Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/2c4bd7-c498-4d02-b6fc-6c4e2569679e/1/aD8R_Wt82cjoD0AMEEbIP-wLXC8.roa
File: aD8R_Wt82cjoD0AMEEbIP-wLXC8.roa (raw, json)
Hash identifier: sSLBz93mxyElMi5nZ1eEH9PPz7UE5rAOZT9qPHhk+6U=
Subject key identifier: 68:3F:11:FD:6B:7C:D9:C8:E8:0F:40:0C:10:46:C8:3F:EC:0B:5C:2F
Certificate issuer: /CN=f4348ae7baedc54ec120f420d79d6a1b71de7fb7
Certificate serial: 018573685F19131222D794E964748FEBDF46
Authority key identifier: F4:34:8A:E7:BA:ED:C5:4E:C1:20:F4:20:D7:9D:6A:1B:71:DE:7F:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9DSK57rtxU7BIPQg151qG3Hef7c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/2c4bd7-c498-4d02-b6fc-6c4e2569679e/1/aD8R_Wt82cjoD0AMEEbIP-wLXC8.roa
Signing time: Mon 02 Jan 2023 16:54:57 +0000
ROA not before: Mon 02 Jan 2023 16:54:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 174
IP address blocks: 194.26.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:68:5f:19:13:12:22:d7:94:e9:64:74:8f:eb:df:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4348ae7baedc54ec120f420d79d6a1b71de7fb7
Validity
Not Before: Jan 2 16:54:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=683f11fd6b7cd9c8e80f400c1046c83fec0b5c2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:f5:e5:f7:5a:ec:00:52:55:b3:ed:db:22:21:
73:6f:87:63:2e:82:68:9f:fd:88:cb:32:1c:19:4c:
20:30:bc:41:a9:98:ad:57:a4:2f:49:cf:3d:1e:f6:
cd:f8:bd:da:ad:2a:d3:f5:6a:8f:a5:ce:cd:04:2c:
0a:c8:50:11:25:20:75:c3:c6:91:4f:95:ec:21:75:
38:0f:84:90:4f:57:60:5e:07:0e:67:32:7a:da:6c:
fe:e8:6a:e5:38:5c:9c:4a:f6:a2:71:fe:b4:d5:c1:
16:50:14:45:ca:86:2f:51:60:da:b2:2c:97:a5:4a:
4e:e3:04:99:54:e4:aa:75:19:05:bb:f3:f3:14:5c:
d0:77:0a:b1:56:32:31:75:b4:42:f1:ef:01:5e:ee:
c4:aa:c1:51:c6:12:35:cd:4f:3c:2e:9e:ec:e6:66:
8c:6f:1b:b5:34:e7:5b:56:af:91:29:f6:ae:02:f0:
98:1f:40:54:6b:1c:6c:d7:7f:9a:2e:69:01:28:f8:
26:5d:99:ae:da:93:66:8b:98:a6:4d:60:bd:dd:bd:
2a:94:22:e1:fc:de:f9:7a:90:6f:26:76:7e:ac:70:
fa:66:ff:2e:10:a8:16:7a:1c:66:1c:75:5e:a2:5e:
b8:ba:76:7f:fc:b5:30:ff:d3:42:ba:a2:4f:85:31:
ac:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:3F:11:FD:6B:7C:D9:C8:E8:0F:40:0C:10:46:C8:3F:EC:0B:5C:2F
X509v3 Authority Key Identifier:
keyid:F4:34:8A:E7:BA:ED:C5:4E:C1:20:F4:20:D7:9D:6A:1B:71:DE:7F:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9DSK57rtxU7BIPQg151qG3Hef7c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/2c4bd7-c498-4d02-b6fc-6c4e2569679e/1/aD8R_Wt82cjoD0AMEEbIP-wLXC8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/2c4bd7-c498-4d02-b6fc-6c4e2569679e/1/9DSK57rtxU7BIPQg151qG3Hef7c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.26.129.0/24
Signature Algorithm: sha256WithRSAEncryption
32:97:7a:23:64:83:0a:6c:d3:04:32:03:04:80:33:96:9a:48:
18:1e:49:74:ed:e4:1d:3e:32:90:3c:65:74:95:2e:d2:76:cc:
55:4f:bb:20:c7:bd:1d:ba:1a:80:1f:47:80:4f:bd:83:5a:6d:
f7:8b:5f:6a:c5:75:c2:f4:bc:3e:ce:66:a7:90:02:82:2b:28:
33:74:64:25:ed:a7:18:f8:bf:02:77:05:bd:67:96:02:9b:a6:
05:31:de:3d:d3:50:9a:08:51:46:70:65:9c:1a:2b:8d:88:b1:
7d:31:05:7e:b5:58:9d:01:8e:9f:d8:93:cd:a2:5d:e1:49:48:
71:97:db:cb:50:88:12:60:d6:66:fa:f5:cd:65:27:31:5e:90:
db:8a:70:f0:05:06:6a:d4:24:6a:95:f0:31:18:7a:9b:d2:a8:
5f:71:a2:2b:b1:cf:a8:25:7e:25:86:85:90:67:72:e3:ab:b9:
83:20:a2:94:7a:cb:ba:46:54:2c:01:de:51:ff:8c:59:24:7f:
00:da:ec:74:af:67:10:78:ed:e1:4e:8f:f8:8e:b6:c0:fb:14:
81:54:9e:e1:d9:ff:99:93:dd:df:53:f3:9e:f9:70:4e:27:f0:
0c:63:7f:bc:68:83:b7:ab:a8:21:c8:6f:a5:01:70:80:dc:85:
c3:1f:e9:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:52:20 2025 by rpki-client