Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/sXNHX7qnLT-mUjihTKCQEywD-u4.roa
File: sXNHX7qnLT-mUjihTKCQEywD-u4.roa (raw, json)
Hash identifier: DSS/UBuJl2/CO21aa6eG2gYJmZ6QLTJVAyLyBwlzdcI=
Subject key identifier: B1:73:47:5F:BA:A7:2D:3F:A6:52:38:A1:4C:A0:90:13:2C:03:FA:EE
Certificate issuer: /CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Certificate serial: 0194236A507A58D9403BD3A230CEAC1FDF42
Authority key identifier: 17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/sXNHX7qnLT-mUjihTKCQEywD-u4.roa
Signing time: Wed 01 Jan 2025 19:49:17 +0000
ROA not before: Wed 01 Jan 2025 19:49:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203
IP address blocks: 145.61.196.0/24 maxlen: 24
145.61.200.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:50:7a:58:d9:40:3b:d3:a2:30:ce:ac:1f:df:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Validity
Not Before: Jan 1 19:49:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b173475fbaa72d3fa65238a14ca090132c03faee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:b4:77:80:5d:62:2b:6a:a2:8d:72:b8:99:b4:
f7:cb:b9:5f:50:1a:52:93:ba:5c:02:42:65:a8:4b:
44:9b:e2:ed:7b:3b:f9:22:01:00:bf:a6:ee:d2:26:
3f:a6:e0:b2:07:50:6e:81:d5:0a:48:4a:dc:22:46:
79:03:d3:0c:7b:6b:67:6a:ed:85:5a:69:da:f6:da:
d5:a3:01:08:ab:96:06:6d:d3:5b:a4:ec:36:cd:e7:
f6:a1:58:cd:e1:13:c1:3c:1a:79:e3:ae:28:f0:8e:
6b:89:35:4d:bf:c9:54:30:ae:c5:25:69:b1:90:06:
ad:86:04:88:6d:d0:2f:c0:81:e2:e4:49:59:e5:73:
fd:f7:e8:73:3f:7a:82:55:d8:a3:4e:d7:38:ed:40:
e1:59:92:fd:6e:11:b8:25:2a:61:75:ac:71:a5:76:
05:63:5c:0a:7d:d7:af:58:a9:d8:bf:a0:fa:91:ae:
42:37:ea:92:53:4a:6d:21:d3:5c:5e:20:4c:1e:2e:
ea:3f:cb:64:79:49:48:d5:17:f5:70:61:d4:f4:11:
16:07:9d:76:19:08:9a:21:75:bf:0f:ac:2b:a4:72:
c5:09:8b:6a:b8:4f:b2:29:bb:f0:dd:17:1d:8e:dc:
2e:72:f0:6e:b7:ed:75:1a:65:d0:1c:3c:d7:4c:b2:
64:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:73:47:5F:BA:A7:2D:3F:A6:52:38:A1:4C:A0:90:13:2C:03:FA:EE
X509v3 Authority Key Identifier:
keyid:17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/sXNHX7qnLT-mUjihTKCQEywD-u4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.61.196.0/24
145.61.200.0/22
Signature Algorithm: sha256WithRSAEncryption
a9:82:e1:50:85:89:61:d8:e8:b4:81:b3:d6:97:de:ac:e4:6e:
e9:69:12:fb:f6:a6:eb:ce:86:e2:43:e3:a8:dd:c1:d2:72:09:
f8:eb:f1:3e:b7:1c:b4:29:fa:3d:4c:28:1d:bd:ba:b0:f3:24:
31:e9:95:68:a5:93:02:7a:67:5b:57:54:23:3c:8d:b1:d6:d1:
a8:73:fe:80:91:18:6c:db:5d:9e:22:84:2d:13:38:be:3d:2c:
43:aa:53:6e:70:7b:53:f8:9f:bc:ea:82:7e:82:c3:5f:e2:e4:
dc:81:dd:9d:d4:5a:24:99:9b:45:60:6e:24:32:c1:7e:cd:31:
3a:39:bc:25:63:21:0e:43:78:d3:aa:7a:ea:8b:b4:a8:c3:78:
10:86:e8:ea:2f:2c:76:84:6e:fa:1d:81:12:ca:01:33:d4:10:
78:15:66:50:ef:e0:ac:f0:3d:9b:d1:9c:6f:53:a0:84:14:80:
b9:51:03:27:35:5f:64:25:ed:8c:81:8a:08:df:52:0d:90:36:
91:de:e1:f2:eb:9b:f5:1c:8e:13:99:01:7e:36:85:35:1e:f8:
17:69:ab:6c:43:69:56:06:ab:78:96:d4:d7:88:d1:e6:55:5c:
78:58:d7:16:83:55:0e:a6:3f:56:ee:a3:b0:88:97:53:14:8c:
2e:c8:38:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 18:01:29 2025 by rpki-client