Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/adad20-c512-4fb0-a127-48cf412b387b/1/d2OIjSeYBVWvYxP4n_ODfkSTTf4.roa
File: d2OIjSeYBVWvYxP4n_ODfkSTTf4.roa (raw, json)
Hash identifier: be0M2z23DoEhwT4FhHP2BW24O0nYk4oyMfhX4PQ+pRo=
Subject key identifier: 77:63:88:8D:27:98:05:55:AF:63:13:F8:9F:F3:83:7E:44:93:4D:FE
Certificate issuer: /CN=4ee843a85dd664e9dc0310892bd7dd9ce52591c7
Certificate serial: 019427486949391CEA05F949573AF3609DB5
Authority key identifier: 4E:E8:43:A8:5D:D6:64:E9:DC:03:10:89:2B:D7:DD:9C:E5:25:91:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TuhDqF3WZOncAxCJK9fdnOUlkcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/adad20-c512-4fb0-a127-48cf412b387b/1/d2OIjSeYBVWvYxP4n_ODfkSTTf4.roa
Signing time: Thu 02 Jan 2025 13:50:44 +0000
ROA not before: Thu 02 Jan 2025 13:50:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198440
IP address blocks: 206.245.192.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:69:49:39:1c:ea:05:f9:49:57:3a:f3:60:9d:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ee843a85dd664e9dc0310892bd7dd9ce52591c7
Validity
Not Before: Jan 2 13:50:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7763888d27980555af6313f89ff3837e44934dfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:7e:d2:cb:7b:d4:cd:c8:72:6c:6f:a0:a2:04:
c6:40:eb:4e:5d:8f:4d:61:2c:24:e1:b7:2c:c3:11:
8b:e4:37:f3:26:05:84:67:61:ac:11:e7:9d:2f:5f:
d2:6c:b8:0c:f7:8c:d7:2e:db:4a:d9:b0:94:9f:bd:
91:99:aa:9c:45:cd:ba:dc:4f:b2:ae:4c:cd:bf:41:
82:7f:9e:d5:db:24:88:05:89:ee:33:5b:3b:d4:d0:
40:e8:d8:db:ac:a0:7f:4f:19:a1:65:b8:2c:53:fa:
02:fb:d0:55:14:90:5a:76:c9:22:f2:23:94:9b:29:
6b:2a:72:da:31:26:83:a9:d5:bb:47:a5:2b:74:2f:
3d:bb:af:ac:6c:03:49:bf:04:52:9e:6c:38:83:21:
65:29:3b:2b:22:76:77:d4:4b:b8:f1:dc:8a:a0:f7:
30:9d:fb:4e:35:f0:d1:5a:59:7f:4c:3c:b3:e4:4b:
91:d1:fc:1b:1a:55:49:d8:02:4c:6f:58:ce:54:66:
be:43:3a:d1:40:fb:be:a1:c4:4e:7b:41:f2:5e:8c:
e9:af:bb:7b:00:f8:29:a9:20:3b:cd:1f:03:9d:87:
a3:50:ec:6b:6d:6f:17:8d:2f:b7:e7:35:78:57:26:
51:af:bd:c7:dc:76:60:fd:97:74:9f:92:0c:16:4f:
d7:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:63:88:8D:27:98:05:55:AF:63:13:F8:9F:F3:83:7E:44:93:4D:FE
X509v3 Authority Key Identifier:
keyid:4E:E8:43:A8:5D:D6:64:E9:DC:03:10:89:2B:D7:DD:9C:E5:25:91:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TuhDqF3WZOncAxCJK9fdnOUlkcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/adad20-c512-4fb0-a127-48cf412b387b/1/d2OIjSeYBVWvYxP4n_ODfkSTTf4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/adad20-c512-4fb0-a127-48cf412b387b/1/TuhDqF3WZOncAxCJK9fdnOUlkcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
206.245.192.0/20
Signature Algorithm: sha256WithRSAEncryption
18:d4:e2:c0:7a:cc:d0:d6:40:1e:f1:9b:97:c0:cc:db:29:c0:
03:3f:38:b3:cf:82:1b:a9:e8:c8:ca:fd:1a:cd:1d:fe:00:06:
41:d1:41:dc:b5:0c:09:a3:a8:03:10:06:e4:e4:7a:ac:7f:17:
36:0f:be:3c:c7:2a:13:bf:b0:1e:f7:dc:07:cc:47:a1:74:62:
c5:29:33:fe:25:26:97:36:21:9b:f9:b5:0e:28:55:50:0f:df:
87:d1:cf:fe:3a:01:60:e8:01:fe:00:02:07:4b:2c:2b:bf:ee:
4d:37:a3:82:3c:5b:c0:e5:22:30:c6:03:4f:eb:91:a0:b6:81:
8b:86:21:c5:68:4d:82:5c:eb:55:56:7d:fa:c1:93:e0:71:5b:
7a:8d:6f:b7:35:99:bc:2d:89:aa:b6:8d:ae:77:41:4e:5c:20:
43:a8:66:30:e3:e8:9e:c7:5b:f8:c2:33:22:a2:ac:d1:d7:23:
e2:d2:1e:4c:43:bf:50:44:fa:f7:d6:66:9e:ac:0f:5a:74:4f:
54:fc:9e:93:96:30:ef:02:6c:cb:ba:11:30:22:63:7c:b8:dd:
85:72:56:b9:6a:b6:52:06:eb:1a:3e:c7:ec:f1:d4:9d:50:71:
a3:10:08:b5:f5:3b:85:de:c5:35:81:b4:e6:40:28:79:f1:3b:
1d:d4:c5:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:01:33 2025 by rpki-client