Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/374491-eca6-4f15-9ad6-0c1ecf186dab/1/1-6OXXPONgGSZyb8iOGkt3KouUQ.roa
File: 1-6OXXPONgGSZyb8iOGkt3KouUQ.roa (raw, json)
Hash identifier: j86jXDpsft+ikh+7uguN0keMJkgATV1913w5fOF+cOQ=
Subject key identifier: D7:EE:8E:5D:73:CE:36:01:92:67:26:FC:88:E1:A4:B7:72:A8:B9:44
Certificate issuer: /CN=9b1e39f2f6cae7b2b06d8ab36ae4725d151e73c1
Certificate serial: 018570FBCE80592CFD5DCBA47808F15C8DD6
Authority key identifier: 9B:1E:39:F2:F6:CA:E7:B2:B0:6D:8A:B3:6A:E4:72:5D:15:1E:73:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mx458vbK57KwbYqzauRyXRUec8E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/374491-eca6-4f15-9ad6-0c1ecf186dab/1/1-6OXXPONgGSZyb8iOGkt3KouUQ.roa
Signing time: Mon 02 Jan 2023 05:37:08 +0000
ROA not before: Mon 02 Jan 2023 05:37:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58061
IP address blocks: 130.193.79.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:fb:ce:80:59:2c:fd:5d:cb:a4:78:08:f1:5c:8d:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b1e39f2f6cae7b2b06d8ab36ae4725d151e73c1
Validity
Not Before: Jan 2 05:37:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d7ee8e5d73ce3601926726fc88e1a4b772a8b944
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:0e:c6:f2:a7:75:c3:8b:b3:36:e7:33:18:ae:
2a:29:2f:8b:d2:23:e1:ff:40:31:5a:e5:59:ff:be:
4d:c4:b5:03:7c:2d:f6:5d:5f:e4:d0:31:15:f1:26:
c0:c3:47:19:6c:25:d7:a8:ae:7a:af:3c:21:bf:0e:
84:61:84:d4:ce:1f:15:b8:52:8b:e5:f8:c3:6e:3b:
cc:ec:53:2c:59:0e:eb:72:81:ed:b0:62:a3:ff:b6:
fe:1f:d6:d0:4d:c9:8a:e3:08:a8:14:1e:27:fd:07:
be:47:b7:fb:ca:90:fc:77:2b:bd:f9:60:dd:a7:45:
59:b8:8e:93:3b:56:d5:be:04:c8:95:8d:2e:17:d7:
52:af:a8:c4:15:64:71:ce:50:db:25:ae:1c:c6:ef:
0c:1b:99:9e:4f:f0:e7:f7:bb:79:84:90:12:e1:62:
4e:5b:84:96:97:46:ea:07:ae:75:31:a1:4f:bd:25:
cb:0e:d6:05:ac:b3:a2:4f:6a:e5:03:8d:c8:4f:90:
db:8f:01:4d:44:b8:fa:5e:c8:99:5c:71:38:50:f7:
b0:75:d4:20:7b:73:f3:45:f3:28:5d:bd:69:e2:35:
44:a0:6b:ca:8a:60:5e:65:1f:ee:52:79:e8:45:b0:
65:38:af:ba:d4:07:68:df:97:01:45:cb:fd:49:9c:
47:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:EE:8E:5D:73:CE:36:01:92:67:26:FC:88:E1:A4:B7:72:A8:B9:44
X509v3 Authority Key Identifier:
keyid:9B:1E:39:F2:F6:CA:E7:B2:B0:6D:8A:B3:6A:E4:72:5D:15:1E:73:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mx458vbK57KwbYqzauRyXRUec8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/374491-eca6-4f15-9ad6-0c1ecf186dab/1/1-6OXXPONgGSZyb8iOGkt3KouUQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/374491-eca6-4f15-9ad6-0c1ecf186dab/1/mx458vbK57KwbYqzauRyXRUec8E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.193.79.0/24
Signature Algorithm: sha256WithRSAEncryption
49:fa:d4:e8:4e:91:56:49:ee:5a:bd:1d:b6:04:b7:4a:8b:69:
75:55:5f:0f:3e:20:d7:66:ee:db:96:fb:ed:5b:54:e9:9c:d7:
2e:84:f7:a1:8a:4f:74:dc:e2:d4:c3:15:c4:ea:05:6d:de:6d:
49:bd:4c:d7:fb:40:9e:dc:43:2f:bf:f9:b1:0a:44:dd:8e:6d:
fe:82:f4:56:50:cc:31:38:4a:a3:1b:0a:32:4e:80:b0:92:ec:
43:60:f3:2a:74:0e:ba:0f:08:7d:60:44:c4:0e:c0:79:12:68:
b1:da:e9:fe:01:52:76:a9:17:28:91:17:30:29:68:24:38:b4:
cd:57:8a:35:3f:b3:60:0a:4e:a0:32:d9:4c:7e:b6:65:6e:20:
f8:a1:7d:75:78:9d:7e:6b:90:25:79:e2:30:32:46:98:eb:25:
99:44:b4:24:97:51:ac:6b:ca:d4:85:40:f2:19:58:85:09:ef:
31:d5:b7:cc:0f:ee:16:0b:18:a2:b2:7a:5a:8d:1d:6f:46:32:
96:cf:c8:65:b3:bc:2d:46:ce:8a:c7:47:25:f2:bc:1e:be:22:
9c:3f:7e:29:5a:1a:a0:c5:60:b0:3f:fe:b4:dc:b9:cc:17:cc:
7d:f2:bc:62:13:0f:0d:09:e1:bb:6c:16:36:cf:37:e7:29:a5:
69:e7:24:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:27:37 2025 by rpki-client