Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/d281cd-ef77-4b0a-bd0c-6f87b96de0db/1/Ip76d2qlw7GvT6qL_2600Yj3nkQ.roa
File: Ip76d2qlw7GvT6qL_2600Yj3nkQ.roa (raw, json)
Hash identifier: iHe99L1sS2k+B+wLNco6KYt4qMtsljEMYy+eauu6KiA=
Subject key identifier: 22:9E:FA:77:6A:A5:C3:B1:AF:4F:AA:8B:FF:6E:B4:D1:88:F7:9E:44
Certificate issuer: /CN=b15e52fc773614a56fb83d8c883f9d7f913db87b
Certificate serial: 0A177FB1
Authority key identifier: B1:5E:52:FC:77:36:14:A5:6F:B8:3D:8C:88:3F:9D:7F:91:3D:B8:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sV5S_Hc2FKVvuD2MiD-df5E9uHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/d281cd-ef77-4b0a-bd0c-6f87b96de0db/1/Ip76d2qlw7GvT6qL_2600Yj3nkQ.roa
Signing time: Sat 01 Jan 2022 11:02:14 +0000
ROA not before: Sat 01 Jan 2022 11:02:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31400
IP address blocks: 194.187.164.0/22 maxlen: 22
194.143.134.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 169312177 (0xa177fb1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b15e52fc773614a56fb83d8c883f9d7f913db87b
Validity
Not Before: Jan 1 11:02:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=229efa776aa5c3b1af4faa8bff6eb4d188f79e44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:34:35:21:ad:b7:c4:2e:9c:3e:03:0e:f5:e8:
fd:16:3a:5a:9e:ce:18:c6:93:b5:60:6e:eb:3d:a0:
14:80:d8:9b:4e:b6:b3:28:17:63:90:7e:dc:3f:cc:
e9:37:4f:7d:be:c3:29:36:bb:fd:af:41:87:52:44:
98:7e:6f:51:48:6b:fc:0b:c2:82:13:be:3f:1a:b6:
1c:72:8f:8d:28:46:c1:2a:29:6d:3a:9f:95:5e:e3:
b3:3c:c9:93:d2:c4:04:c3:02:43:34:15:03:7f:1d:
94:b4:20:7e:24:67:b3:de:b3:ef:67:32:bb:9e:ec:
63:9b:8e:1f:b7:81:4d:72:30:59:19:fc:49:7c:e4:
c6:23:d6:c8:c2:d4:b3:a1:26:b2:d0:74:ef:78:87:
09:29:b8:36:7c:2b:d0:fa:a4:5f:55:9c:ea:e1:02:
49:e3:74:ba:fe:13:4c:db:1b:4b:5c:2f:54:61:7e:
00:95:3b:11:35:ce:8b:7e:65:4e:46:8b:f2:1e:16:
14:50:5a:d2:ba:5b:9b:28:87:c0:97:d5:81:98:3c:
9f:7a:fe:d3:26:7d:57:2c:0b:33:3c:a1:ea:f7:0f:
da:0e:65:ad:2c:e4:8d:dd:08:bb:a4:9d:f7:9d:96:
da:c7:e3:1c:9d:9e:e3:08:b0:a6:48:f0:d4:d9:f7:
a3:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:9E:FA:77:6A:A5:C3:B1:AF:4F:AA:8B:FF:6E:B4:D1:88:F7:9E:44
X509v3 Authority Key Identifier:
keyid:B1:5E:52:FC:77:36:14:A5:6F:B8:3D:8C:88:3F:9D:7F:91:3D:B8:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sV5S_Hc2FKVvuD2MiD-df5E9uHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/d281cd-ef77-4b0a-bd0c-6f87b96de0db/1/Ip76d2qlw7GvT6qL_2600Yj3nkQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/d281cd-ef77-4b0a-bd0c-6f87b96de0db/1/sV5S_Hc2FKVvuD2MiD-df5E9uHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.143.134.0/23
194.187.164.0/22
Signature Algorithm: sha256WithRSAEncryption
9e:1e:26:92:9e:07:bd:84:02:1d:09:64:8f:45:a9:5b:16:75:
3b:41:36:38:65:93:e9:8c:c0:1a:c5:13:53:35:e4:27:11:1a:
f4:0b:ff:7f:b1:fa:98:5b:47:b6:ed:24:34:78:7e:f6:b9:bc:
7c:9c:5e:a3:28:8c:40:17:fd:6c:bd:7c:01:55:f2:b5:53:bb:
88:04:09:5c:bc:8d:05:b5:f9:57:66:a6:2d:90:49:9b:b9:6f:
94:e4:86:00:c8:e0:0d:48:10:a8:36:2f:61:0a:ce:71:23:22:
8a:39:e7:e9:47:29:36:ec:b2:aa:1e:13:18:9a:7c:84:77:38:
84:7e:63:be:30:ac:ed:a1:30:98:63:02:ed:77:8a:55:5e:d5:
39:ad:85:73:62:33:63:05:d3:a7:a8:34:61:0f:b1:8f:09:0a:
6b:68:a4:cb:12:e0:45:c7:08:26:f7:dd:be:07:99:b2:bd:4c:
57:13:34:f3:09:d6:e9:89:8f:e7:db:46:e6:5f:da:c3:e4:ff:
6f:dc:f9:65:44:78:31:00:99:7a:3d:f1:cc:20:54:e6:3e:d0:
71:e2:d0:77:a4:37:57:fd:3b:ea:45:be:3c:f9:d7:5d:03:9c:
2f:9f:eb:03:48:85:96:b9:c7:97:ed:ba:11:6d:43:e0:c3:db:
bc:04:07:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:30:53 2025 by rpki-client