Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/3a9JKISX1NpjTAcZbeS37fvhGZ8.roa
File: 3a9JKISX1NpjTAcZbeS37fvhGZ8.roa (raw, json)
Hash identifier: ICBSP2O6KBMjvV+Ms0qpHBEVeQDXUYSINePlBAd1BEI=
Subject key identifier: DD:AF:49:28:84:97:D4:DA:63:4C:07:19:6D:E4:B7:ED:FB:E1:19:9F
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 018780527B03B78DB82A40F69C7557CDBE47
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/3a9JKISX1NpjTAcZbeS37fvhGZ8.roa
Signing time: Fri 14 Apr 2023 15:11:41 +0000
ROA not before: Fri 14 Apr 2023 15:11:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12469
IP address blocks: 194.45.183.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:80:52:7b:03:b7:8d:b8:2a:40:f6:9c:75:57:cd:be:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Apr 14 15:11:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ddaf49288497d4da634c07196de4b7edfbe1199f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:46:42:61:ff:9c:ba:4f:92:68:65:1a:20:cd:
b9:77:3d:ac:59:99:1a:48:ac:a8:20:c6:06:f0:4b:
1a:76:b5:fe:b5:f3:2b:af:a0:d3:bb:ad:c2:d8:9f:
57:06:1b:60:b9:d4:02:02:b1:83:d7:d7:5f:d2:08:
84:46:3f:d4:23:8f:04:ec:f6:59:33:f5:74:c8:1e:
34:3d:b9:99:17:16:9b:88:0c:31:2c:36:7f:46:2c:
8d:db:72:45:6a:23:c1:a2:3b:b5:12:a5:51:ef:09:
ce:2c:29:9c:c5:fe:d9:5f:71:63:96:97:e8:96:02:
0b:99:89:57:fa:ab:3f:f4:8d:ad:5d:b8:f0:ee:d0:
ea:06:94:8a:0b:12:00:a1:05:fe:b5:1d:2d:79:3c:
38:dd:30:d4:e2:9c:8f:6c:c6:01:6a:a5:67:6e:2b:
86:07:11:10:11:e4:11:0c:07:ae:7d:98:ad:bd:ea:
d6:4d:6f:b9:32:06:c5:e8:27:38:10:d1:55:f4:52:
17:fd:71:c5:79:06:9b:51:a8:d5:09:ec:91:55:1d:
8e:aa:b2:c3:d7:34:ab:1a:89:5f:a1:ef:19:0f:e2:
53:99:44:f9:3c:c9:85:8b:db:fc:ce:97:70:7c:70:
05:a4:a6:ff:46:9d:93:26:78:fd:74:65:39:95:d0:
d4:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:AF:49:28:84:97:D4:DA:63:4C:07:19:6D:E4:B7:ED:FB:E1:19:9F
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/3a9JKISX1NpjTAcZbeS37fvhGZ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.45.183.0/24
Signature Algorithm: sha256WithRSAEncryption
76:c2:b5:b0:91:47:ea:69:94:77:bb:fa:eb:7b:34:9e:f8:d2:
09:af:0a:12:b2:e9:d3:d0:4b:2d:a5:41:39:bd:f7:73:e6:79:
71:61:be:5a:ab:b5:8c:5c:6f:bb:72:97:c4:a0:ea:f0:76:ae:
4b:b6:e2:df:bf:6a:fa:d7:9b:09:73:1d:2d:ae:ad:8a:e2:72:
46:37:13:cb:e9:ae:26:d7:2b:fe:e8:c7:d2:f6:79:35:d6:71:
93:13:63:58:41:39:85:aa:76:be:30:17:52:ef:0f:5b:e8:a0:
8d:52:e7:7e:e2:0b:57:54:53:6f:b0:08:eb:f9:9b:6b:d9:39:
f3:34:41:c8:70:6b:ea:63:b3:ac:8b:dc:e8:84:38:72:44:e8:
42:cd:a0:53:36:a2:53:db:8f:f6:7a:5e:1d:3e:37:a7:ff:da:
ae:d4:c5:d6:26:8f:d7:8e:2b:3d:9c:28:30:83:e4:2f:75:65:
63:ad:11:7b:25:a9:9b:e1:8b:ea:27:7c:d1:e5:76:25:d7:cf:
61:d6:37:12:74:8f:de:33:ea:0b:4b:94:24:df:7a:f5:31:48:
36:cc:37:3b:1d:94:a7:c0:a6:ea:93:ac:d8:c1:00:96:ae:57:
61:be:f9:b0:ec:75:8f:d5:34:34:b8:8a:f6:5b:de:58:df:01:
c7:e0:0e:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:13:10 2025 by rpki-client