Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/dCVoeOE_Og5uE8HgEdLDKoareMY.roa
File: dCVoeOE_Og5uE8HgEdLDKoareMY.roa (raw, json)
Hash identifier: ek8gGxUaHmMvAEA3Q3G+xuqHod0WtWJLo+2sThV+YRA=
Subject key identifier: 74:25:68:78:E1:3F:3A:0E:6E:13:C1:E0:11:D2:C3:2A:86:AB:78:C6
Certificate issuer: /CN=e2d5bb401180e55f5c165d47908dff4fe29a0d86
Certificate serial: 018649558CE757A6771A578666E944AC4B98
Authority key identifier: E2:D5:BB:40:11:80:E5:5F:5C:16:5D:47:90:8D:FF:4F:E2:9A:0D:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tW7QBGA5V9cFl1HkI3_T-KaDYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/dCVoeOE_Og5uE8HgEdLDKoareMY.roa
Signing time: Mon 13 Feb 2023 05:53:08 +0000
ROA not before: Mon 13 Feb 2023 05:53:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211163
IP address blocks: 94.188.180.0/24 maxlen: 24
94.188.181.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:49:55:8c:e7:57:a6:77:1a:57:86:66:e9:44:ac:4b:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2d5bb401180e55f5c165d47908dff4fe29a0d86
Validity
Not Before: Feb 13 05:53:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=74256878e13f3a0e6e13c1e011d2c32a86ab78c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e3:6c:38:be:41:0d:f0:89:34:63:6f:99:48:
5a:c8:7c:d9:88:9a:83:44:a5:9c:01:01:5f:9a:37:
eb:9d:02:98:5c:18:48:71:39:be:3e:5a:81:f3:bd:
e7:cc:23:da:be:be:ef:b3:c0:7d:a2:bb:d4:c3:b0:
04:85:4b:c8:24:6d:ed:95:9d:a9:c5:1c:2f:7c:6b:
ec:5c:2d:d2:ab:e6:10:bd:ab:74:29:05:e3:42:da:
2d:26:a2:a6:d0:a5:99:24:0c:7a:6a:0c:25:5a:78:
73:89:b5:52:a7:4c:9c:19:69:a2:8e:ba:ca:ef:fe:
a7:7f:8a:d6:b7:fe:f3:e4:22:0c:a7:4e:c0:fd:22:
6a:48:62:9a:fb:3c:b2:2c:c9:e0:6f:cd:f3:0e:cb:
57:59:63:d3:13:c8:e8:b3:82:d4:3b:d1:b4:9e:89:
8c:e2:61:29:e5:27:84:92:da:b3:1e:7f:2a:cf:49:
cd:29:bd:7c:eb:be:d2:0b:5b:39:04:2a:f5:ed:c5:
f8:7b:26:a1:ca:f8:b1:50:4d:32:0a:48:a2:98:59:
c7:dc:c8:5d:f4:68:9a:1a:58:59:5a:01:48:54:2f:
17:bc:63:a9:74:f2:b9:c9:a3:e0:41:3c:6e:6a:9b:
71:ac:84:8d:3d:8f:c3:9a:e2:95:e8:7f:0f:51:d4:
c3:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:25:68:78:E1:3F:3A:0E:6E:13:C1:E0:11:D2:C3:2A:86:AB:78:C6
X509v3 Authority Key Identifier:
keyid:E2:D5:BB:40:11:80:E5:5F:5C:16:5D:47:90:8D:FF:4F:E2:9A:0D:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tW7QBGA5V9cFl1HkI3_T-KaDYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/dCVoeOE_Og5uE8HgEdLDKoareMY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.188.180.0/23
Signature Algorithm: sha256WithRSAEncryption
8d:5d:a7:b2:80:75:3a:a8:b3:87:7a:25:2f:df:64:31:d3:b5:
0b:0f:c4:55:a3:04:13:ba:c2:a3:bc:75:a5:62:a7:ee:2e:ae:
2e:de:2f:cb:4a:0a:63:9c:15:24:9e:c5:2b:c1:94:fc:22:83:
19:6c:d9:12:52:63:be:e5:ce:b6:52:71:4f:87:02:14:af:38:
04:d7:e5:46:88:17:28:4f:6c:0e:1a:a1:cd:35:b4:50:af:ff:
38:6f:82:b8:43:9c:34:1d:51:13:7c:09:89:8d:6e:69:5f:83:
b9:12:26:21:5a:92:2b:b9:4d:f2:17:81:fd:27:91:31:d2:e9:
9b:91:38:c1:9e:76:25:d9:c7:6b:de:66:0d:8e:87:67:2c:ed:
6b:c0:b7:1d:db:04:6f:89:3c:23:30:af:8f:db:b7:c2:82:11:
ba:a9:5a:c1:d8:11:f6:57:f2:4a:01:66:49:74:d5:ec:60:7a:
b4:00:5a:a5:4c:e8:14:2a:de:50:38:56:9a:26:d2:61:4d:a3:
72:49:82:8c:90:1b:3a:b1:f5:e5:52:81:5f:fb:86:d9:b8:f5:
f4:af:3c:3b:b7:6f:bb:c8:b0:00:12:21:52:dd:ad:6c:04:ee:
b4:78:82:77:72:63:7e:bd:e5:31:c9:dd:dc:ca:ea:65:66:d4:
33:82:ca:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:16:16 2025 by rpki-client