Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/7d92bc-152e-4a30-ba95-fc24a61314e6/1/rHqLN-bIg3Z40TkdPTtfKJ23l0w.roa
File: rHqLN-bIg3Z40TkdPTtfKJ23l0w.roa (raw, json)
Hash identifier: aB8e9giy+aJc8gX1Ki86QRD0T/EKmYaJ1R31rkteaW0=
Subject key identifier: AC:7A:8B:37:E6:C8:83:76:78:D1:39:1D:3D:3B:5F:28:9D:B7:97:4C
Certificate issuer: /CN=5ac5b9832d660903a1fb977f6958cef7de09eee5
Certificate serial: 018D877039FE538C2E9D20E62C1E2D29897A
Authority key identifier: 5A:C5:B9:83:2D:66:09:03:A1:FB:97:7F:69:58:CE:F7:DE:09:EE:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WsW5gy1mCQOh-5d_aVjO994J7uU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/7d92bc-152e-4a30-ba95-fc24a61314e6/1/rHqLN-bIg3Z40TkdPTtfKJ23l0w.roa
Signing time: Thu 08 Feb 2024 06:38:15 +0000
ROA not before: Thu 08 Feb 2024 06:38:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205285
IP address blocks: 194.110.140.0/23 maxlen: 23
194.110.148.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:87:70:39:fe:53:8c:2e:9d:20:e6:2c:1e:2d:29:89:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ac5b9832d660903a1fb977f6958cef7de09eee5
Validity
Not Before: Feb 8 06:38:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ac7a8b37e6c8837678d1391d3d3b5f289db7974c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:63:40:9a:07:c4:5b:4f:a6:58:7b:b7:30:58:
d6:93:4d:3f:43:e8:e7:31:56:b7:b3:83:c4:62:3b:
60:91:1c:db:7a:72:db:4c:5b:d2:59:b7:08:c9:c6:
e1:5a:6a:87:72:04:40:93:c2:c0:1e:e2:8c:bd:c0:
9d:a1:88:80:1b:01:bd:1c:7e:93:e3:33:b4:db:5f:
f0:9e:d2:f3:5f:79:d5:3a:63:23:7d:4b:8b:51:2a:
99:eb:65:e8:ac:53:1c:68:90:23:fc:1a:f4:88:77:
62:5a:ec:69:e6:16:98:d3:78:8d:40:28:a3:c4:6d:
eb:dc:38:3f:e5:e7:71:68:2f:49:20:ce:79:86:05:
9c:4e:62:36:89:fd:08:6c:64:c2:7f:13:cf:a8:6b:
16:9d:53:28:5f:7a:85:80:3f:c3:6a:c6:74:6d:2d:
ed:91:42:a5:8f:07:57:74:a8:cc:ea:a9:2e:11:51:
eb:63:ee:fa:70:65:1b:99:de:c0:f3:93:df:53:3e:
8a:1b:0c:c5:90:4b:04:44:d9:cb:2c:6b:b7:e0:1b:
9d:17:21:03:cf:9c:eb:7b:b0:31:c2:74:d3:37:5f:
0e:70:2f:23:3d:7b:c1:88:c7:9b:da:55:84:6b:24:
68:b5:1e:70:36:47:1e:84:f6:02:50:ed:a4:c1:b5:
d0:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:7A:8B:37:E6:C8:83:76:78:D1:39:1D:3D:3B:5F:28:9D:B7:97:4C
X509v3 Authority Key Identifier:
keyid:5A:C5:B9:83:2D:66:09:03:A1:FB:97:7F:69:58:CE:F7:DE:09:EE:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WsW5gy1mCQOh-5d_aVjO994J7uU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/7d92bc-152e-4a30-ba95-fc24a61314e6/1/rHqLN-bIg3Z40TkdPTtfKJ23l0w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/7d92bc-152e-4a30-ba95-fc24a61314e6/1/WsW5gy1mCQOh-5d_aVjO994J7uU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.110.140.0/23
194.110.148.0/23
Signature Algorithm: sha256WithRSAEncryption
8c:ac:bb:0f:29:4b:87:2a:22:15:01:7a:07:dc:59:21:a2:1a:
56:c8:6a:68:69:ef:8e:15:03:50:56:01:f0:95:59:df:60:78:
9b:c4:40:cd:70:a6:10:6d:2a:0a:b1:35:fd:06:f8:17:4f:8c:
51:ae:2c:e6:34:fe:21:e3:65:29:7e:bc:5d:f0:58:4c:ed:d2:
49:2a:23:2b:7a:86:f4:20:59:3b:2f:0b:49:81:a9:79:d3:c2:
50:a5:bb:f1:ae:d6:ab:73:87:0c:30:7f:ff:32:ea:cf:18:d6:
c8:9f:dc:24:26:ea:f8:4a:7e:06:7b:67:dd:41:59:53:6d:f5:
4a:1b:e5:27:86:7d:99:22:28:d2:23:4a:13:47:d1:d2:aa:09:
2a:e8:bd:75:81:5d:18:88:3d:ea:a9:1f:65:ae:36:27:f5:67:
7d:92:57:22:b9:c4:08:c6:34:9f:9e:ad:f8:df:cf:85:49:2a:
94:57:32:1e:03:86:87:21:f8:64:57:34:39:a0:6e:97:19:cd:
f5:7c:4a:bc:7e:8f:d9:90:cb:97:91:9e:d8:10:50:f7:56:de:
e4:8c:26:d9:37:df:b1:93:95:fa:96:36:67:af:83:96:a7:c8:
74:b7:f6:41:10:67:e3:79:c2:0f:46:97:ef:e1:d2:c8:c2:14:
0d:e7:bc:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:44:56 2025 by rpki-client