Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/a7b5f7-f359-461a-b6ad-4e269d844db6/1/23WErPOhFsGm0xFPoCi-3t_GmDs.roa
File: 23WErPOhFsGm0xFPoCi-3t_GmDs.roa (raw, json)
Hash identifier: SWC6CQ0MUKTgWneXFxdlZ5gmYsbjKCWA5u+niD3Maz0=
Subject key identifier: DB:75:84:AC:F3:A1:16:C1:A6:D3:11:4F:A0:28:BE:DE:DF:C6:98:3B
Certificate issuer: /CN=1ec104278c95e7054950933761d465af457c5818
Certificate serial: 01856D788DC4F6A5467294D69EE5FF8C6B0F
Authority key identifier: 1E:C1:04:27:8C:95:E7:05:49:50:93:37:61:D4:65:AF:45:7C:58:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HsEEJ4yV5wVJUJM3YdRlr0V8WBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/a7b5f7-f359-461a-b6ad-4e269d844db6/1/23WErPOhFsGm0xFPoCi-3t_GmDs.roa
Signing time: Sun 01 Jan 2023 13:14:55 +0000
ROA not before: Sun 01 Jan 2023 13:14:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199659
IP address blocks: 185.43.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:78:8d:c4:f6:a5:46:72:94:d6:9e:e5:ff:8c:6b:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ec104278c95e7054950933761d465af457c5818
Validity
Not Before: Jan 1 13:14:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=db7584acf3a116c1a6d3114fa028bededfc6983b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:32:2b:b5:6c:9d:f0:36:25:f5:c0:c7:77:8b:
57:60:c1:3f:28:23:66:b8:fa:ad:bd:78:6c:b4:f4:
63:25:0d:a5:b2:36:7b:8e:be:f1:e4:77:3f:49:c2:
73:3b:e4:c1:26:14:b9:5d:9a:08:a3:98:06:98:39:
e2:83:4a:58:7b:91:a4:73:c1:22:43:15:06:b1:2d:
f4:31:32:85:a9:22:8a:6b:11:12:9d:cc:45:1b:0d:
ba:5e:e1:16:b2:f9:85:01:a0:96:84:88:c5:27:29:
cc:b1:41:95:b4:5f:86:73:2d:9c:ca:78:16:16:bf:
d3:83:a2:46:b5:9a:4d:9a:be:ec:37:75:5c:cf:a4:
63:c1:54:5d:1a:54:8b:1b:df:28:6e:54:0d:0d:76:
fa:9d:03:e2:2b:92:0d:74:5a:47:c3:b7:69:f4:a8:
bd:b2:e4:b1:f6:f0:8b:ae:00:94:83:1f:18:cf:7c:
a9:24:34:0f:97:7b:d5:ad:dc:d0:1f:f6:7d:a5:a6:
ad:7d:c4:23:18:d5:a4:9b:62:0a:f9:b8:87:9e:77:
3e:20:44:4b:56:8e:a2:6b:f4:ae:5d:03:cf:55:dd:
1f:d6:1a:91:8c:7e:b1:8d:9b:d4:e1:7d:e3:8c:5d:
19:3a:e9:c1:94:53:ce:6f:64:1a:55:a6:34:99:2e:
dc:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:75:84:AC:F3:A1:16:C1:A6:D3:11:4F:A0:28:BE:DE:DF:C6:98:3B
X509v3 Authority Key Identifier:
keyid:1E:C1:04:27:8C:95:E7:05:49:50:93:37:61:D4:65:AF:45:7C:58:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HsEEJ4yV5wVJUJM3YdRlr0V8WBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/a7b5f7-f359-461a-b6ad-4e269d844db6/1/23WErPOhFsGm0xFPoCi-3t_GmDs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/a7b5f7-f359-461a-b6ad-4e269d844db6/1/HsEEJ4yV5wVJUJM3YdRlr0V8WBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.43.129.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:2b:f7:e6:81:70:42:b9:24:ac:bc:b1:d0:bb:b1:d1:55:fe:
30:f4:91:60:91:01:f5:13:6c:01:46:9f:c2:35:05:68:cb:f6:
41:5c:20:e7:3f:98:a2:2c:ef:ac:63:3a:a9:4f:37:15:d3:13:
82:25:bc:74:42:cc:00:22:69:58:9f:03:42:6b:7f:16:bb:9d:
d6:f7:84:26:7e:0c:69:e6:af:48:1a:54:4e:bc:70:78:58:fa:
77:1e:00:66:0b:f5:95:b0:36:31:b2:56:14:40:b0:cf:76:47:
5a:4f:6a:71:fd:fc:36:9e:e2:07:3e:41:3d:1c:87:ce:c7:94:
d2:c4:75:03:e3:5c:90:14:91:af:22:d4:55:b1:36:43:17:74:
8c:8a:df:c1:3c:cc:ce:eb:50:d0:b0:32:81:7e:71:92:f5:0b:
89:fd:bc:17:b5:9c:26:ba:44:25:dd:47:c6:cb:ef:19:04:5a:
d3:fe:f7:d3:3d:0d:9c:91:e6:28:ca:2c:ce:ab:b9:2f:58:55:
ac:83:1b:ac:66:e4:f0:bd:81:5c:f6:18:aa:67:26:b1:ba:54:
66:31:58:5b:cc:7a:7c:32:f8:4b:a7:a2:d9:25:97:3a:d4:6a:
89:51:a0:12:da:d5:3c:70:f2:cd:74:7b:11:ba:d7:f2:e5:f3:
e5:60:e6:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:52:21 2025 by rpki-client