Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/67d3b8-c43d-44b7-afa6-8b9cddb73408/1/c4aHygP0MlyICqEGQ-wqCXlrQsk.roa
File: c4aHygP0MlyICqEGQ-wqCXlrQsk.roa (raw, json)
Hash identifier: EGHFrWMQQnAqECgfFzA2nIf1B4zV/BnUjZY1JEmiqgA=
Subject key identifier: 73:86:87:CA:03:F4:32:5C:88:0A:A1:06:43:EC:2A:09:79:6B:42:C9
Certificate issuer: /CN=38401e58890bf230dcae5d0305119ff2c2b8d433
Certificate serial: 018CCA990F67918087C47B7937CCEE09954C
Authority key identifier: 38:40:1E:58:89:0B:F2:30:DC:AE:5D:03:05:11:9F:F2:C2:B8:D4:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OEAeWIkL8jDcrl0DBRGf8sK41DM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/67d3b8-c43d-44b7-afa6-8b9cddb73408/1/c4aHygP0MlyICqEGQ-wqCXlrQsk.roa
Signing time: Tue 02 Jan 2024 14:34:37 +0000
ROA not before: Tue 02 Jan 2024 14:34:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51628
IP address blocks: 192.145.99.0/24 maxlen: 24
2a09:6280:2::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:99:0f:67:91:80:87:c4:7b:79:37:cc:ee:09:95:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38401e58890bf230dcae5d0305119ff2c2b8d433
Validity
Not Before: Jan 2 14:34:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=738687ca03f4325c880aa10643ec2a09796b42c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a7:03:5c:f4:70:a6:04:f4:ea:73:0a:0c:47:
ed:a3:e8:15:6c:fe:6a:d6:ca:57:c4:11:85:fb:74:
62:1d:f3:97:4c:26:3c:1f:0a:c4:d4:f4:fd:cd:fd:
a0:76:39:e2:9d:ce:58:4e:51:eb:18:7b:e9:1a:39:
b7:e5:80:e3:ff:60:bd:e3:8c:a0:4a:20:46:27:3d:
03:44:82:49:2f:f0:a2:f6:2d:d0:b4:d2:cb:0b:30:
d9:0d:a0:ff:43:f0:ed:d6:6d:2e:13:ab:52:b2:49:
92:fd:7d:97:28:4f:42:97:c4:59:75:c3:9f:3e:d7:
09:29:0d:10:2f:d1:2a:50:5f:7f:40:2f:7f:7c:ea:
37:d7:66:af:f4:0d:3f:36:dc:d7:16:2e:3f:88:72:
e6:28:f7:4c:dd:63:b2:8f:49:36:84:0c:52:3b:af:
7e:6a:11:d3:17:ad:2c:fe:21:91:ce:74:b2:8f:fd:
6b:f3:73:a2:9a:32:4b:1a:0f:6c:d6:58:fd:68:b6:
fe:83:af:15:1d:2a:85:57:ae:10:ec:03:1e:e1:d0:
18:61:84:5c:cf:d8:47:bf:be:0c:83:5a:30:9b:f8:
80:2b:a6:ad:2b:91:a4:28:a2:92:77:ff:6f:cc:20:
f2:92:84:b9:14:58:f9:e7:a6:70:74:c1:70:43:02:
ed:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:86:87:CA:03:F4:32:5C:88:0A:A1:06:43:EC:2A:09:79:6B:42:C9
X509v3 Authority Key Identifier:
keyid:38:40:1E:58:89:0B:F2:30:DC:AE:5D:03:05:11:9F:F2:C2:B8:D4:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OEAeWIkL8jDcrl0DBRGf8sK41DM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/67d3b8-c43d-44b7-afa6-8b9cddb73408/1/c4aHygP0MlyICqEGQ-wqCXlrQsk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/67d3b8-c43d-44b7-afa6-8b9cddb73408/1/OEAeWIkL8jDcrl0DBRGf8sK41DM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.145.99.0/24
IPv6:
2a09:6280:2::/48
Signature Algorithm: sha256WithRSAEncryption
95:28:d6:46:51:59:d2:75:8e:de:df:34:60:09:cc:66:d1:b5:
e8:bf:21:8a:c8:b6:7a:cc:68:b8:48:e7:3a:b7:61:0e:68:18:
be:46:06:6a:6c:b6:1a:76:39:6b:5a:c2:2f:f7:87:d3:c9:bc:
40:64:29:06:f7:93:e1:e0:bd:d4:c0:af:0f:dc:83:84:32:74:
33:cd:67:4e:7e:9f:fd:a4:8a:fd:06:3e:f6:f0:b2:62:71:0f:
ca:e8:c3:50:d2:86:15:a1:f6:b0:ee:23:8e:1d:b1:a1:9d:8e:
07:9a:6e:f1:55:b0:bb:db:be:79:9b:81:50:92:c0:48:22:d0:
87:d7:7a:8b:b9:ba:ee:2c:52:38:df:1f:fa:ef:cb:3e:89:51:
55:1a:8d:75:ad:3b:e3:2d:c7:e0:d1:3c:0a:04:75:99:7c:c5:
c8:9d:f8:6e:cc:20:10:dc:1c:f6:a9:23:b8:75:4f:9f:86:ab:
5d:c4:d8:4a:ff:4e:9c:42:82:df:34:ca:82:ad:da:64:a5:8d:
17:35:bd:26:db:07:ff:23:fd:f3:15:c7:c4:94:b8:e8:c7:2e:
f7:6d:99:4c:66:90:80:bf:09:a8:29:62:df:bb:b3:44:65:66:
4e:43:7a:2a:d8:a3:fd:58:8e:ee:2b:b9:a4:57:87:60:8d:3e:
fb:a3:d8:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:13:30 2025 by rpki-client