Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/9dda18-1a92-40da-90c4-bdbef72322cc/1/esXm6Rnh5OEU_hAn9KNQUg6YQAw.roa
File: esXm6Rnh5OEU_hAn9KNQUg6YQAw.roa (raw, json)
Hash identifier: 3VeuwN4QUbPaZlNlhQDFsr/2sM/BpZWbCcILlRV7k6A=
Subject key identifier: 7A:C5:E6:E9:19:E1:E4:E1:14:FE:10:27:F4:A3:50:52:0E:98:40:0C
Certificate issuer: /CN=69bc6e5f486c9ad89c92ae303bdbe16c85f97ec8
Certificate serial: 01856CAF1F4FC32A21FF998ADDCA8F73F11C
Authority key identifier: 69:BC:6E:5F:48:6C:9A:D8:9C:92:AE:30:3B:DB:E1:6C:85:F9:7E:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/abxuX0hsmtickq4wO9vhbIX5fsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/9dda18-1a92-40da-90c4-bdbef72322cc/1/esXm6Rnh5OEU_hAn9KNQUg6YQAw.roa
Signing time: Sun 01 Jan 2023 09:34:54 +0000
ROA not before: Sun 01 Jan 2023 09:34:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57013
IP address blocks: 194.26.205.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:af:1f:4f:c3:2a:21:ff:99:8a:dd:ca:8f:73:f1:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69bc6e5f486c9ad89c92ae303bdbe16c85f97ec8
Validity
Not Before: Jan 1 09:34:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7ac5e6e919e1e4e114fe1027f4a350520e98400c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:a1:cb:cc:ad:4e:05:66:c4:79:ca:a7:c3:b3:
33:a2:10:4e:7a:ce:97:f2:fb:7f:03:6e:08:18:d5:
b3:75:58:d3:5f:ce:86:3d:b5:66:0d:f3:5c:4e:a9:
ba:58:14:7f:8b:77:67:0a:af:51:b7:24:13:33:a0:
27:1c:65:16:03:4d:fc:3f:39:69:c0:ed:3c:7d:d1:
7e:c2:e2:a0:b1:f4:4c:b0:d4:e8:63:c7:37:1b:7b:
8c:c2:39:19:44:f2:76:d0:89:2c:c9:08:b1:70:df:
a0:ef:a6:90:10:1c:09:f6:e9:a7:ed:cd:b8:32:3a:
26:cb:ed:62:4d:9d:58:0b:49:60:63:17:da:f4:42:
d2:2e:49:60:35:40:0a:68:6b:68:a8:b7:c9:96:d1:
b8:44:dc:f1:11:fb:1d:22:a7:34:73:01:1a:87:4b:
0e:2f:31:eb:1c:b3:18:7f:a1:85:15:d0:67:b5:04:
2e:18:12:56:18:4f:8f:50:fe:28:83:5f:c5:f0:01:
ae:d6:8d:23:34:77:95:24:d7:73:56:11:01:b8:96:
19:cb:37:c6:87:ab:bb:27:0c:98:8e:04:0e:6e:d7:
fa:f0:29:d4:95:0a:c8:e7:6a:33:4b:95:a4:72:2f:
19:e4:69:a0:cd:4c:13:b0:b7:71:b3:34:83:4b:63:
8a:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:C5:E6:E9:19:E1:E4:E1:14:FE:10:27:F4:A3:50:52:0E:98:40:0C
X509v3 Authority Key Identifier:
keyid:69:BC:6E:5F:48:6C:9A:D8:9C:92:AE:30:3B:DB:E1:6C:85:F9:7E:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/abxuX0hsmtickq4wO9vhbIX5fsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/9dda18-1a92-40da-90c4-bdbef72322cc/1/esXm6Rnh5OEU_hAn9KNQUg6YQAw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/9dda18-1a92-40da-90c4-bdbef72322cc/1/abxuX0hsmtickq4wO9vhbIX5fsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.26.205.0/24
Signature Algorithm: sha256WithRSAEncryption
23:34:58:07:3f:d1:46:f8:86:ec:09:d0:c8:ce:18:af:df:f1:
e0:98:9f:2c:5e:ff:98:66:ee:7e:f9:92:a7:38:3a:88:6a:0e:
42:64:71:13:71:e1:9d:6f:4c:c2:98:e7:b9:63:24:0c:d8:a1:
9f:f4:77:67:0a:fd:20:48:de:93:82:7a:0b:da:13:68:dc:35:
7e:71:02:95:39:13:4f:02:93:8d:2b:99:6a:46:e9:e8:32:3e:
9d:0f:00:12:39:fd:2d:c1:75:d5:d9:fd:7d:75:94:65:79:54:
77:55:94:2a:6d:a9:ca:41:fe:35:60:39:b8:01:27:dc:db:e8:
e6:71:75:fc:c4:75:48:27:2f:b4:c8:e4:c4:65:68:96:6f:cb:
b8:78:e0:6b:b7:5e:ee:74:22:b5:7f:2f:c1:84:47:af:a9:42:
28:51:fc:66:00:5d:22:36:1f:0f:89:68:6c:8c:ba:74:3f:16:
7e:22:00:7e:48:0a:2e:7c:c2:57:12:36:84:b9:c9:bd:01:33:
26:60:1f:d1:40:7d:50:74:e2:1a:27:b3:93:3d:80:ab:cd:0c:
0b:95:57:de:6e:4b:28:f3:e6:c1:67:59:e0:5c:c0:76:0f:b5:
56:d1:1e:b9:c2:38:aa:db:8b:98:66:2a:2f:55:48:80:f3:bc:
77:d7:45:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 01:31:22 2025 by rpki-client