Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/9YefAyLRfB07Pc2jaOg8kISwUN8.roa
File: 9YefAyLRfB07Pc2jaOg8kISwUN8.roa (raw, json)
Hash identifier: 8DJ3NgLtKBgiw6sGPd0s55droNoDgb32cwoSdCmrA0Y=
Subject key identifier: F5:87:9F:03:22:D1:7C:1D:3B:3D:CD:A3:68:E8:3C:90:84:B0:50:DF
Certificate issuer: /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial: 0182580A8F1F8D963B7220DBCE75F717E71E
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/9YefAyLRfB07Pc2jaOg8kISwUN8.roa
Signing time: Mon 01 Aug 2022 06:14:23 +0000
ROA not before: Mon 01 Aug 2022 06:14:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211585
IP address blocks: 194.113.222.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:58:0a:8f:1f:8d:96:3b:72:20:db:ce:75:f7:17:e7:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Validity
Not Before: Aug 1 06:14:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f5879f0322d17c1d3b3dcda368e83c9084b050df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:00:57:eb:5b:77:f1:0b:5b:05:5a:8c:e8:4c:
b1:07:9b:06:70:8d:80:38:58:7f:8f:13:fd:8c:8a:
ef:e3:71:5e:de:4b:5c:c2:e5:14:ad:58:22:4c:6d:
1d:a1:34:5d:7c:32:b9:a7:52:a7:41:9b:d8:13:b3:
28:63:b8:19:03:cc:5f:68:60:29:f0:7f:a0:32:a9:
d0:15:fa:2b:46:14:bd:2b:e2:39:77:ab:ab:fb:a6:
c0:cd:8b:a8:a0:61:3e:f1:8c:42:8e:48:d7:94:bd:
7b:63:36:02:6a:1e:5e:b7:a8:b8:25:c1:4a:57:08:
0d:7f:3f:9f:1e:0e:9f:59:3a:6f:41:e0:e5:ad:f1:
fe:de:fb:0e:de:c7:df:b1:c5:a7:b0:22:3e:09:67:
7f:de:bf:b6:73:6c:95:63:3b:06:6c:9f:73:ca:d3:
36:73:77:af:48:12:11:7f:f8:ff:1f:63:d1:db:d2:
56:e9:32:f8:32:d2:69:2b:a2:e9:36:6d:53:a5:5a:
b1:c1:a4:4c:42:65:b1:59:8e:95:58:80:52:3f:72:
cf:c9:db:7f:76:39:9e:4e:02:45:a2:df:98:bf:78:
f1:11:1a:7d:e9:47:d1:15:15:ae:c8:d3:ea:d6:44:
0b:fa:35:30:68:4c:95:6f:47:4b:45:e7:e3:b9:e1:
f5:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:87:9F:03:22:D1:7C:1D:3B:3D:CD:A3:68:E8:3C:90:84:B0:50:DF
X509v3 Authority Key Identifier:
keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/9YefAyLRfB07Pc2jaOg8kISwUN8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.113.222.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:83:9d:33:17:82:4f:8a:40:a2:99:d6:1a:21:bf:a5:8c:f7:
0c:b5:66:df:9f:22:e3:73:66:e5:e5:ea:ed:c9:3d:16:e2:4a:
a1:56:a7:56:43:8b:70:02:fa:77:ff:60:46:4d:fc:97:73:f3:
b5:fb:b3:f5:13:e5:96:57:90:66:3a:b4:96:d9:02:8b:77:63:
a2:34:7a:80:5d:d9:6d:6a:e8:ce:11:57:24:14:85:23:f5:84:
83:03:f5:e3:a1:76:60:79:0c:e7:04:07:1b:8a:81:cd:ff:7e:
f3:bd:c1:9d:bf:45:d0:26:a5:25:f0:b3:40:91:31:c3:13:3f:
52:ae:c5:f4:6e:d1:c6:c3:9a:85:64:ee:88:71:2f:4d:15:89:
8b:8b:ea:51:c9:7c:5b:79:b3:46:a1:20:7d:15:80:ed:dd:bf:
12:7c:b3:c9:34:cd:a1:04:0d:cf:64:a1:02:48:b3:d6:eb:57:
ad:7e:e0:5f:ae:84:89:6f:0f:fc:19:9a:25:b0:3a:f2:35:69:
67:3d:7f:f0:50:55:bd:8d:76:12:a9:e5:4a:fd:e2:56:f4:a1:
38:d6:6e:3a:a2:80:3b:02:9c:b9:de:b9:a4:48:1b:45:7f:ed:
5c:07:d3:95:85:44:24:80:3e:ed:ac:cf:56:3f:d4:e9:b0:2e:
e2:8c:07:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:12:41 2025 by rpki-client