Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/6f0cb6-ab28-4e49-8b2d-8b0cb4432ac6/1/RWNfawFmxyRCSNQxYCJ-bDNAGNY.roa
File: RWNfawFmxyRCSNQxYCJ-bDNAGNY.roa (raw, json)
Hash identifier: oqINXbKWaHZzOkh2TotcWV2qewIUAQeOTXlMh3U0gGU=
Subject key identifier: 45:63:5F:6B:01:66:C7:24:42:48:D4:31:60:22:7E:6C:33:40:18:D6
Certificate issuer: /CN=3c3784403d86b2d85b3d1d1e02d3dc00a0413d41
Certificate serial: 837112
Authority key identifier: 3C:37:84:40:3D:86:B2:D8:5B:3D:1D:1E:02:D3:DC:00:A0:41:3D:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PDeEQD2GsthbPR0eAtPcAKBBPUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/6f0cb6-ab28-4e49-8b2d-8b0cb4432ac6/1/RWNfawFmxyRCSNQxYCJ-bDNAGNY.roa
Signing time: Sat 01 Jan 2022 02:53:10 +0000
ROA not before: Sat 01 Jan 2022 02:53:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212667
IP address blocks: 194.26.221.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8614162 (0x837112)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c3784403d86b2d85b3d1d1e02d3dc00a0413d41
Validity
Not Before: Jan 1 02:53:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=45635f6b0166c7244248d43160227e6c334018d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:cf:b6:81:c4:f0:f8:02:12:a5:55:47:5c:ea:
06:cc:21:f2:05:08:1d:2a:37:21:ae:20:3d:68:3f:
69:4d:28:2c:b3:b1:ff:56:ff:3c:49:5a:23:f4:bc:
2e:ea:29:52:57:6d:76:e5:40:7a:4a:67:ac:81:4e:
ca:7e:7f:80:96:a2:ce:84:59:eb:eb:95:5a:f0:f6:
95:b4:06:c9:1f:87:11:ec:9c:00:00:a3:a5:1f:90:
0e:9a:e5:fd:18:ca:a6:be:e4:35:0c:d6:53:43:e6:
6a:14:5f:ae:95:01:60:a8:22:4a:9b:1d:88:1e:b9:
e5:cd:23:10:a4:e0:fc:2e:b0:f8:18:86:e0:dd:2d:
59:4d:1a:62:11:c6:8a:4b:eb:56:a5:b8:73:6a:a5:
8c:26:eb:2d:bd:23:f9:3a:b8:de:f5:f9:81:35:b9:
e7:e6:1a:d3:ba:b4:20:ab:70:80:fc:e0:a9:a6:55:
a9:d1:20:6e:23:02:b7:ef:a2:33:9a:34:75:e6:24:
99:e0:94:4e:f4:29:64:c5:c9:2f:ab:52:68:86:3f:
46:ae:4f:09:18:55:ef:b1:65:29:a5:22:c0:46:63:
5a:30:a3:59:61:72:ae:fd:52:4c:a6:7d:51:ab:d2:
40:bb:f0:95:7e:d1:74:30:05:29:a2:69:15:bd:97:
55:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:63:5F:6B:01:66:C7:24:42:48:D4:31:60:22:7E:6C:33:40:18:D6
X509v3 Authority Key Identifier:
keyid:3C:37:84:40:3D:86:B2:D8:5B:3D:1D:1E:02:D3:DC:00:A0:41:3D:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PDeEQD2GsthbPR0eAtPcAKBBPUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/6f0cb6-ab28-4e49-8b2d-8b0cb4432ac6/1/RWNfawFmxyRCSNQxYCJ-bDNAGNY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/6f0cb6-ab28-4e49-8b2d-8b0cb4432ac6/1/PDeEQD2GsthbPR0eAtPcAKBBPUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.26.221.0/24
Signature Algorithm: sha256WithRSAEncryption
06:56:24:95:b4:dc:f6:b1:1e:8b:1a:23:f9:3c:d7:65:6a:93:
46:b6:04:82:be:b1:85:b7:ce:0a:ef:d5:46:0a:dd:e5:02:a7:
f9:45:68:1e:0a:01:4f:39:b6:7f:59:cf:9a:d0:b6:d5:30:6d:
f0:5a:a2:bf:50:78:b5:38:45:39:5f:8f:d6:e5:98:89:e0:23:
d4:6d:5c:ae:00:93:f4:85:72:63:d2:5c:b7:67:b8:94:eb:07:
01:90:a9:16:30:f2:49:e1:c8:ef:ab:89:71:f9:f7:a4:69:32:
ee:fc:83:f6:8e:d2:3a:58:ae:38:0a:0d:1c:33:6f:80:7d:f4:
f6:c6:f0:b9:3f:c7:24:74:7b:75:83:d3:05:77:35:20:60:ba:
12:09:30:4f:ff:d4:76:00:5a:0d:a7:d7:12:b1:46:63:7a:bd:
0b:a2:f1:d7:bf:5a:f5:6d:95:5d:cf:92:7d:fe:4e:6a:a7:66:
31:db:a2:23:67:a2:f7:b1:05:21:b7:85:05:f8:45:23:7c:ad:
a6:ac:de:55:25:9f:45:83:6c:db:9d:37:f9:fe:db:b6:aa:b6:
14:a5:99:65:dd:62:62:57:15:63:29:18:23:4d:b9:b4:9e:98:
38:73:2e:28:02:43:21:74:c1:45:07:89:88:c3:33:86:6d:af:
5e:34:3b:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:33:48 2025 by rpki-client