Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/rFjHIv43M5r7gvJ-LcsZubpErLE.roa
File: rFjHIv43M5r7gvJ-LcsZubpErLE.roa (raw, json)
Hash identifier: PqwiJOL4uSX5Vdoo4QbffixJNrZadMfd4KIhPIQkzms=
Subject key identifier: AC:58:C7:22:FE:37:33:9A:FB:82:F2:7E:2D:CB:19:B9:BA:44:AC:B1
Certificate issuer: /CN=13ecf10b887f085887de8b2db64917ee2e424545
Certificate serial: 04C258AC
Authority key identifier: 13:EC:F1:0B:88:7F:08:58:87:DE:8B:2D:B6:49:17:EE:2E:42:45:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E-zxC4h_CFiH3osttkkX7i5CRUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/rFjHIv43M5r7gvJ-LcsZubpErLE.roa
Signing time: Wed 13 Apr 2022 07:53:44 +0000
ROA not before: Wed 13 Apr 2022 07:53:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58061
IP address blocks: 194.150.211.0/24 maxlen: 24
194.150.210.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79845548 (0x4c258ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13ecf10b887f085887de8b2db64917ee2e424545
Validity
Not Before: Apr 13 07:53:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ac58c722fe37339afb82f27e2dcb19b9ba44acb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:d1:38:58:5a:50:82:e0:6a:1f:4e:a1:1c:62:
47:46:cc:40:70:18:8a:5b:dc:25:fd:35:06:85:68:
18:82:39:3d:16:8b:0a:05:0f:d1:ed:ea:4d:92:52:
ea:03:74:dd:dd:14:35:09:25:10:bf:58:1b:c9:cc:
18:57:0d:85:83:01:be:1d:2f:b9:8f:c3:a4:bb:ed:
b0:d9:3f:40:7a:58:35:f0:dd:31:f6:d8:90:00:cb:
b9:26:0a:85:36:d5:98:79:0b:54:cf:e1:9a:87:ed:
26:ba:03:07:eb:eb:e2:9d:86:8c:7c:a7:3d:c6:f6:
16:12:9b:a6:d5:89:aa:77:a1:8b:10:86:1d:c0:c1:
e3:4a:b0:18:08:41:4f:48:ed:15:5b:da:38:83:90:
30:aa:71:97:65:53:56:1a:ff:3c:65:30:8c:a6:b3:
c7:08:40:e7:8d:99:a6:93:73:af:fe:f8:5e:36:f4:
a3:72:1f:ab:69:0a:b4:a6:48:d8:ad:4a:47:ec:a8:
20:34:dd:12:b6:fd:84:83:54:c4:d8:de:84:15:15:
79:6d:b8:06:1a:81:75:bb:b9:e7:14:4a:ea:17:81:
dd:86:b1:3a:be:75:f1:47:64:c7:9e:be:b0:b5:fb:
61:4c:b3:c9:c1:ab:c5:21:95:1f:f8:7d:ae:41:f4:
16:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:58:C7:22:FE:37:33:9A:FB:82:F2:7E:2D:CB:19:B9:BA:44:AC:B1
X509v3 Authority Key Identifier:
keyid:13:EC:F1:0B:88:7F:08:58:87:DE:8B:2D:B6:49:17:EE:2E:42:45:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-zxC4h_CFiH3osttkkX7i5CRUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/rFjHIv43M5r7gvJ-LcsZubpErLE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/E-zxC4h_CFiH3osttkkX7i5CRUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.150.210.0/23
Signature Algorithm: sha256WithRSAEncryption
38:b7:17:fe:bf:ff:09:d2:e9:fa:fa:2a:d0:21:e0:b1:36:b3:
77:ab:aa:45:7e:91:c2:b2:80:bb:fc:74:f3:f1:18:e1:70:a9:
d7:fb:b5:99:21:15:4e:c9:71:4a:c3:21:73:f3:e5:77:10:44:
b8:ec:78:70:3f:5c:f0:15:e8:2d:99:33:0f:47:b3:c1:c9:f7:
7a:5b:4b:2c:59:f9:a5:8e:32:ab:16:98:6a:45:95:c0:f7:7b:
c2:77:19:7f:7d:3a:7f:91:a4:63:47:75:da:f5:18:ee:8a:14:
e1:03:b1:aa:6a:1f:23:19:b7:b1:1d:05:61:65:3e:31:1c:4c:
01:60:29:19:66:d4:ff:70:8a:3e:33:2f:d4:38:71:b9:16:49:
7f:91:fb:6d:aa:75:86:79:79:80:f8:47:47:99:d6:62:2c:d3:
17:46:bf:ce:f9:cb:b9:47:27:3b:c3:c1:97:ae:6f:f1:47:e3:
e5:74:b3:26:ce:61:9e:ae:7b:f7:30:e3:aa:2a:76:2c:51:8b:
1d:61:9e:88:85:85:83:8d:5a:a7:ce:4b:47:b8:a1:5d:0f:2b:
58:b3:ae:79:49:26:cf:bf:e0:78:34:32:1d:93:37:2c:6d:39:
21:7d:ce:e6:2d:f2:ec:3d:0e:93:36:0d:33:77:44:b9:59:65:
67:de:e8:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:16:38 2025 by rpki-client