:73:a5:bc:65:14:b6:09:c6:64:17:5f:de:e6:82:d6:93:
1a:30:34:b8:9e:b8:f8:6e:b0:42:95:d7:55:8e:b4:3a:bb:1a:
b5:06:1d:a7:05:81:7c:0c:e2:32:5b:bd:3f:26:eb:3c:a4:95:
4d:3e:18:6a:f6:d1:b7:54:8e:87:53:54:08:9d:de:28:8b:62:
1f:8a:a7:e2:ad:58:eb:0a:14:68:c3:87:8e:77:ab:64:d5:67:
2c:f0:9e:b2:56:0a:11:15:77:b0:db:71:96:79:71:d7:b5:79:
66:0d:dc:19:64:ec:75:75:4d:d6:51:b6:48:c3:8a:f3:f8:92:
5d:43:85:33:4a:9d:a8:ce:49:f5:f8:70:3e:50:86:1b:76:e6:
00:c1:35:71:36:4d:87:4e:ea:dc:1d:b3:3f:bf:a0:de:d7:7e:
7d:5c:7d:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:52:11 2025 by rpki-client