Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/b69695-a990-4a6e-8f0a-22dc1a41f84f/1/ShWeRWvPNGVgQEav-m_Kb7eDGN8.roa
File: ShWeRWvPNGVgQEav-m_Kb7eDGN8.roa (raw, json)
Hash identifier: UgU9o3zJepcO+pYjM45g4qrS0UL+mFZDemNPrf7ot80=
Subject key identifier: 4A:15:9E:45:6B:CF:34:65:60:40:46:AF:FA:6F:CA:6F:B7:83:18:DF
Certificate issuer: /CN=650354e1002248dc70ba40f18d6958fcef569df3
Certificate serial: 01856EA6BAD7C26BCE71FE58F3E1607C87CA
Authority key identifier: 65:03:54:E1:00:22:48:DC:70:BA:40:F1:8D:69:58:FC:EF:56:9D:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZQNU4QAiSNxwukDxjWlY_O9WnfM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/b69695-a990-4a6e-8f0a-22dc1a41f84f/1/ShWeRWvPNGVgQEav-m_Kb7eDGN8.roa
Signing time: Sun 01 Jan 2023 18:44:58 +0000
ROA not before: Sun 01 Jan 2023 18:44:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29684
IP address blocks: 194.104.226.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:a6:ba:d7:c2:6b:ce:71:fe:58:f3:e1:60:7c:87:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=650354e1002248dc70ba40f18d6958fcef569df3
Validity
Not Before: Jan 1 18:44:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4a159e456bcf3465604046affa6fca6fb78318df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:00:97:97:3b:5f:f3:20:44:cf:f4:47:5e:6f:
af:e2:bb:48:15:07:eb:2e:d2:cc:ec:ce:b0:b6:6c:
ad:1e:1b:5c:2e:64:b1:62:7e:2d:65:50:ff:4e:9f:
b8:24:7a:ad:ca:f2:5a:04:fa:8e:98:93:cb:eb:18:
2a:bb:54:e0:86:a2:72:ba:6f:eb:cc:74:56:44:87:
a8:01:49:eb:b1:20:c6:27:7d:44:5b:e6:33:3d:43:
e8:28:d4:88:e2:e5:23:ba:15:eb:e2:19:b1:23:f1:
14:53:cb:68:11:68:96:18:e5:09:12:5e:0a:ba:a5:
57:ba:b9:28:6a:cf:97:df:1b:54:44:66:e5:80:df:
19:30:b9:a6:9c:e2:a9:24:d6:0e:35:fd:ec:b4:be:
af:0d:a2:73:c1:5c:f3:6d:61:3f:fa:04:7f:e5:69:
ba:84:b9:57:d0:e5:09:61:96:ad:ca:c4:5e:d9:7f:
9f:10:ec:e3:11:bb:a1:b9:d8:37:37:89:6e:07:70:
a2:b6:b6:90:e3:19:a1:ac:b3:b8:8c:b4:53:93:88:
60:aa:12:bc:e4:9c:ee:71:96:89:ff:c7:17:92:73:
3a:2f:3f:c3:50:4d:c8:8e:24:78:32:ae:a9:91:c1:
ca:b2:2b:c5:f9:37:82:e2:58:a5:98:67:b4:3b:dd:
e6:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:15:9E:45:6B:CF:34:65:60:40:46:AF:FA:6F:CA:6F:B7:83:18:DF
X509v3 Authority Key Identifier:
keyid:65:03:54:E1:00:22:48:DC:70:BA:40:F1:8D:69:58:FC:EF:56:9D:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZQNU4QAiSNxwukDxjWlY_O9WnfM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/b69695-a990-4a6e-8f0a-22dc1a41f84f/1/ShWeRWvPNGVgQEav-m_Kb7eDGN8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/b69695-a990-4a6e-8f0a-22dc1a41f84f/1/ZQNU4QAiSNxwukDxjWlY_O9WnfM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.104.226.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:e8:56:73:1c:a7:fa:fe:70:76:03:81:33:9d:d5:35:05:e8:
24:f2:4b:cf:2d:45:67:92:d8:21:32:a3:6d:f9:ea:52:e5:d1:
40:fd:e4:64:13:2e:ef:13:85:ee:e5:07:27:43:b1:f7:e4:e2:
f7:a2:2e:41:a4:6d:80:6e:aa:2e:ba:a3:e4:1d:e7:78:f7:0e:
30:ff:11:95:0e:21:ce:7e:a3:5b:25:d4:c1:28:31:53:a9:ed:
ae:a1:d7:dc:df:7e:b9:96:fc:ae:a7:05:39:f9:e3:2f:ef:7a:
5e:cb:c3:18:33:7b:82:ae:f1:99:ef:d8:ef:84:7b:72:86:a4:
a4:63:6e:2c:c2:30:7e:ff:5b:a6:5a:fb:69:92:bf:ff:c5:07:
13:7f:82:93:b1:49:7c:61:ca:89:de:73:8a:68:40:de:ff:b3:
ba:54:18:9a:be:6a:2a:1b:e1:3d:47:15:17:52:92:5f:49:bf:
b6:9c:a2:c7:88:95:28:c9:e6:83:bf:0b:28:d7:08:4d:62:d1:
bc:18:44:62:bf:d7:bb:be:38:a3:45:a9:46:a9:80:c2:9a:d9:
1c:f7:1f:c0:ee:b7:de:ea:af:9f:99:68:d7:72:5e:64:c4:08:
bf:d2:c6:ff:3b:1f:62:fa:b9:d8:9e:3d:56:19:42:bb:64:43:
25:b7:67:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:05:41 2025 by rpki-client