Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/325b84-2ed4-4092-906c-100eed812c40/1/1-cDPcbARhG2UsSjriVzv3N54TVo.roa
File: 1-cDPcbARhG2UsSjriVzv3N54TVo.roa (raw, json)
Hash identifier: yTHmVejzfMM6yrA2AwEbZMzEehoRDASXgC5za+DWwXw=
Subject key identifier: F9:C0:CF:71:B0:11:84:6D:94:B1:28:EB:89:5C:EF:DC:DE:78:4D:5A
Certificate issuer: /CN=a62f2d3c269d935227690b28b7fbdd953e1e9edc
Certificate serial: 01870ED18C11582008D0D6EA3C922BF73CFB
Authority key identifier: A6:2F:2D:3C:26:9D:93:52:27:69:0B:28:B7:FB:DD:95:3E:1E:9E:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pi8tPCadk1InaQsot_vdlT4entw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/325b84-2ed4-4092-906c-100eed812c40/1/1-cDPcbARhG2UsSjriVzv3N54TVo.roa
Signing time: Thu 23 Mar 2023 14:13:46 +0000
ROA not before: Thu 23 Mar 2023 14:13:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15557
IP address blocks: 194.88.223.0/24 maxlen: 24
194.88.222.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:0e:d1:8c:11:58:20:08:d0:d6:ea:3c:92:2b:f7:3c:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a62f2d3c269d935227690b28b7fbdd953e1e9edc
Validity
Not Before: Mar 23 14:13:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f9c0cf71b011846d94b128eb895cefdcde784d5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:20:10:87:1d:c7:95:6f:a0:da:77:99:b6:de:
49:0e:a1:9a:32:f1:c2:cb:3a:4b:a8:3c:ea:a3:74:
b5:43:fb:af:26:a8:f5:11:7e:ec:ff:e9:8b:b0:3d:
fb:ca:af:b3:2c:9f:d4:13:f4:5b:14:8f:52:25:5a:
8f:af:7f:b0:ca:b8:cf:59:e8:b3:8f:f4:53:8d:96:
8a:ab:05:a3:d4:e6:9d:44:a3:a9:f4:3d:86:2f:1b:
dd:59:80:5f:9b:13:13:a9:af:58:25:9b:aa:da:ab:
8c:f4:e2:8f:bd:7b:7e:7d:5a:da:c2:77:03:a2:36:
b4:24:7e:57:d8:8e:d5:f1:03:98:aa:09:cd:8f:c2:
e7:a6:55:47:4c:41:a0:0d:c6:e4:fa:6a:86:27:0a:
a1:22:09:fa:ab:ad:e1:f2:a7:b6:2f:78:3c:26:cb:
99:f5:cc:94:21:00:4b:83:c9:1a:e5:6b:e5:1b:69:
9d:52:7a:a6:8f:12:40:f7:de:4f:c1:51:3c:38:0e:
f9:88:d8:69:0a:76:e1:9c:0c:16:14:4f:e9:e5:9e:
13:b2:4a:96:f9:2a:b8:53:92:42:a0:d1:26:ce:0d:
aa:86:03:36:b8:86:c4:ae:0d:1e:80:c0:f3:b9:7c:
b0:6f:f8:e5:6b:42:f8:75:5d:dd:65:08:af:ef:de:
ed:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:C0:CF:71:B0:11:84:6D:94:B1:28:EB:89:5C:EF:DC:DE:78:4D:5A
X509v3 Authority Key Identifier:
keyid:A6:2F:2D:3C:26:9D:93:52:27:69:0B:28:B7:FB:DD:95:3E:1E:9E:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pi8tPCadk1InaQsot_vdlT4entw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/325b84-2ed4-4092-906c-100eed812c40/1/1-cDPcbARhG2UsSjriVzv3N54TVo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/325b84-2ed4-4092-906c-100eed812c40/1/pi8tPCadk1InaQsot_vdlT4entw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.88.222.0/23
Signature Algorithm: sha256WithRSAEncryption
01:dc:5a:d2:54:a8:dc:58:06:10:04:59:5c:17:6b:9a:69:ed:
16:ba:fa:f4:d6:a9:c2:1d:b2:77:53:74:cc:5a:bd:4d:1d:99:
70:c2:1c:ad:06:0e:fc:7d:ef:b0:a9:4e:f2:16:88:6b:12:13:
d8:75:29:47:ab:33:ca:d6:d0:4c:52:2f:15:f8:e7:4c:fc:95:
86:f5:57:2e:6a:9c:38:7a:c6:3d:06:47:bf:62:c3:69:11:a5:
2e:72:cc:b3:76:51:16:e6:ee:93:c4:b4:6b:05:64:d7:ae:74:
be:cf:ae:f2:81:3a:62:b8:ea:47:81:e5:3a:50:68:9e:3e:e1:
59:63:a8:7e:51:99:5c:b0:54:c2:2e:d1:58:b7:b8:0a:48:e1:
4e:31:31:da:cc:bd:3b:79:01:21:48:21:1c:bc:f2:27:40:1e:
d3:3a:a0:62:f0:e2:9e:f6:57:32:e9:a1:0e:84:b6:97:0c:e0:
28:5f:a1:da:6c:38:e1:69:25:cd:7f:a6:e7:7c:65:e9:16:f7:
ec:34:2e:46:76:b6:0d:88:9b:88:f4:cb:51:53:d4:b8:a8:ce:
57:de:64:5b:f7:57:5f:5a:c7:da:c8:7a:ea:41:10:74:c4:fa:
ad:66:8a:8a:b0:51:4f:0e:fd:d2:88:29:35:ba:f1:d9:38:1d:
a6:91:e6:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 23:13:58 2025 by rpki-client