Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/IjscXnepDG19vTTnlZ32WsyeN7g.roa
File: IjscXnepDG19vTTnlZ32WsyeN7g.roa (raw, json)
Hash identifier: vyk/ErF27dJI4TXiGfWR+wFLqNI0HVDT/SMI4+P6DOo=
Subject key identifier: 22:3B:1C:5E:77:A9:0C:6D:7D:BD:34:E7:95:9D:F6:5A:CC:9E:37:B8
Certificate issuer: /CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Certificate serial: 0194236A5F9DF1D34BF6A19ED2B5FA148904
Authority key identifier: 17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/IjscXnepDG19vTTnlZ32WsyeN7g.roa
Signing time: Wed 01 Jan 2025 19:49:21 +0000
ROA not before: Wed 01 Jan 2025 19:49:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3918
IP address blocks: 145.30.227.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:5f:9d:f1:d3:4b:f6:a1:9e:d2:b5:fa:14:89:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Validity
Not Before: Jan 1 19:49:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=223b1c5e77a90c6d7dbd34e7959df65acc9e37b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:95:e2:ab:7a:87:46:99:ab:2e:79:87:a8:4a:
a8:76:b4:08:79:5d:d1:86:b4:35:ca:c7:53:b2:15:
db:bd:fe:0d:c5:03:31:e2:01:19:52:77:44:0f:3b:
05:ef:33:4e:c3:45:be:50:c8:35:11:3e:89:e9:97:
a0:9c:87:da:ee:c4:84:62:09:21:39:11:c7:38:bd:
56:e6:af:bc:23:62:7b:a7:12:f1:b9:e2:75:82:8f:
0f:3e:66:02:90:10:33:55:46:a4:d1:cc:48:09:94:
63:d5:3f:2c:39:c1:f8:ab:72:8e:ac:17:76:cd:52:
20:6f:a7:7d:4c:ee:f4:05:67:58:e8:70:0a:79:f2:
ba:75:81:19:f6:d7:de:5b:3d:97:d1:29:ea:76:2f:
0f:e2:b0:00:1b:74:7f:21:2b:8f:87:e0:a0:18:a5:
49:ec:c1:12:40:94:04:6f:bb:ee:52:88:d8:d7:b4:
43:f1:21:38:fe:d2:26:23:33:89:a0:08:9c:80:f7:
b3:68:2d:e0:e5:fc:f2:06:61:10:76:da:71:0e:99:
ac:e4:b9:af:fb:76:fb:66:07:67:18:5a:49:48:b1:
ea:df:19:90:d9:24:4a:48:dc:d0:a6:32:ef:3e:7a:
f0:e1:88:64:84:cb:33:0f:6f:64:f2:5e:ea:d5:10:
c3:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:3B:1C:5E:77:A9:0C:6D:7D:BD:34:E7:95:9D:F6:5A:CC:9E:37:B8
X509v3 Authority Key Identifier:
keyid:17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/IjscXnepDG19vTTnlZ32WsyeN7g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.30.227.0/24
Signature Algorithm: sha256WithRSAEncryption
87:49:fd:e8:36:95:99:7a:ef:29:61:74:87:cd:ed:df:a3:2c:
b3:df:c7:ca:17:0a:0a:8c:e3:9c:22:8b:74:07:4a:4c:92:d7:
3f:53:0e:ba:1b:31:33:75:47:d3:2f:be:a9:bd:e3:74:2f:f8:
4a:b2:0a:8e:0c:fe:da:6f:1c:ff:33:21:e2:49:d9:91:31:85:
3a:5d:80:9b:44:73:e8:44:14:57:9a:25:7d:65:a6:b2:f4:e3:
67:27:e1:9a:0b:3c:bf:bd:c7:b5:9a:af:36:4f:15:8d:0c:24:
1a:30:16:74:f3:74:56:d2:a3:c9:53:88:68:9e:be:63:1f:41:
92:1b:c9:a2:71:9a:04:24:c3:c9:d4:e7:65:ef:8e:84:81:1b:
2f:02:23:59:11:25:f9:0c:0a:79:6c:3e:43:de:ab:2c:97:76:
73:d3:5f:1e:7a:fd:47:ea:24:fe:f2:e4:13:0d:9e:7d:71:59:
1a:cb:f6:9b:c7:62:b2:4f:ce:0e:a9:0c:61:78:4e:ec:43:f9:
e9:39:3c:e4:04:d7:41:48:05:83:04:a2:41:22:49:20:a6:26:
b6:32:7f:d2:3e:d3:5a:09:48:d4:ac:18:25:af:50:5d:32:da:
4a:e4:93:8b:8d:16:65:ac:f8:2a:50:78:86:3d:4f:81:bc:82:
dc:05:b9:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:46:40 2025 by rpki-client