Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/70408e-9d44-4783-9bff-a1d176fedb86/1/pHdPsvgJom2qxKJTTuhZooiUNrE.roa
File: pHdPsvgJom2qxKJTTuhZooiUNrE.roa (raw, json)
Hash identifier: Bq8p9Wo49BxvloBbfsTNnOQpaXeHh0plmV7icVbyMGI=
Subject key identifier: A4:77:4F:B2:F8:09:A2:6D:AA:C4:A2:53:4E:E8:59:A2:88:94:36:B1
Certificate issuer: /CN=c27822e22bffa312b871d0ab93a9e8eb1c44ceea
Certificate serial: 01856FF052504DD3A2A19D103C433222C348
Authority key identifier: C2:78:22:E2:2B:FF:A3:12:B8:71:D0:AB:93:A9:E8:EB:1C:44:CE:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wngi4iv_oxK4cdCrk6no6xxEzuo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/70408e-9d44-4783-9bff-a1d176fedb86/1/pHdPsvgJom2qxKJTTuhZooiUNrE.roa
Signing time: Mon 02 Jan 2023 00:44:58 +0000
ROA not before: Mon 02 Jan 2023 00:44:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50137
IP address blocks: 193.104.150.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:f0:52:50:4d:d3:a2:a1:9d:10:3c:43:32:22:c3:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c27822e22bffa312b871d0ab93a9e8eb1c44ceea
Validity
Not Before: Jan 2 00:44:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a4774fb2f809a26daac4a2534ee859a2889436b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:a8:c0:2f:7b:ec:78:ed:d7:40:4b:42:77:21:
ec:08:cf:a0:a9:d7:63:ed:fc:73:cc:75:ae:01:86:
a0:19:33:d5:fa:72:b8:a7:05:76:5d:bf:c4:a1:11:
47:15:8f:eb:c7:c7:77:dd:2d:65:3c:0b:66:4e:00:
af:76:2a:c8:d6:3e:7d:a2:a5:be:43:44:5a:21:b9:
ed:60:de:84:76:0a:b3:a1:f5:a8:d9:62:e9:92:e7:
65:4d:5b:b4:7e:bf:af:fc:cd:f8:af:3e:9a:ad:99:
28:9c:1d:c8:d8:b5:5f:b0:1c:93:23:90:58:f9:df:
e8:5b:ac:b0:6f:62:c4:5a:5a:0a:9c:f4:24:24:7b:
e3:e1:ec:04:99:f5:2f:a6:12:10:b4:8a:7c:78:2f:
66:2b:ce:6a:80:be:d7:69:b6:c3:86:16:74:4f:d0:
5e:de:40:12:bc:ff:6c:9c:00:50:51:09:a5:36:49:
d0:41:40:83:61:b4:2d:09:8b:ac:0d:6a:2d:32:fe:
4e:35:b5:06:7a:cf:2b:06:bc:5c:31:62:66:78:2e:
f5:d9:b6:e1:31:15:e8:68:e1:75:26:fa:1e:42:c9:
25:cc:a8:8d:67:d6:ae:26:38:f9:85:ae:dd:db:c3:
91:73:e1:3c:dc:59:db:cb:30:76:dc:57:48:2c:fd:
f9:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:77:4F:B2:F8:09:A2:6D:AA:C4:A2:53:4E:E8:59:A2:88:94:36:B1
X509v3 Authority Key Identifier:
keyid:C2:78:22:E2:2B:FF:A3:12:B8:71:D0:AB:93:A9:E8:EB:1C:44:CE:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wngi4iv_oxK4cdCrk6no6xxEzuo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/70408e-9d44-4783-9bff-a1d176fedb86/1/pHdPsvgJom2qxKJTTuhZooiUNrE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/70408e-9d44-4783-9bff-a1d176fedb86/1/wngi4iv_oxK4cdCrk6no6xxEzuo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.104.150.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:dc:ed:5b:fd:16:91:2a:a4:e7:c0:5f:f0:c3:35:3d:a8:6b:
61:af:eb:18:d3:04:d3:d2:18:74:fd:ea:1f:b5:29:07:4f:d3:
75:ed:2b:32:c6:0c:9b:38:28:45:f9:70:cd:04:95:1a:40:b5:
93:32:3d:a7:02:4c:7b:3b:ac:b3:ee:e2:8b:1f:9f:c2:3c:41:
de:bf:8a:6e:a7:db:cf:66:5f:2a:58:0a:3a:fa:b2:4c:7f:54:
6a:b6:bc:e1:97:6e:e3:f4:f3:6c:c4:9d:c6:35:13:e3:90:d0:
b2:52:18:83:7b:0c:d3:46:54:b1:29:02:54:13:74:69:32:75:
d8:00:08:8a:4a:ef:a4:9c:22:08:42:e5:c0:a0:fc:1b:71:c9:
2e:88:a2:f8:8c:2f:fa:f8:56:3f:8e:54:d5:dd:b0:03:ae:85:
ee:30:cc:e7:1e:0a:5b:e4:c5:4e:1e:ff:56:b1:ad:81:ea:2d:
5a:8d:2a:67:70:57:fb:34:04:c3:38:6c:02:5f:4e:b7:aa:b5:
db:33:92:3c:c3:6f:98:11:a1:c0:5e:2d:ed:a4:c3:45:9b:b1:
10:fd:64:ca:f1:03:4c:f4:0c:da:14:2e:03:36:c7:4d:08:c6:
da:01:95:37:e6:2c:7c:3a:22:81:34:be:22:ac:9e:c0:88:4a:
37:da:04:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:18:53 2025 by rpki-client