Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/2597bc-f557-4a86-bc11-b74e8bea3da2/1/25pqGOEJDYVuA_SNjTc6oq5_rxU.roa
File: 25pqGOEJDYVuA_SNjTc6oq5_rxU.roa (raw, json)
Hash identifier: SQIkWTmKt0V+qVrS3nm/1vnNENyN2RqBpOQ+8jCWTrk=
Subject key identifier: DB:9A:6A:18:E1:09:0D:85:6E:03:F4:8D:8D:37:3A:A2:AE:7F:AF:15
Certificate issuer: /CN=c81637fb436432b0bf54499f557b6197848547b6
Certificate serial: 0183F11643D4C0F9DE4B19D23C1D1E5B26CF
Authority key identifier: C8:16:37:FB:43:64:32:B0:BF:54:49:9F:55:7B:61:97:84:85:47:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yBY3-0NkMrC_VEmfVXthl4SFR7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/2597bc-f557-4a86-bc11-b74e8bea3da2/1/25pqGOEJDYVuA_SNjTc6oq5_rxU.roa
Signing time: Wed 19 Oct 2022 16:31:51 +0000
ROA not before: Wed 19 Oct 2022 16:31:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51219
IP address blocks: 194.104.230.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:f1:16:43:d4:c0:f9:de:4b:19:d2:3c:1d:1e:5b:26:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c81637fb436432b0bf54499f557b6197848547b6
Validity
Not Before: Oct 19 16:31:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=db9a6a18e1090d856e03f48d8d373aa2ae7faf15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:cd:3a:3c:90:f9:30:12:c6:3d:fb:c8:5b:13:
08:90:68:a7:3c:44:0c:45:03:9c:e1:d6:fd:74:d9:
5b:3b:e9:fc:4e:8a:0c:22:2a:8a:b8:47:d8:f9:38:
08:76:74:9c:2a:c3:36:a6:bc:40:7f:4c:41:d4:40:
07:c6:29:81:ed:df:82:65:95:1b:48:70:cd:67:eb:
40:5c:9a:c6:07:14:03:1d:c7:5e:18:d7:21:2c:f1:
70:52:c4:28:03:03:19:4f:a7:25:fc:d1:c7:4a:1e:
16:63:73:0c:e6:10:e6:e1:ba:ce:02:08:f2:cd:97:
5e:d9:e3:30:cf:64:f5:fc:07:a0:69:72:09:6d:ff:
98:d7:b7:7e:f9:09:9a:12:31:3d:72:7e:1c:36:1b:
a1:33:f5:d6:7c:d3:e4:f1:d9:17:99:0e:ed:21:8c:
22:e4:20:4a:f9:5c:10:ec:7d:e0:67:dd:de:71:24:
17:74:d9:3b:73:5e:0e:0e:ce:1b:26:f9:7a:80:5c:
a2:50:59:16:da:80:16:65:6d:00:8d:af:ab:19:b3:
83:10:93:22:3e:ea:ed:53:b3:e2:38:ba:5f:a6:00:
28:85:bc:e3:95:b9:c3:69:17:df:9a:fe:02:45:74:
62:5e:3e:c2:3c:59:1c:e1:ee:0e:ed:0c:3d:f3:1c:
c3:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:9A:6A:18:E1:09:0D:85:6E:03:F4:8D:8D:37:3A:A2:AE:7F:AF:15
X509v3 Authority Key Identifier:
keyid:C8:16:37:FB:43:64:32:B0:BF:54:49:9F:55:7B:61:97:84:85:47:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yBY3-0NkMrC_VEmfVXthl4SFR7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/2597bc-f557-4a86-bc11-b74e8bea3da2/1/25pqGOEJDYVuA_SNjTc6oq5_rxU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/2597bc-f557-4a86-bc11-b74e8bea3da2/1/yBY3-0NkMrC_VEmfVXthl4SFR7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.104.230.0/24
Signature Algorithm: sha256WithRSAEncryption
06:da:fa:f0:a2:fc:9c:51:ba:06:e9:cb:4b:87:5c:8b:c5:c4:
eb:7a:57:f7:6e:bb:3d:c7:6c:31:ad:6f:15:b2:23:a3:6c:0d:
d4:74:90:b7:a0:45:58:34:4e:eb:95:3e:0e:e2:4c:ba:ac:31:
2c:2c:bc:f4:9e:7f:4f:fe:9c:71:06:64:99:1b:db:78:ca:a9:
ff:be:d5:bc:cb:ef:a0:44:4a:1c:2a:ed:93:12:3a:b1:3e:ad:
bc:a3:47:b9:fa:b7:7f:bd:e5:3e:47:22:2f:02:8e:40:14:14:
23:62:f9:cd:43:28:f4:f6:71:4a:04:9d:7a:28:39:1e:14:a3:
45:e3:4b:01:3a:5e:ef:4d:2e:85:6f:b4:c7:1c:e6:b6:c5:ef:
0d:84:4d:ff:6f:5e:5b:3d:61:fb:d9:aa:74:a7:74:90:43:27:
cf:07:07:f3:41:cc:05:00:e0:3a:6a:c7:60:29:9c:c9:8b:0d:
cb:f1:a0:8c:11:b5:7d:01:76:9d:1e:54:0e:a9:b1:ea:5f:9f:
2e:bc:19:b9:d7:fc:a4:d0:e9:c5:79:16:d5:7a:54:6f:61:15:
d4:21:99:3a:31:ac:50:c2:e3:38:68:1b:61:dc:97:e6:4b:eb:
d8:58:45:b4:0d:8d:70:69:34:b5:9c:74:1a:b9:0a:ef:54:b3:
1f:1e:88:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:45:08 2025 by rpki-client