Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/bukj3ZZKmLLkDQUV8OcWK4zJLMo.roa
File: bukj3ZZKmLLkDQUV8OcWK4zJLMo.roa (raw, json)
Hash identifier: TF59/pEwRI09mJUCAF+Vyo37dTGrnME8CZ3x7sz7/E0=
Subject key identifier: 6E:E9:23:DD:96:4A:98:B2:E4:0D:05:15:F0:E7:16:2B:8C:C9:2C:CA
Certificate issuer: /CN=13ecf10b887f085887de8b2db64917ee2e424545
Certificate serial: 0183880B59D04D9132E8288025B585193BD2
Authority key identifier: 13:EC:F1:0B:88:7F:08:58:87:DE:8B:2D:B6:49:17:EE:2E:42:45:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E-zxC4h_CFiH3osttkkX7i5CRUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/bukj3ZZKmLLkDQUV8OcWK4zJLMo.roa
Signing time: Thu 29 Sep 2022 06:59:48 +0000
ROA not before: Thu 29 Sep 2022 06:59:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210703
IP address blocks: 194.150.210.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:88:0b:59:d0:4d:91:32:e8:28:80:25:b5:85:19:3b:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13ecf10b887f085887de8b2db64917ee2e424545
Validity
Not Before: Sep 29 06:59:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6ee923dd964a98b2e40d0515f0e7162b8cc92cca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:4e:72:a8:82:05:86:a7:30:71:1d:e9:68:a3:
69:d3:5c:d0:af:7c:b7:37:df:19:e3:70:19:b6:d4:
f0:77:c6:58:ba:83:f3:e8:8a:a1:ee:e0:d5:f7:1a:
7a:8d:8b:ea:97:ee:d5:62:6c:cd:99:d5:fa:48:b6:
ee:0b:84:6e:4b:90:07:2d:9d:fc:1b:19:d2:e0:7d:
46:1e:8a:08:6a:42:15:fb:0a:63:a0:0e:e6:86:3d:
bb:a3:9a:7c:cc:b1:8e:1b:39:70:52:13:a6:09:2f:
b6:e5:08:ce:de:ca:9a:38:38:58:5f:61:4e:a8:41:
79:1f:47:32:f6:77:f3:ab:22:1c:6e:5f:70:4c:f9:
c7:d9:9e:d0:65:f3:24:9b:12:dc:7c:76:04:ee:16:
54:39:4c:55:17:e5:93:44:dd:e4:38:16:14:43:10:
9c:25:6a:a0:39:52:9a:f1:b4:84:d9:5e:fa:7d:29:
c4:c5:13:6a:09:52:a0:72:23:ca:c6:4e:03:ae:9a:
12:57:63:3b:e7:5a:3a:05:e1:9d:93:08:8f:9b:10:
31:5b:58:b0:bf:91:36:fa:c4:b2:95:28:dd:0e:3e:
e8:cc:19:63:06:f5:aa:a0:9f:eb:a2:66:91:1c:a3:
5a:56:2f:f7:7b:e8:5b:1e:e4:aa:11:e0:9c:74:78:
e6:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:E9:23:DD:96:4A:98:B2:E4:0D:05:15:F0:E7:16:2B:8C:C9:2C:CA
X509v3 Authority Key Identifier:
keyid:13:EC:F1:0B:88:7F:08:58:87:DE:8B:2D:B6:49:17:EE:2E:42:45:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-zxC4h_CFiH3osttkkX7i5CRUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/bukj3ZZKmLLkDQUV8OcWK4zJLMo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/E-zxC4h_CFiH3osttkkX7i5CRUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.150.210.0/24
Signature Algorithm: sha256WithRSAEncryption
55:5b:8e:ba:70:99:28:53:4e:6a:57:48:e6:ef:0d:7e:be:d4:
e6:08:74:66:63:e7:26:0f:f0:f8:93:26:f9:36:f3:82:2c:73:
42:a9:d1:d8:db:28:1c:d7:ac:1c:7d:5c:24:1b:c4:b1:1b:2c:
46:75:1d:73:03:12:d2:9a:c8:10:cf:45:1b:33:12:97:4a:71:
af:17:51:76:a9:b1:26:f9:e1:f1:40:22:98:22:48:49:15:8e:
61:12:29:3f:32:aa:5e:f2:7b:45:04:59:27:9f:09:9b:52:37:
4c:aa:2c:74:7f:8b:42:64:f2:e8:58:b8:d6:95:f3:ca:fd:49:
72:f2:4a:6a:c2:89:2c:fd:7b:96:62:60:ea:65:f6:aa:70:10:
c6:39:17:c3:89:81:a1:b0:7d:3b:91:e1:50:12:fa:b6:04:35:
88:f7:5c:64:7d:07:96:57:ac:1c:7c:17:4c:a2:19:33:df:21:
f7:ec:9a:ec:ff:65:93:41:5d:9b:27:b5:f8:d1:8c:03:70:d1:
2e:35:02:a1:07:18:71:db:57:0a:64:1f:fe:b9:b7:5d:5a:f3:
1e:25:b1:4b:ce:90:8b:1d:ca:58:63:b2:71:79:b5:8a:59:07:
7a:a1:66:08:58:7d:dd:03:3b:8f:b3:ad:f8:4e:98:79:3f:cb:
20:9c:93:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:40:07 2025 by rpki-client