Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/55ebd7-5fb8-4011-bce6-bd1102bb8c1b/1/xRFAg1MhqdGmK_G-BSYpvAPgtGg.roa
File: xRFAg1MhqdGmK_G-BSYpvAPgtGg.roa (raw, json)
Hash identifier: IcYJBdDTcGaSYpRnA53NkosHRUejvtYkodvGU//j8bY=
Subject key identifier: C5:11:40:83:53:21:A9:D1:A6:2B:F1:BE:05:26:29:BC:03:E0:B4:68
Certificate issuer: /CN=23404052b8ca972bbb2ff6a813ca41e8a9559eca
Certificate serial: 06DD1703
Authority key identifier: 23:40:40:52:B8:CA:97:2B:BB:2F:F6:A8:13:CA:41:E8:A9:55:9E:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I0BAUrjKlyu7L_aoE8pB6KlVnso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/55ebd7-5fb8-4011-bce6-bd1102bb8c1b/1/xRFAg1MhqdGmK_G-BSYpvAPgtGg.roa
Signing time: Sat 01 Jan 2022 10:57:08 +0000
ROA not before: Sat 01 Jan 2022 10:57:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44865
IP address blocks: 194.116.242.0/23 maxlen: 23
2001:67c:2b50::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115152643 (0x6dd1703)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23404052b8ca972bbb2ff6a813ca41e8a9559eca
Validity
Not Before: Jan 1 10:57:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c51140835321a9d1a62bf1be052629bc03e0b468
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:38:03:b6:e4:3b:89:a7:41:a5:26:88:40:00:
48:6b:d6:d3:0f:52:b6:4f:60:d7:8a:aa:99:ba:36:
e4:43:92:46:83:ab:60:b5:5d:7f:0d:8e:69:f5:86:
92:6f:f3:a6:34:9d:ca:9a:43:51:d5:6e:e1:c8:43:
33:0f:4e:81:32:6f:1f:d6:00:e5:3c:0e:e4:10:88:
62:c1:c8:40:48:d7:e0:76:f9:aa:0a:88:bc:6e:c6:
73:0b:93:b2:ea:85:ad:a7:4f:50:c9:1d:db:a0:da:
cb:c5:72:52:f1:63:19:a2:5f:3b:2c:eb:43:50:8a:
84:0e:f6:20:d0:d1:bf:ce:f7:a9:9c:ae:d3:1a:09:
01:95:e0:cd:7e:07:f1:b7:c1:ca:ee:f3:06:a9:5f:
1e:06:b6:f8:9d:22:20:9b:14:04:f2:c3:e9:02:a3:
8f:52:0e:d5:92:0c:59:f8:37:80:b2:8a:8f:cf:cf:
3d:6f:61:b0:20:c7:41:a6:82:6e:41:12:e9:94:28:
4b:9c:fe:30:6c:a6:46:a1:48:e7:05:ae:2b:e7:d3:
a9:09:47:ff:a5:dc:d6:39:b2:ca:08:b0:f9:94:49:
27:89:75:f5:f1:a2:dc:12:cb:19:bb:a0:42:f0:88:
8d:e9:68:19:a6:10:ac:a7:5e:64:03:63:7e:4e:f4:
a7:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:11:40:83:53:21:A9:D1:A6:2B:F1:BE:05:26:29:BC:03:E0:B4:68
X509v3 Authority Key Identifier:
keyid:23:40:40:52:B8:CA:97:2B:BB:2F:F6:A8:13:CA:41:E8:A9:55:9E:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0BAUrjKlyu7L_aoE8pB6KlVnso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/55ebd7-5fb8-4011-bce6-bd1102bb8c1b/1/xRFAg1MhqdGmK_G-BSYpvAPgtGg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/55ebd7-5fb8-4011-bce6-bd1102bb8c1b/1/I0BAUrjKlyu7L_aoE8pB6KlVnso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.116.242.0/23
IPv6:
2001:67c:2b50::/48
Signature Algorithm: sha256WithRSAEncryption
08:52:81:a5:70:5c:96:69:23:13:cc:fe:3b:c3:d0:5e:f9:0d:
e8:f7:c2:6d:3b:fd:34:82:ec:25:1d:bb:ec:0b:ae:fb:a3:7d:
c6:59:fd:78:51:32:1a:1a:92:0a:1d:86:72:81:73:fe:44:65:
2b:cc:4b:b9:70:f7:31:8e:55:ca:2e:c8:d7:e9:22:60:3e:a0:
4b:31:f8:8b:b3:1d:c0:b2:09:f1:c7:4b:de:95:7c:ff:dd:33:
34:ce:af:76:02:c6:ee:8a:23:9d:7d:91:e8:90:4b:e4:a0:f5:
dd:4a:10:bc:86:ad:85:ef:0c:fb:37:b6:e6:89:1d:09:ab:ce:
89:74:ed:bd:1d:a7:c4:d9:02:ca:d4:80:bd:4c:5e:30:0b:e9:
b5:27:6f:0b:39:99:6b:65:54:d6:b6:22:b0:a7:63:31:b3:52:
60:25:54:e4:cd:1a:e8:55:11:4c:ab:12:6f:ce:cd:08:ac:28:
80:b7:9a:67:13:6f:eb:53:4d:82:10:1c:b9:ff:d8:78:29:45:
b4:ac:59:19:27:8c:86:28:ed:53:60:bc:21:b0:68:f8:bb:bb:
a6:e2:5d:f3:82:e2:bb:c6:06:de:17:b4:cc:ea:9b:d2:53:63:
e8:29:04:b6:8b:1f:b5:bf:ed:ee:93:7e:51:5f:6b:71:42:fe:
e0:ca:f5:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:32:49 2025 by rpki-client