Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/7i8nJH8i_-mLJKUkjr20QQAbd30.roa
File: 7i8nJH8i_-mLJKUkjr20QQAbd30.roa (raw, json)
Hash identifier: 7oRxGg3ygIg2IHGe3deWzw/UXZUrmkbQm5SUF71eq4U=
Subject key identifier: EE:2F:27:24:7F:22:FF:E9:8B:24:A5:24:8E:BD:B4:41:00:1B:77:7D
Certificate issuer: /CN=94e59d245d150dc38c4896263dcbdcbbd67470a7
Certificate serial: 018A07A7136FA856400371B26B22874A39D7
Authority key identifier: 94:E5:9D:24:5D:15:0D:C3:8C:48:96:26:3D:CB:DC:BB:D6:74:70:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lOWdJF0VDcOMSJYmPcvcu9Z0cKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/7i8nJH8i_-mLJKUkjr20QQAbd30.roa
Signing time: Fri 18 Aug 2023 07:58:24 +0000
ROA not before: Fri 18 Aug 2023 07:58:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 194.107.163.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:07:a7:13:6f:a8:56:40:03:71:b2:6b:22:87:4a:39:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94e59d245d150dc38c4896263dcbdcbbd67470a7
Validity
Not Before: Aug 18 07:58:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ee2f27247f22ffe98b24a5248ebdb441001b777d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:54:4e:96:2d:62:18:14:f0:d0:19:1c:66:73:
7c:d1:96:bc:39:21:5c:76:07:fa:a7:4e:e2:2a:ce:
c5:d2:de:41:eb:ac:58:1d:5e:9a:92:c7:38:e4:67:
e1:37:e1:74:af:3c:f7:93:cc:b0:37:45:30:b1:74:
88:51:80:38:78:c3:51:2d:3e:1e:f3:e4:65:a8:c2:
96:9a:59:4a:67:9b:fa:6c:41:54:42:13:0b:91:6e:
fc:bb:9b:55:0c:3b:99:66:a6:9f:ff:29:3c:4e:3d:
6f:99:29:bb:24:a7:b3:d0:32:71:a1:f7:7b:28:70:
3a:79:de:26:72:4f:4c:69:67:01:cd:63:18:4e:9a:
10:21:6b:c6:2b:d1:3e:20:2b:0f:91:bb:89:75:7a:
b9:ce:7c:fd:3d:30:df:51:de:43:83:f8:ed:e5:d4:
cc:d8:76:43:b8:dc:7c:51:5d:9c:25:3e:25:d8:75:
d6:ba:64:3b:2e:06:21:b6:fe:34:c8:8d:03:c6:38:
0c:e8:a7:4d:56:da:55:ad:3f:24:5e:04:1f:7e:fe:
a8:49:90:88:83:7f:88:75:65:e6:aa:64:82:87:ea:
a1:4c:27:51:4d:62:b8:cb:c3:71:d2:51:d7:c8:08:
e5:b2:18:27:13:ed:c4:e2:e1:ca:e7:ee:34:b5:e8:
bb:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:2F:27:24:7F:22:FF:E9:8B:24:A5:24:8E:BD:B4:41:00:1B:77:7D
X509v3 Authority Key Identifier:
keyid:94:E5:9D:24:5D:15:0D:C3:8C:48:96:26:3D:CB:DC:BB:D6:74:70:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lOWdJF0VDcOMSJYmPcvcu9Z0cKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/7i8nJH8i_-mLJKUkjr20QQAbd30.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/lOWdJF0VDcOMSJYmPcvcu9Z0cKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.107.163.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:15:04:3c:ac:27:90:38:31:be:4b:68:0b:7f:a0:87:da:23:
91:53:11:b9:4f:e5:d4:26:6a:d1:cc:e8:f2:dd:cc:fc:b2:1d:
3f:ca:5a:e3:e3:05:86:4d:cb:b0:9a:69:d7:43:ec:e8:6b:68:
b0:1e:9f:91:d0:d0:ff:1f:40:9c:04:a0:f6:8d:fb:87:f2:19:
22:ef:dd:3f:e3:10:eb:23:ed:62:0f:a6:67:c7:ce:f9:3f:98:
6d:9c:50:65:a2:4d:22:57:91:3b:77:50:a6:51:49:3b:4c:ef:
a9:fc:22:3a:e1:8a:20:be:7b:f9:13:a9:48:84:48:6a:c8:82:
d7:c5:a6:a5:64:c8:37:6a:d0:a2:93:1f:d6:ae:f2:62:c1:f3:
29:f4:b2:7d:39:21:ed:fb:53:ba:d6:1a:79:85:c4:a1:17:95:
65:3b:cb:70:e6:89:88:e1:6f:42:a6:d8:17:6c:ab:c6:08:e8:
1f:30:67:ef:58:58:9d:fe:f0:bb:3b:54:cb:40:7d:12:5f:26:
60:20:74:d8:cf:c0:e5:a7:f2:d4:b9:ac:90:5b:87:36:55:84:
b6:86:d0:2a:fa:9e:05:61:c7:55:21:cb:e0:96:95:fa:d2:fe:
bc:e4:eb:fd:33:c8:8f:53:6d:12:47:87:11:cb:de:45:79:22:
21:45:8c:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:30:23 2025 by rpki-client