Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/3de18b-9dde-4d5c-8f2d-0d6ab5eac390/1/AJ2GG5kgz5B-XTHP4-lcS1MhmuA.roa
File: AJ2GG5kgz5B-XTHP4-lcS1MhmuA.roa (raw, json)
Hash identifier: +zvJkO0ipVIyxzagafRorL4+kqDUZmY8kIeYJ4ckZPE=
Subject key identifier: 00:9D:86:1B:99:20:CF:90:7E:5D:31:CF:E3:E9:5C:4B:53:21:9A:E0
Certificate issuer: /CN=84c21af41051c80bc65ecb05d97b254f8e04682a
Certificate serial: 018964C06029CA9EB5F2BCAC89ECF736BD6F
Authority key identifier: 84:C2:1A:F4:10:51:C8:0B:C6:5E:CB:05:D9:7B:25:4F:8E:04:68:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hMIa9BBRyAvGXssF2XslT44EaCo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/3de18b-9dde-4d5c-8f2d-0d6ab5eac390/1/AJ2GG5kgz5B-XTHP4-lcS1MhmuA.roa
Signing time: Mon 17 Jul 2023 16:47:56 +0000
ROA not before: Mon 17 Jul 2023 16:47:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62240
IP address blocks: 194.104.227.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:64:c0:60:29:ca:9e:b5:f2:bc:ac:89:ec:f7:36:bd:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84c21af41051c80bc65ecb05d97b254f8e04682a
Validity
Not Before: Jul 17 16:47:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=009d861b9920cf907e5d31cfe3e95c4b53219ae0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:4f:c5:04:9e:06:37:0b:1f:83:fd:73:5a:2c:
1d:0c:e4:aa:64:c7:0e:ff:43:bc:6b:d6:84:a0:f6:
a4:f1:03:e7:22:43:ea:95:01:1c:f5:29:3c:38:56:
a3:2b:81:76:06:b4:2f:30:58:20:96:36:4b:e0:67:
32:86:13:3d:b5:ae:c3:cb:a9:05:52:e7:d3:8c:fe:
97:9b:e4:40:25:57:cd:02:1c:94:9b:4f:66:91:1f:
c7:6a:c3:85:47:6d:4c:ce:63:d2:8f:c0:e5:e7:3d:
05:33:c6:70:1b:c0:3d:e4:fb:ce:c3:04:80:d3:03:
41:5a:8b:6c:6f:47:0d:d0:3e:ff:93:90:54:da:0b:
6d:2a:6e:b2:5e:33:03:9f:ea:00:de:9f:8f:7e:e5:
3b:d7:51:fb:b7:ba:22:8d:98:67:f7:70:bf:d7:46:
26:68:75:f7:6f:cf:0b:da:c4:65:ea:30:00:aa:5f:
0f:96:e6:05:1b:3a:31:23:6f:86:94:91:e9:7d:50:
6e:b5:28:a1:6a:f1:f4:78:c0:09:e0:5a:2c:fe:b9:
93:7d:dc:f9:ea:a1:0c:ea:20:7c:d1:8e:1b:0c:07:
07:47:17:00:a2:fd:ae:6e:0c:35:96:a9:82:7b:11:
73:9d:e7:2a:56:be:1d:5e:9a:5e:eb:dd:3f:79:bd:
78:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:9D:86:1B:99:20:CF:90:7E:5D:31:CF:E3:E9:5C:4B:53:21:9A:E0
X509v3 Authority Key Identifier:
keyid:84:C2:1A:F4:10:51:C8:0B:C6:5E:CB:05:D9:7B:25:4F:8E:04:68:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hMIa9BBRyAvGXssF2XslT44EaCo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/3de18b-9dde-4d5c-8f2d-0d6ab5eac390/1/AJ2GG5kgz5B-XTHP4-lcS1MhmuA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/3de18b-9dde-4d5c-8f2d-0d6ab5eac390/1/hMIa9BBRyAvGXssF2XslT44EaCo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.104.227.0/24
Signature Algorithm: sha256WithRSAEncryption
33:fa:fd:6f:b1:fd:18:a2:47:4a:26:1b:32:d3:54:6a:2a:c8:
75:76:06:4b:bb:14:45:61:c2:12:56:68:c9:8d:84:e8:43:69:
28:75:70:6e:08:9a:3f:3a:ef:f3:24:47:4d:8d:38:d9:c2:64:
04:3c:67:d5:06:76:ba:b7:26:68:60:a3:88:a9:df:e7:4f:55:
6e:8e:e1:c4:33:ee:54:52:11:10:02:c4:9c:5a:e2:71:60:91:
6b:ee:1f:f3:9c:68:ba:dc:62:c6:53:00:de:c2:f1:22:53:ac:
17:1e:3e:10:0f:ff:c4:53:2a:63:17:75:92:09:83:6b:7e:eb:
fe:e1:78:35:33:f8:91:2a:a5:54:f4:2d:cb:f4:72:f7:4d:ff:
c7:e4:23:f3:e9:af:77:d1:ba:73:21:fd:c0:61:1b:95:1c:17:
e1:f1:94:ae:18:8c:fe:14:71:fb:c6:8d:6f:29:21:67:d3:01:
ba:26:5b:ce:cb:c3:6c:2a:6f:26:45:e5:6b:4a:16:85:d5:a8:
74:b0:f8:40:d2:5f:75:61:dd:7b:f8:c5:32:e2:df:d1:22:e4:
02:36:7e:ca:52:ff:5c:e0:37:3a:6a:75:38:46:f4:5d:d8:ea:
de:5b:ca:61:3a:d1:8a:bd:98:72:75:67:4d:ac:cb:d6:4f:06:
f0:ba:c7:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:47:39 2025 by rpki-client