Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/22e96f-2451-4e86-a037-8db62ea50995/1/8JRFpTVsaou3LjzaQZ8p7VxJ3fM.roa
File: 8JRFpTVsaou3LjzaQZ8p7VxJ3fM.roa (raw, json)
Hash identifier: NTysmyzWFt+S1qFpHWQgayNcftFKAW389vnViZCv82g=
Subject key identifier: F0:94:45:A5:35:6C:6A:8B:B7:2E:3C:DA:41:9F:29:ED:5C:49:DD:F3
Certificate issuer: /CN=72978d1d4e7782816ac42da4788e33cbb2487859
Certificate serial: 01856F9DBC382A77CC072998EE78D147B749
Authority key identifier: 72:97:8D:1D:4E:77:82:81:6A:C4:2D:A4:78:8E:33:CB:B2:48:78:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cpeNHU53goFqxC2keI4zy7JIeFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/22e96f-2451-4e86-a037-8db62ea50995/1/8JRFpTVsaou3LjzaQZ8p7VxJ3fM.roa
Signing time: Sun 01 Jan 2023 23:14:46 +0000
ROA not before: Sun 01 Jan 2023 23:14:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3356
IP address blocks: 194.180.232.0/23 maxlen: 24
194.180.236.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:9d:bc:38:2a:77:cc:07:29:98:ee:78:d1:47:b7:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72978d1d4e7782816ac42da4788e33cbb2487859
Validity
Not Before: Jan 1 23:14:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f09445a5356c6a8bb72e3cda419f29ed5c49ddf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:f2:b7:c1:17:fe:cb:eb:00:3b:b9:c7:9e:61:
76:b7:c8:f0:27:46:c8:ca:52:6b:16:78:24:57:87:
c5:5d:10:d2:91:74:37:ac:85:fa:2a:44:85:37:93:
e2:03:fe:1e:0b:b7:4a:3a:f1:d2:be:0b:85:03:4b:
39:25:eb:06:2e:31:6e:33:d1:68:f2:d3:97:9f:ab:
b5:7d:ca:fe:d5:3b:eb:c0:f9:39:d2:a6:c6:1d:07:
5c:1f:34:a1:df:84:5f:4b:e9:51:5e:32:bd:01:38:
a2:ea:10:92:aa:34:0d:8f:00:a6:9e:3d:c3:ef:66:
09:8b:67:24:a3:6b:1e:96:ea:73:e9:e4:99:e2:b8:
12:05:57:cf:d3:ff:a8:8b:dc:3f:de:60:f7:f5:4c:
a7:30:ab:d0:4a:af:c4:14:62:60:f8:ec:79:23:ee:
02:4a:f9:6b:65:e5:19:a7:1f:53:3f:39:60:ef:9f:
56:c9:12:ff:1d:08:51:2c:9b:17:01:9a:e8:05:42:
60:15:51:e4:f7:63:81:15:8a:b2:7e:80:8f:89:ab:
b9:05:1a:94:9b:91:d6:e9:76:5a:f8:56:68:50:d7:
8d:08:7b:0b:be:df:81:be:bc:e4:8f:d8:c2:b0:b5:
f7:79:a7:38:94:60:55:1f:be:85:b9:3f:61:9d:75:
79:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:94:45:A5:35:6C:6A:8B:B7:2E:3C:DA:41:9F:29:ED:5C:49:DD:F3
X509v3 Authority Key Identifier:
keyid:72:97:8D:1D:4E:77:82:81:6A:C4:2D:A4:78:8E:33:CB:B2:48:78:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cpeNHU53goFqxC2keI4zy7JIeFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/22e96f-2451-4e86-a037-8db62ea50995/1/8JRFpTVsaou3LjzaQZ8p7VxJ3fM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/22e96f-2451-4e86-a037-8db62ea50995/1/cpeNHU53goFqxC2keI4zy7JIeFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.180.232.0/23
194.180.236.0/23
Signature Algorithm: sha256WithRSAEncryption
5e:c2:74:6f:40:92:b4:85:00:3d:3d:4b:16:48:19:df:ee:dc:
f4:95:3a:10:d9:a3:ef:f3:22:eb:5f:ec:80:c2:20:17:04:92:
e0:3b:2e:98:e8:a1:d0:1f:a5:7d:54:04:7e:4a:da:a9:91:a6:
88:32:54:2f:f1:0b:5d:d3:24:ef:b8:a4:a9:7b:a7:9f:37:33:
86:09:79:d3:99:eb:15:b0:bc:d3:44:52:7b:f3:92:35:47:95:
ce:2a:d2:a9:35:80:fd:93:99:f1:ef:d0:c7:14:fa:dc:de:cd:
38:19:28:d4:0c:1d:27:7a:29:a5:c6:60:3c:51:ec:aa:c8:cb:
0d:6e:54:0a:2b:04:68:d2:03:d7:bc:f6:a4:c7:68:86:f1:aa:
27:19:a7:a2:05:38:16:4a:89:f9:48:ce:e1:1d:f6:ef:50:f8:
80:de:08:a3:8c:7a:1f:a0:c2:0e:ee:72:6c:20:17:ab:5d:84:
b9:9c:75:32:cc:c2:70:d4:05:a1:64:b8:85:73:b4:9d:38:3d:
98:cd:10:38:aa:5a:74:48:21:09:70:53:1d:05:a9:62:f6:ed:
c0:d8:5f:bf:f8:8e:84:00:73:d1:11:74:49:a3:6c:93:06:b3:
74:f4:00:c3:ef:35:61:09:c4:35:88:1a:dd:79:f0:b5:40:d5:
12:46:a1:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:49:25 2025 by rpki-client