Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/24995c-4e07-4c15-81f2-55ce62c1b260/1/pDcOaeNjCorbAUZkBpL_r0BgsQs.roa
File: pDcOaeNjCorbAUZkBpL_r0BgsQs.roa (raw, json)
Hash identifier: PDYiLOm2z7CwZlquMfCHKcZ7FBpTpbTRPqHWEAWC+6w=
Subject key identifier: A4:37:0E:69:E3:63:0A:8A:DB:01:46:64:06:92:FF:AF:40:60:B1:0B
Certificate issuer: /CN=58fc6b870a103b470dbe2d25ce69101f533fef1b
Certificate serial: 015C6671
Authority key identifier: 58:FC:6B:87:0A:10:3B:47:0D:BE:2D:25:CE:69:10:1F:53:3F:EF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WPxrhwoQO0cNvi0lzmkQH1M_7xs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/24995c-4e07-4c15-81f2-55ce62c1b260/1/pDcOaeNjCorbAUZkBpL_r0BgsQs.roa
Signing time: Mon 25 Apr 2022 17:55:25 +0000
ROA not before: Mon 25 Apr 2022 17:55:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62240
IP address blocks: 194.110.251.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22832753 (0x15c6671)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58fc6b870a103b470dbe2d25ce69101f533fef1b
Validity
Not Before: Apr 25 17:55:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a4370e69e3630a8adb0146640692ffaf4060b10b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c0:2e:3f:f4:dd:b1:04:fa:9e:38:59:e4:98:
fe:c0:a4:d9:08:58:fc:8d:84:36:b8:05:cb:85:7b:
ea:1e:f7:63:31:60:a4:4b:ec:ea:76:37:e0:f2:05:
ad:a3:2d:b8:da:13:5c:97:dc:b8:23:33:44:2a:2a:
d0:44:15:4f:50:2e:da:1a:bd:c5:5c:f0:53:7c:6f:
84:e6:b9:54:de:51:e7:48:12:6e:3c:4e:4d:8c:c0:
c8:e9:7c:a0:f2:d5:a3:9f:8c:56:6b:c3:5e:aa:e7:
45:1c:41:c3:36:e6:b0:e2:4f:21:d7:e0:86:84:53:
0f:45:2f:6e:3c:7e:75:cf:b0:1f:4c:ad:ac:7c:6c:
1e:3a:b3:ce:7d:ee:3a:15:54:6e:a1:49:94:74:58:
2c:3c:b8:ae:f8:95:5b:a6:b5:f9:e3:f4:aa:ec:68:
87:e3:ec:b6:14:88:de:99:26:43:0a:95:20:40:9f:
d7:4a:ca:d4:34:c9:a7:67:5d:69:df:9f:e4:03:8b:
34:ae:53:2e:fd:24:61:5c:b2:22:43:d4:5b:e3:72:
5e:ed:ac:ba:8f:16:c0:1a:89:46:30:16:ee:f7:b6:
9d:b3:10:79:45:18:f1:ef:d6:1d:00:74:e0:95:ff:
7c:a3:7e:22:f8:9f:47:e2:d2:dd:59:32:e2:ee:b6:
9a:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:37:0E:69:E3:63:0A:8A:DB:01:46:64:06:92:FF:AF:40:60:B1:0B
X509v3 Authority Key Identifier:
keyid:58:FC:6B:87:0A:10:3B:47:0D:BE:2D:25:CE:69:10:1F:53:3F:EF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WPxrhwoQO0cNvi0lzmkQH1M_7xs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/24995c-4e07-4c15-81f2-55ce62c1b260/1/pDcOaeNjCorbAUZkBpL_r0BgsQs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/24995c-4e07-4c15-81f2-55ce62c1b260/1/WPxrhwoQO0cNvi0lzmkQH1M_7xs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.110.251.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:37:80:9c:24:77:38:5e:fa:9f:ea:53:65:f4:ad:32:6f:36:
13:7f:e7:48:53:0d:31:4b:fe:4c:ae:1f:ea:00:bb:0e:54:2c:
2b:2e:83:d5:d1:54:20:ea:91:23:71:ef:7a:b3:51:76:65:77:
7a:68:2a:71:d4:72:2f:ed:de:a8:c6:3c:44:68:6d:58:d1:4a:
58:63:50:1a:99:c7:5c:43:bb:fc:61:12:f2:ed:3d:b2:18:8e:
7c:7b:22:15:58:5d:45:db:73:77:ca:77:53:88:02:3a:fa:6a:
eb:f1:01:fd:1c:20:53:20:ef:58:a3:54:e4:91:26:c8:f6:02:
de:b6:4e:f3:b3:cf:2a:d1:32:1f:8d:b1:37:88:50:a9:08:77:
87:0d:ca:d9:df:c0:52:56:61:c9:9b:c9:14:3d:df:16:3d:ff:
dc:ee:04:14:4a:96:e5:bf:b1:af:cd:e6:54:b8:48:a1:13:36:
00:11:85:ed:10:de:b7:0c:5f:63:0c:40:92:de:21:1e:8b:cd:
58:32:9a:36:64:65:1b:8f:16:10:52:01:fc:4a:8d:9d:1f:03:
35:37:84:a3:16:29:e8:ba:33:ee:59:a8:07:1c:e1:eb:18:87:
e8:bb:be:66:84:c6:0d:62:96:79:9c:48:a2:df:50:05:44:fa:
84:2c:97:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:44:16 2025 by rpki-client