Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/78afee-0222-4957-9b7a-6bd62a13c05f/1/1a7e7ONcuu3xHAzt5Oo4EPS2EYI.roa
File: 1a7e7ONcuu3xHAzt5Oo4EPS2EYI.roa (raw, json)
Hash identifier: x9tuijQmd0Jh5INxdtYRDVmxuKtMQ6W8l2KQuZ3hsDg=
Subject key identifier: D5:AE:DE:EC:E3:5C:BA:ED:F1:1C:0C:ED:E4:EA:38:10:F4:B6:11:82
Certificate issuer: /CN=e379e81689ee551e3eadbded4d297aa8e6e5c146
Certificate serial: 01843EE1B45ED8D3A6A8F2C39ECB71A4F59B
Authority key identifier: E3:79:E8:16:89:EE:55:1E:3E:AD:BD:ED:4D:29:7A:A8:E6:E5:C1:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/43noFonuVR4-rb3tTSl6qOblwUY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/78afee-0222-4957-9b7a-6bd62a13c05f/1/1a7e7ONcuu3xHAzt5Oo4EPS2EYI.roa
Signing time: Thu 03 Nov 2022 19:04:49 +0000
ROA not before: Thu 03 Nov 2022 19:04:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207279
IP address blocks: 194.69.163.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:3e:e1:b4:5e:d8:d3:a6:a8:f2:c3:9e:cb:71:a4:f5:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e379e81689ee551e3eadbded4d297aa8e6e5c146
Validity
Not Before: Nov 3 19:04:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d5aedeece35cbaedf11c0cede4ea3810f4b61182
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:1c:4d:1e:fd:6c:8e:cd:51:3a:a5:e9:33:c8:
58:6c:4d:53:64:08:a9:c4:a2:f1:32:0e:9a:ef:4a:
35:fb:89:88:9b:bd:0f:0e:25:f0:f0:ea:b5:b8:4e:
29:7a:df:82:e4:a5:24:c2:5e:4b:8d:f9:bd:79:16:
dd:3b:fe:75:20:63:06:e9:44:1a:a6:7c:9b:5d:fb:
73:3b:b4:a2:a2:6e:21:8f:99:8c:5a:32:55:bf:7c:
4a:f2:86:bc:a7:ec:3a:42:97:aa:f5:96:4f:5d:ed:
fa:42:c4:9b:4d:53:5e:14:4f:83:ee:b6:30:4a:5a:
5f:2e:0b:5e:38:6d:2b:f7:a4:d8:27:ce:77:6f:30:
0e:1a:8b:ee:f8:00:ec:09:67:25:22:ce:37:2f:8a:
fb:20:a3:02:76:2e:01:e6:8e:b6:96:d0:78:99:a4:
61:07:f7:b1:46:79:70:e2:01:1b:87:0b:f7:7d:01:
28:17:a1:b0:cc:5a:5f:8b:59:55:78:73:76:06:37:
e0:bc:5a:d6:bb:d8:7b:54:bf:2a:4f:28:e5:5a:0d:
f6:b0:b3:c5:a1:7f:43:5c:f8:90:28:4b:10:ba:86:
a9:93:45:a9:55:16:e9:3c:21:f5:bf:9b:a1:22:35:
0a:2f:6d:49:ef:c2:2b:67:d9:e2:ed:41:73:c4:06:
74:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:AE:DE:EC:E3:5C:BA:ED:F1:1C:0C:ED:E4:EA:38:10:F4:B6:11:82
X509v3 Authority Key Identifier:
keyid:E3:79:E8:16:89:EE:55:1E:3E:AD:BD:ED:4D:29:7A:A8:E6:E5:C1:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/43noFonuVR4-rb3tTSl6qOblwUY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/78afee-0222-4957-9b7a-6bd62a13c05f/1/1a7e7ONcuu3xHAzt5Oo4EPS2EYI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/78afee-0222-4957-9b7a-6bd62a13c05f/1/43noFonuVR4-rb3tTSl6qOblwUY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.69.163.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:14:77:8f:a6:a2:83:45:57:ae:b4:72:ae:37:6c:6d:75:89:
f5:c6:97:c8:1c:97:9f:9f:8c:66:49:41:2a:d7:9f:3c:04:6a:
61:5e:80:f1:88:84:66:4a:37:91:86:47:c3:ff:2c:94:62:5c:
10:fb:51:a9:82:a3:f4:c3:af:ae:08:9e:c0:e4:5d:ee:f7:d2:
22:62:ad:01:45:29:d6:6e:5e:29:c7:5f:21:49:09:13:2b:3f:
20:c6:93:d4:76:73:1c:0d:dc:0e:94:49:20:85:63:a2:50:7f:
dc:c1:2c:68:8f:02:95:df:60:ae:26:cb:71:9a:28:40:ee:0a:
6d:db:d3:92:d5:a2:6e:0b:37:19:d9:85:b6:b5:bf:63:cc:ab:
9e:ff:55:92:20:e9:4b:e0:de:ee:20:bc:e0:b3:c3:08:4d:0b:
0a:13:02:6f:75:ab:06:d0:ff:47:b8:5e:9e:c3:78:f9:4e:8f:
f6:dd:7a:ae:9b:1e:3f:f1:b4:7c:6a:61:2f:8b:6b:4b:42:5a:
b8:19:01:ea:43:5a:94:8d:c0:c5:72:7e:25:fe:96:ce:0d:bf:
9f:10:26:4b:fc:c6:18:11:58:88:e1:b5:cc:a0:8a:f3:f4:6d:
1c:5f:c6:9e:5a:54:51:06:7a:14:bf:32:d5:05:99:9e:1f:06:
72:b6:f0:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 11:26:13 2025 by rpki-client