Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/78afee-0222-4957-9b7a-6bd62a13c05f/1/zUwBtHggqdJq7ndGC2uopRidv1I.roa
File: zUwBtHggqdJq7ndGC2uopRidv1I.roa (raw, json)
Hash identifier: Lc5DPOkcJW50dkMl3uNev9qGu6ofxhoqHyHfnL2ao/Q=
Subject key identifier: CD:4C:01:B4:78:20:A9:D2:6A:EE:77:46:0B:6B:A8:A5:18:9D:BF:52
Certificate issuer: /CN=e379e81689ee551e3eadbded4d297aa8e6e5c146
Certificate serial: 0183925D8F8E511D988804430AC8EDA6704B
Authority key identifier: E3:79:E8:16:89:EE:55:1E:3E:AD:BD:ED:4D:29:7A:A8:E6:E5:C1:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/43noFonuVR4-rb3tTSl6qOblwUY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/78afee-0222-4957-9b7a-6bd62a13c05f/1/zUwBtHggqdJq7ndGC2uopRidv1I.roa
Signing time: Sat 01 Oct 2022 07:05:48 +0000
ROA not before: Sat 01 Oct 2022 07:05:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207279
IP address blocks: 194.69.163.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:92:5d:8f:8e:51:1d:98:88:04:43:0a:c8:ed:a6:70:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e379e81689ee551e3eadbded4d297aa8e6e5c146
Validity
Not Before: Oct 1 07:05:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cd4c01b47820a9d26aee77460b6ba8a5189dbf52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:6c:2a:db:4a:4e:17:2b:cd:9f:81:e5:3a:63:
98:99:5f:1d:73:69:3d:5b:a0:6d:5c:e9:f7:3e:e1:
a4:94:49:5b:c2:38:d2:a6:92:4e:7f:fc:0b:ab:46:
85:4f:dd:36:f0:89:d7:9e:d2:31:37:68:d6:6d:97:
69:a9:07:d2:f3:f6:bc:a7:4c:a0:41:34:ff:b8:7f:
cd:ba:0a:e9:92:d7:eb:27:58:b8:aa:63:31:08:fd:
20:0e:9a:15:70:52:c3:25:c3:67:91:55:16:c3:b8:
03:f5:16:20:ec:41:8a:6c:5b:6c:5a:84:d4:09:ab:
00:87:aa:bd:33:3c:52:08:fd:3f:aa:61:8e:3c:7a:
fc:2d:d9:f0:a4:65:2e:42:ff:c0:17:02:59:b2:26:
17:6a:30:58:5f:d1:b5:80:16:d7:68:24:86:91:e5:
6b:9d:20:09:5d:50:09:e9:3b:7f:16:c1:d8:19:e6:
16:85:9c:46:27:a7:0d:16:f9:fc:d6:8d:d6:73:f7:
fd:e2:f8:0a:55:8d:2f:17:7c:7d:80:77:2e:1e:83:
8a:d9:2a:21:aa:7b:bb:90:2d:9b:28:e7:08:d2:8d:
83:4d:03:fe:2d:42:4a:07:d5:9a:d4:97:11:c4:ea:
31:92:41:0b:4f:cc:44:ac:52:35:7a:cb:da:5d:78:
34:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:4C:01:B4:78:20:A9:D2:6A:EE:77:46:0B:6B:A8:A5:18:9D:BF:52
X509v3 Authority Key Identifier:
keyid:E3:79:E8:16:89:EE:55:1E:3E:AD:BD:ED:4D:29:7A:A8:E6:E5:C1:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/43noFonuVR4-rb3tTSl6qOblwUY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/78afee-0222-4957-9b7a-6bd62a13c05f/1/zUwBtHggqdJq7ndGC2uopRidv1I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/78afee-0222-4957-9b7a-6bd62a13c05f/1/43noFonuVR4-rb3tTSl6qOblwUY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.69.163.0/24
Signature Algorithm: sha256WithRSAEncryption
82:6c:08:c0:96:b3:92:07:e0:28:1a:52:f2:65:16:00:86:8a:
ef:67:75:ca:41:34:c9:f9:04:3e:c9:c0:b0:f5:8d:19:3c:c3:
90:40:40:cd:99:85:ed:ee:4e:97:ba:7d:c9:c6:24:c1:43:91:
a0:c4:da:4b:3e:9b:2c:d7:3d:99:bf:56:cd:b9:f2:98:78:5e:
91:38:88:66:30:b9:c4:60:43:eb:72:b7:10:fe:f2:20:58:7f:
46:fc:c9:41:11:95:a3:1d:df:32:14:25:5e:e4:64:e1:88:a8:
11:06:89:9c:1b:77:6e:34:29:c0:74:6a:e7:12:f6:e7:63:45:
1a:a8:a3:a8:b2:40:9b:22:9a:ca:e0:78:ea:f2:53:4f:67:2b:
24:cf:4c:54:b1:29:c7:db:1e:7e:66:2b:33:ed:94:ce:dd:d8:
4c:d5:7c:3d:77:1d:49:72:b3:95:a3:2a:95:5d:dc:54:63:e2:
48:be:2c:09:73:02:2b:c0:ef:95:eb:e2:6b:c4:e2:eb:8a:a7:
ea:41:16:1d:44:84:eb:9f:d7:42:33:f7:1f:41:d2:88:e7:66:
94:5f:86:e3:3d:ff:82:cc:9e:3e:97:09:92:fe:8b:2c:7c:a1:
d5:24:16:60:9e:e5:53:8f:f4:c9:ad:5c:cc:8a:dd:82:a6:8d:
a2:e6:07:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:21:35 2025 by rpki-client