Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/78afee-0222-4957-9b7a-6bd62a13c05f/1/i5Bw7UHH5EDOpSqbGLEoPB7PQzQ.roa
File: i5Bw7UHH5EDOpSqbGLEoPB7PQzQ.roa (raw, json)
Hash identifier: dAkTEU99LNQhpxqwtfilPcy2VW59NMZgUWV2joar9xk=
Subject key identifier: 8B:90:70:ED:41:C7:E4:40:CE:A5:2A:9B:18:B1:28:3C:1E:CF:43:34
Certificate issuer: /CN=e379e81689ee551e3eadbded4d297aa8e6e5c146
Certificate serial: 018571277834FD65B097893D70E8115A4C6B
Authority key identifier: E3:79:E8:16:89:EE:55:1E:3E:AD:BD:ED:4D:29:7A:A8:E6:E5:C1:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/43noFonuVR4-rb3tTSl6qOblwUY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/78afee-0222-4957-9b7a-6bd62a13c05f/1/i5Bw7UHH5EDOpSqbGLEoPB7PQzQ.roa
Signing time: Mon 02 Jan 2023 06:24:50 +0000
ROA not before: Mon 02 Jan 2023 06:24:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207279
IP address blocks: 194.69.163.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:27:78:34:fd:65:b0:97:89:3d:70:e8:11:5a:4c:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e379e81689ee551e3eadbded4d297aa8e6e5c146
Validity
Not Before: Jan 2 06:24:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8b9070ed41c7e440cea52a9b18b1283c1ecf4334
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:6f:ee:46:bc:d0:74:e4:2c:64:94:5b:7f:ad:
c0:ca:df:54:42:c6:9e:19:a3:c2:eb:9b:c9:56:49:
58:c3:05:2f:5b:42:8d:02:5d:2f:6f:cc:50:08:c6:
74:eb:5e:4b:dc:5a:e2:d8:aa:2d:4e:1d:01:4a:5f:
cb:63:f6:44:5b:ff:0b:b7:be:8d:1d:73:d0:05:70:
4d:3a:93:27:1f:e9:dc:5d:61:90:00:23:2c:a8:df:
be:f0:21:0d:20:49:52:7b:3a:70:80:b2:2b:b5:7b:
02:cb:2f:17:fa:6c:9f:33:58:52:e0:ed:ef:77:d2:
34:49:38:6d:d6:80:6c:87:08:fd:7f:2a:10:b7:93:
f9:5a:53:e8:32:3a:11:a7:27:3f:21:d2:e1:c9:82:
72:33:79:48:3a:b9:e6:f5:f1:75:7b:b7:a4:f7:ba:
20:4e:dd:ec:0c:95:05:9c:5b:cb:60:57:5c:df:60:
1e:a9:d6:b1:fa:19:b6:3f:f6:fe:18:d9:d1:13:22:
cf:df:29:58:76:29:55:db:ec:2e:04:6c:91:dc:63:
bd:34:e1:74:3c:cf:fe:be:06:ae:24:96:57:66:f7:
3c:60:c5:3e:d7:b5:e6:78:60:96:a3:02:91:3d:fd:
d3:5a:f2:c2:50:80:11:5d:28:7b:c3:8d:86:d8:b5:
af:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:90:70:ED:41:C7:E4:40:CE:A5:2A:9B:18:B1:28:3C:1E:CF:43:34
X509v3 Authority Key Identifier:
keyid:E3:79:E8:16:89:EE:55:1E:3E:AD:BD:ED:4D:29:7A:A8:E6:E5:C1:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/43noFonuVR4-rb3tTSl6qOblwUY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/78afee-0222-4957-9b7a-6bd62a13c05f/1/i5Bw7UHH5EDOpSqbGLEoPB7PQzQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/78afee-0222-4957-9b7a-6bd62a13c05f/1/43noFonuVR4-rb3tTSl6qOblwUY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.69.163.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:5a:29:48:2f:08:0e:39:d7:6e:0f:b2:7f:0a:bf:1b:86:b4:
22:2c:8e:2c:d9:91:af:d0:40:53:47:95:bc:ef:d3:c9:4f:7e:
9f:c1:e9:52:b5:b4:55:dc:e3:72:62:1f:ef:0f:87:ee:db:8c:
f5:f9:d2:78:6a:9b:0a:68:6c:0b:e6:f8:7a:1a:6f:ee:7f:ea:
4e:fa:23:03:97:b3:84:ec:9b:1a:f9:a0:58:59:7f:96:af:26:
b1:06:f5:4a:b4:ab:3d:4b:96:57:b4:a7:23:f0:1a:1d:6c:97:
a0:bf:22:5b:d7:2d:8c:0e:35:e1:5c:9b:27:ac:9c:07:c0:d9:
72:f2:99:06:da:72:4e:45:ab:1e:be:d6:d1:d0:f1:45:bf:bb:
1e:a5:02:03:a9:31:d4:3b:37:23:1d:bc:54:46:34:ea:e9:3d:
29:2a:06:f1:ff:d8:20:ab:19:46:03:40:c2:74:3c:be:b2:77:
52:09:5b:35:00:95:1d:e2:81:68:42:58:e7:4f:46:c8:73:7a:
a9:af:9e:e3:da:83:c8:a9:c2:18:3d:a3:10:bc:c7:98:c6:a0:
cf:7e:0c:2b:2c:56:f9:85:54:0d:7d:46:6f:b1:a5:a8:ba:eb:
58:89:fb:16:84:e5:e4:64:5c:fa:c2:b6:b0:bf:8e:bb:69:95:
7a:14:e3:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 11:41:39 2025 by rpki-client