Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/0VTuFmUT8qwnYvULd4sXxuPIPns.roa
File: 0VTuFmUT8qwnYvULd4sXxuPIPns.roa (raw, json)
Hash identifier: poc2YN87azdAeJ5jNzQxyG3NAEgJt3fGL+91t74tTS0=
Subject key identifier: D1:54:EE:16:65:13:F2:AC:27:62:F5:0B:77:8B:17:C6:E3:C8:3E:7B
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 019423699F5699F2B91F5D1E3269A39A0F7F
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/0VTuFmUT8qwnYvULd4sXxuPIPns.roa
Signing time: Wed 01 Jan 2025 19:48:32 +0000
ROA not before: Wed 01 Jan 2025 19:48:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50990
IP address blocks: 94.176.180.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:9f:56:99:f2:b9:1f:5d:1e:32:69:a3:9a:0f:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Jan 1 19:48:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d154ee166513f2ac2762f50b778b17c6e3c83e7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:51:b7:c9:b7:a2:14:ff:13:5f:54:b4:3d:5f:
4e:d5:8d:d5:4f:ef:cf:da:52:38:7d:30:93:c5:de:
24:d6:7f:a4:9a:9a:00:ed:f3:a8:a3:e6:cf:85:11:
ac:40:9a:f0:68:03:18:05:a1:f7:29:d5:1a:fa:d7:
a6:d0:cd:e3:20:fb:b5:91:20:01:73:f6:6c:8e:5b:
15:e5:a4:16:98:c3:7f:1b:e2:b7:5c:dc:1c:2a:47:
50:ea:81:7b:df:f6:2a:ea:c9:58:5f:66:17:b1:5e:
5f:de:bf:b7:f9:b9:bf:27:fa:28:d4:b9:75:fc:1d:
84:3b:aa:55:bc:f2:81:d6:15:3c:56:ba:32:b0:59:
be:51:40:cd:b9:92:29:fa:b5:9d:de:86:aa:db:a5:
41:01:ec:17:c6:62:00:33:86:81:0b:47:7e:17:f5:
9d:86:5b:3b:04:c8:ee:be:be:b8:c8:9e:60:98:40:
42:01:ce:a8:a3:e9:6d:07:76:97:5a:92:e4:e9:0a:
87:40:d3:75:c6:72:a8:f1:46:6a:f6:da:32:ca:8e:
90:b2:96:f7:4f:09:28:0a:22:e5:87:a2:fe:27:12:
36:d4:a9:7d:8f:7f:79:aa:c5:c1:c6:93:aa:ef:3b:
ca:21:b3:77:b5:b8:5e:f5:cf:05:39:03:ef:e7:8a:
c3:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:54:EE:16:65:13:F2:AC:27:62:F5:0B:77:8B:17:C6:E3:C8:3E:7B
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/0VTuFmUT8qwnYvULd4sXxuPIPns.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.176.180.0/23
Signature Algorithm: sha256WithRSAEncryption
db:83:e1:aa:2f:ca:5c:87:59:9b:58:49:8a:f3:a7:1a:81:65:
d2:79:8b:5e:46:0f:ff:87:b8:db:ba:81:ee:1b:2a:45:32:d8:
90:5d:18:7e:7d:cb:c2:fd:4a:1d:af:0c:bc:d0:28:3f:88:67:
8e:44:9d:5e:ce:d3:5b:d0:17:4a:47:e6:32:ad:d9:23:c1:cc:
fe:0e:ea:91:de:f6:7c:6a:2e:66:a1:32:8c:58:8a:13:47:5c:
42:e4:1d:f5:33:0c:1a:fa:56:ff:51:20:4b:7b:59:c2:7e:cf:
7f:a9:16:cb:a0:a9:f7:b5:06:ed:c6:70:96:25:c0:cb:48:a4:
e5:b1:75:65:cf:8a:30:54:d7:2a:b8:5a:65:33:09:79:49:2a:
c7:80:a4:e0:d5:c5:84:0d:71:b6:60:8c:27:94:68:a2:f1:d5:
57:e9:a4:da:d3:b9:c0:1d:8d:6d:b2:27:be:09:d2:cb:ad:23:
d3:13:5c:c1:4a:45:ef:af:5a:6f:09:97:ff:91:6d:93:fd:11:
b9:f3:2f:51:87:74:4f:b1:38:92:75:35:a7:0a:fb:43:67:ad:
8d:8f:c8:ad:de:7c:c5:e8:80:50:af:27:6f:4a:de:92:31:9b:
ed:44:59:3a:7d:18:4f:b0:b2:85:6d:f2:5e:a4:29:51:97:ea:
17:26:17:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:37:17 2025 by rpki-client