Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/n73F6FyRkoRcY7qtBWBLZUdTQCM.roa
File: n73F6FyRkoRcY7qtBWBLZUdTQCM.roa (raw, json)
Hash identifier: Hc7OOfJ1P1YwNllm6DbXiNrgbHMb8QvgbjljPVvUVmc=
Subject key identifier: 9F:BD:C5:E8:5C:91:92:84:5C:63:BA:AD:05:60:4B:65:47:53:40:23
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 01879F2CBC7F427C4A1F1B56A3F2429A5BBB
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/n73F6FyRkoRcY7qtBWBLZUdTQCM.roa
Signing time: Thu 20 Apr 2023 14:58:41 +0000
ROA not before: Thu 20 Apr 2023 14:58:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9033
IP address blocks: 194.122.80.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:9f:2c:bc:7f:42:7c:4a:1f:1b:56:a3:f2:42:9a:5b:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Apr 20 14:58:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9fbdc5e85c9192845c63baad05604b6547534023
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:71:20:f3:06:84:ae:61:5c:5a:23:c0:6c:b3:
7f:93:42:a2:59:b5:f5:14:e6:ee:da:de:27:36:35:
0b:79:dd:ce:f4:2d:a2:61:1e:97:16:26:5c:f9:66:
61:e1:23:ea:db:78:17:a1:33:07:b8:cc:fd:b2:ab:
a4:87:df:05:28:f3:56:f8:b8:bf:ef:6f:81:01:0d:
cb:b8:c5:9c:b1:c6:7a:1f:f7:8d:13:19:96:e6:4b:
48:b3:53:3c:0a:1a:f2:c3:1a:59:95:52:76:26:43:
4b:5f:17:a5:31:75:39:1f:1a:ca:e8:6f:e3:43:dc:
41:5a:d9:90:26:de:9a:06:44:5c:93:f1:98:39:15:
50:4b:76:3e:ff:43:4a:5f:6b:49:fa:ac:6b:4f:69:
2a:74:85:96:36:f6:e0:75:99:21:c9:ee:8e:86:c7:
40:9c:c3:92:28:50:30:b0:fe:fb:04:e5:f0:51:00:
c7:0b:e9:11:85:79:5e:70:09:0f:67:3d:0f:f7:94:
d9:6c:96:33:f5:03:9c:b4:63:b6:26:2c:01:0c:6b:
8a:b6:a7:95:ac:1a:a2:fb:7c:5e:25:a6:04:2c:a5:
88:bf:6f:af:84:ae:8f:c1:fd:7e:da:85:b3:a1:4b:
b3:3a:62:6f:c1:83:9c:65:93:50:6d:11:cc:73:74:
b5:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:BD:C5:E8:5C:91:92:84:5C:63:BA:AD:05:60:4B:65:47:53:40:23
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/n73F6FyRkoRcY7qtBWBLZUdTQCM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.122.80.0/22
Signature Algorithm: sha256WithRSAEncryption
3c:11:a6:21:25:28:1f:27:ec:39:de:1c:51:b3:05:c0:ba:20:
a6:1f:d6:6a:33:6f:d9:12:22:16:cb:92:0a:ed:a2:92:4f:8e:
dc:fb:31:73:46:83:0d:62:5c:d1:66:88:cb:ab:5b:c9:ae:49:
0b:2f:59:20:f2:8a:86:61:9f:74:1e:d2:53:32:86:ea:86:df:
36:32:48:04:72:7a:87:fc:41:1a:bb:99:d0:8d:91:57:83:70:
56:39:51:a8:38:27:6a:b5:e2:50:13:48:5f:b6:c3:f7:38:f0:
1f:a7:4e:6b:e1:99:57:e1:94:6e:bf:66:a5:35:a8:08:9f:19:
22:47:d1:97:25:83:83:35:fd:42:63:95:7b:80:15:ca:a6:47:
d7:bd:af:c9:32:0d:39:46:6f:7b:d6:44:af:84:ab:ee:f3:3a:
15:ea:8f:fc:7d:7f:a5:d4:a7:d2:91:fe:e4:40:28:74:72:f2:
29:93:4c:53:ed:5c:56:b9:73:ff:f9:e2:f0:16:9f:aa:50:18:
2d:42:ab:7f:f8:04:56:8b:e1:db:f5:8e:17:e2:d7:dd:55:cc:
4f:72:32:8d:63:8e:29:ea:16:33:6c:a0:58:ff:ec:c2:eb:d4:
fd:95:71:08:8d:52:42:3e:4c:f8:3c:60:cd:92:87:81:ef:e9:
bd:56:50:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:17:09 2025 by rpki-client