Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/d281cd-ef77-4b0a-bd0c-6f87b96de0db/1/G0n_AFt1XMkfJq-32YgTmPyDvIk.roa
File: G0n_AFt1XMkfJq-32YgTmPyDvIk.roa (raw, json)
Hash identifier: nnO5QBB90x0zT04aiyJePTCQClLpV7b/t6fQW3W/rE8=
Subject key identifier: 1B:49:FF:00:5B:75:5C:C9:1F:26:AF:B7:D9:88:13:98:FC:83:BC:89
Certificate issuer: /CN=b15e52fc773614a56fb83d8c883f9d7f913db87b
Certificate serial: 0A851203
Authority key identifier: B1:5E:52:FC:77:36:14:A5:6F:B8:3D:8C:88:3F:9D:7F:91:3D:B8:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sV5S_Hc2FKVvuD2MiD-df5E9uHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/d281cd-ef77-4b0a-bd0c-6f87b96de0db/1/G0n_AFt1XMkfJq-32YgTmPyDvIk.roa
Signing time: Wed 16 Feb 2022 17:16:45 +0000
ROA not before: Wed 16 Feb 2022 17:16:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44066
IP address blocks: 194.187.164.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 176493059 (0xa851203)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b15e52fc773614a56fb83d8c883f9d7f913db87b
Validity
Not Before: Feb 16 17:16:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1b49ff005b755cc91f26afb7d9881398fc83bc89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:62:69:87:52:dd:c2:e1:c4:8b:ea:39:bb:ec:
b6:ec:6f:bc:93:7a:55:90:c2:62:ac:fa:73:d7:fb:
a2:36:59:8d:54:e0:cd:97:a3:64:c0:95:bc:86:a8:
f1:3c:63:fc:67:b4:f4:69:24:af:23:58:d0:9f:81:
b4:e4:37:c7:58:c9:1c:3c:15:ae:4d:93:23:18:a5:
8c:6b:35:db:c5:18:a5:53:81:e6:b9:c4:74:ec:5c:
c1:de:94:09:f2:9d:86:b7:ec:5e:a2:e0:ba:a4:61:
c1:84:3a:26:7e:83:97:58:c5:97:d2:58:54:e4:dc:
a9:1d:cb:8e:b1:94:43:da:79:7c:fa:b5:54:51:fd:
a4:d9:d2:51:79:aa:d4:62:95:e4:e2:ac:c0:6f:0c:
c0:bd:71:bd:80:2c:8f:1f:74:ba:8f:3a:c1:15:64:
96:47:45:b7:9c:11:64:95:b3:5b:a0:4b:02:7d:9a:
9a:f3:20:ad:d7:81:af:33:5b:05:4a:01:a1:4e:86:
45:36:0f:8a:8d:dc:9b:89:c6:ad:0e:60:1b:f1:b8:
9e:30:46:8d:9b:32:ac:f4:7e:40:58:e1:b2:4e:f0:
07:ca:d2:fc:c6:84:d3:4b:11:04:df:73:71:53:c5:
0c:f9:05:fa:ea:ea:8d:92:a5:b0:05:78:a6:58:5e:
48:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:49:FF:00:5B:75:5C:C9:1F:26:AF:B7:D9:88:13:98:FC:83:BC:89
X509v3 Authority Key Identifier:
keyid:B1:5E:52:FC:77:36:14:A5:6F:B8:3D:8C:88:3F:9D:7F:91:3D:B8:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sV5S_Hc2FKVvuD2MiD-df5E9uHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/d281cd-ef77-4b0a-bd0c-6f87b96de0db/1/G0n_AFt1XMkfJq-32YgTmPyDvIk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/d281cd-ef77-4b0a-bd0c-6f87b96de0db/1/sV5S_Hc2FKVvuD2MiD-df5E9uHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.187.164.0/22
Signature Algorithm: sha256WithRSAEncryption
3f:37:69:6b:a7:f7:5e:23:58:33:bd:81:a1:bf:2c:6d:d4:4e:
09:78:a0:15:ab:7d:85:1f:f5:f3:b7:53:e9:95:02:f9:81:13:
5b:f5:a3:42:4e:14:fe:4b:db:11:7d:bc:9d:bc:32:98:b1:2d:
a8:0d:2e:52:73:f2:1f:af:c6:68:43:39:de:c3:29:01:3a:1d:
06:13:f9:ee:3c:9f:3c:54:e0:af:76:fa:eb:0a:5a:41:ff:ef:
f1:a6:55:57:3e:fb:bf:de:ed:ea:24:2b:af:98:fe:cd:a1:9f:
73:06:0a:64:e4:6f:77:88:56:e1:a5:1a:16:4a:70:a6:f1:5a:
aa:89:4f:74:91:b9:0b:b6:8f:4d:57:a8:0f:ee:29:c6:db:2e:
26:0b:af:86:c5:8a:9b:18:25:fd:1f:c2:75:15:0e:31:8b:1d:
22:d6:c8:08:4a:e9:c1:ac:b1:98:86:2a:09:79:c6:4c:44:80:
a4:9e:d6:92:0e:f7:e2:b2:03:13:22:e1:bc:f2:bf:28:a0:46:
50:75:48:15:ef:df:ef:2f:b1:f4:88:2f:94:19:36:3d:7c:ef:
cb:db:87:4d:5d:cc:25:24:fb:6a:5e:ca:a5:78:9e:46:87:7b:
b7:b8:70:bd:ce:8c:8b:dd:9c:26:75:2a:86:c1:62:ba:0f:78:
62:f0:d8:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:19:48 2025 by rpki-client