Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/967494-7d6a-488a-a810-fa5d88d546e9/1/uDFhkU8mZNl32YOa5uLQ3C7-HM4.roa
File: uDFhkU8mZNl32YOa5uLQ3C7-HM4.roa (raw, json)
Hash identifier: f+qWpwSGR5LnzwgaFyYs+5Bhnv7ZlPW75eV87iV3bis=
Subject key identifier: B8:31:61:91:4F:26:64:D9:77:D9:83:9A:E6:E2:D0:DC:2E:FE:1C:CE
Certificate issuer: /CN=2a34723b4034fdb79f3698bfd3f71887eb9c37de
Certificate serial: 01856D9D29EB83D3B4E17CD9E71CFE29C1C7
Authority key identifier: 2A:34:72:3B:40:34:FD:B7:9F:36:98:BF:D3:F7:18:87:EB:9C:37:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KjRyO0A0_befNpi_0_cYh-ucN94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/967494-7d6a-488a-a810-fa5d88d546e9/1/uDFhkU8mZNl32YOa5uLQ3C7-HM4.roa
Signing time: Sun 01 Jan 2023 13:54:54 +0000
ROA not before: Sun 01 Jan 2023 13:54:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197518
IP address blocks: 194.104.141.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:9d:29:eb:83:d3:b4:e1:7c:d9:e7:1c:fe:29:c1:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a34723b4034fdb79f3698bfd3f71887eb9c37de
Validity
Not Before: Jan 1 13:54:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b83161914f2664d977d9839ae6e2d0dc2efe1cce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:6b:67:0d:63:78:33:21:6c:bc:c1:8e:3d:3c:
9b:57:e2:c9:45:7d:e6:b5:ee:bc:a2:fb:12:00:06:
d1:1e:98:06:43:70:0e:e0:6a:8b:db:77:db:ea:69:
90:7e:67:66:de:17:f2:34:9c:c9:59:9e:97:41:42:
7e:34:26:37:82:93:8f:41:6b:6c:63:57:e7:6f:96:
97:34:fd:e3:bb:79:d4:c3:f7:e3:5c:c1:6c:22:11:
a6:29:fb:0f:5e:c3:b6:f3:d5:13:71:cc:a3:23:83:
b9:0a:f8:65:d7:49:48:3d:61:ee:0d:92:f5:50:64:
da:17:ef:7d:b5:a9:5f:86:54:f9:34:1d:54:ef:a2:
fd:cb:da:d9:78:5e:d7:4e:6c:21:1d:35:c8:34:80:
25:8b:5d:ec:ce:60:1c:d1:53:aa:e1:5b:8d:42:c2:
bc:e6:1e:e3:18:09:1a:a6:97:00:66:1c:c2:87:b4:
98:45:cc:57:bf:e3:6c:05:6e:e3:c5:9e:c6:ac:fd:
a3:3e:82:91:9d:c9:77:64:d3:38:de:cd:46:cb:9c:
dd:75:37:8a:3b:9f:cb:c5:0c:eb:a0:fc:33:55:5c:
3f:64:96:4a:e8:e9:d9:55:d7:c6:fc:eb:ed:d2:21:
0c:a8:3b:0b:67:af:46:82:d0:3c:92:76:3f:25:0f:
b3:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:31:61:91:4F:26:64:D9:77:D9:83:9A:E6:E2:D0:DC:2E:FE:1C:CE
X509v3 Authority Key Identifier:
keyid:2A:34:72:3B:40:34:FD:B7:9F:36:98:BF:D3:F7:18:87:EB:9C:37:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KjRyO0A0_befNpi_0_cYh-ucN94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/967494-7d6a-488a-a810-fa5d88d546e9/1/uDFhkU8mZNl32YOa5uLQ3C7-HM4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/967494-7d6a-488a-a810-fa5d88d546e9/1/KjRyO0A0_befNpi_0_cYh-ucN94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.104.141.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:b0:ca:be:3a:e7:7e:31:3f:33:7d:91:49:c9:fd:98:0f:91:
4f:48:26:ea:3e:d4:09:14:6b:a4:eb:8f:98:36:e1:d4:ed:45:
e3:e4:ba:20:f0:93:d8:4f:1a:d6:b4:d5:23:53:bc:e6:a5:99:
65:70:f6:fd:f6:d7:34:39:13:bc:64:6e:0b:3b:d5:f3:83:22:
1c:09:ac:c7:61:58:e2:cf:12:20:5e:16:01:1b:00:0f:09:81:
7f:c8:37:5a:fd:75:eb:ab:78:09:1e:ac:cc:a0:92:06:f4:3c:
79:e9:d1:1f:4b:ce:44:80:02:23:23:8d:52:b2:9d:e6:b8:bd:
12:95:64:a4:fc:60:78:c0:bf:45:ac:9f:4d:bf:32:d9:be:c8:
3a:8f:21:52:55:9f:e7:39:f9:c2:c2:b7:e8:02:a4:d1:9a:d4:
0a:52:f9:8e:e3:61:bb:8b:88:90:a2:e6:e7:12:1e:83:59:e7:
0a:a9:36:eb:38:f5:53:68:09:9e:c8:bf:9f:fd:29:f4:76:58:
bf:a3:e1:8a:b7:dd:cf:58:db:a2:77:1b:ed:53:64:fb:0b:3d:
b7:46:a0:6e:28:44:29:1a:61:c2:b5:4d:72:56:62:b2:b8:62:
53:53:76:e9:e4:a1:73:23:bb:17:68:72:c4:2e:0a:d1:e1:9b:
b5:6a:25:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 02:18:58 2025 by rpki-client