Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/6378bb-52ce-46af-959c-a9054928b544/1/3Dsc8QN_-BOJBKXg1RKrKZgpNk4.roa
File: 3Dsc8QN_-BOJBKXg1RKrKZgpNk4.roa (raw, json)
Hash identifier: F1ANOqCZZrJHEjjvkZuEIvqIIS9Zbepp2vO4RlrPufs=
Subject key identifier: DC:3B:1C:F1:03:7F:F8:13:89:04:A5:E0:D5:12:AB:29:98:29:36:4E
Certificate issuer: /CN=f6450d2d0213ee4c9f3181efeeb2d663fe0d365b
Certificate serial: 01877B69E577873CC0C88B4A7876A6B4755C
Authority key identifier: F6:45:0D:2D:02:13:EE:4C:9F:31:81:EF:EE:B2:D6:63:FE:0D:36:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9kUNLQIT7kyfMYHv7rLWY_4NNls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/6378bb-52ce-46af-959c-a9054928b544/1/3Dsc8QN_-BOJBKXg1RKrKZgpNk4.roa
Signing time: Thu 13 Apr 2023 16:19:10 +0000
ROA not before: Thu 13 Apr 2023 16:19:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 194.15.151.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:7b:69:e5:77:87:3c:c0:c8:8b:4a:78:76:a6:b4:75:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6450d2d0213ee4c9f3181efeeb2d663fe0d365b
Validity
Not Before: Apr 13 16:19:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dc3b1cf1037ff8138904a5e0d512ab299829364e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a2:cf:22:22:96:5c:df:57:59:36:4d:d4:73:
46:b1:56:18:7d:50:c6:27:1d:20:95:fa:cf:5b:9a:
3c:c8:5b:dd:cc:bc:63:51:81:f8:4e:60:41:5e:26:
a3:dc:bd:e7:06:23:4a:7f:6e:f3:89:c1:a8:ca:a2:
65:bd:0d:09:e6:70:cb:24:87:f5:6c:78:7d:c2:3d:
32:b7:3b:49:52:2b:82:cc:4b:51:07:b4:d0:f9:ea:
67:1e:d8:00:dc:91:65:4b:27:ef:9a:6b:91:69:2a:
ae:70:37:b7:ee:4b:0a:f1:42:0f:08:9e:6a:2b:05:
48:78:ca:bd:89:98:6c:07:72:cc:ce:67:a3:12:86:
84:39:6d:84:55:50:6b:ca:1e:06:38:0a:6d:e4:bf:
48:10:df:68:91:aa:b4:31:77:dd:1e:1f:44:21:87:
82:ab:1f:82:f7:8b:3a:7b:48:57:4b:4f:c4:ac:3a:
45:d3:5e:d9:68:0d:ba:4c:98:86:b3:cf:33:1b:8c:
aa:85:7a:d8:a4:30:3d:a5:f0:a8:a3:78:32:d9:7e:
09:af:a7:7b:c6:c7:e6:48:20:95:9e:5f:01:64:2e:
41:1f:e7:08:a1:8e:95:7d:2f:d8:e3:e3:c5:28:67:
03:a1:05:f7:d5:b7:8a:04:25:68:17:1f:9a:a2:ba:
3a:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:3B:1C:F1:03:7F:F8:13:89:04:A5:E0:D5:12:AB:29:98:29:36:4E
X509v3 Authority Key Identifier:
keyid:F6:45:0D:2D:02:13:EE:4C:9F:31:81:EF:EE:B2:D6:63:FE:0D:36:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9kUNLQIT7kyfMYHv7rLWY_4NNls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/6378bb-52ce-46af-959c-a9054928b544/1/3Dsc8QN_-BOJBKXg1RKrKZgpNk4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/6378bb-52ce-46af-959c-a9054928b544/1/9kUNLQIT7kyfMYHv7rLWY_4NNls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.15.151.0/24
Signature Algorithm: sha256WithRSAEncryption
74:17:e6:e1:4f:b0:06:3f:c2:5f:f1:f2:9e:ba:f6:d2:45:85:
bb:cb:d1:4e:17:8c:be:79:02:c1:a1:3b:08:53:19:5f:77:eb:
81:5a:a0:f1:c1:43:55:78:25:67:43:fa:a3:8e:a2:a4:fa:2c:
3d:fb:b8:12:73:8c:73:67:b8:5c:1e:4e:00:2f:cc:75:6c:7f:
2a:27:86:99:5e:ac:85:70:d4:d3:7d:88:5e:49:7e:04:da:2d:
43:45:42:db:8a:bb:3c:11:ed:0b:7b:a3:be:6c:55:fd:23:dd:
04:18:85:39:ac:38:37:4d:b0:c6:25:77:ea:f7:a9:f4:64:7f:
a6:c8:97:34:5f:58:30:76:28:94:d4:38:52:98:0d:60:29:0e:
05:ee:73:b0:04:cd:29:2b:47:26:3a:ee:2e:08:ca:1a:e5:c6:
12:17:93:4b:98:3e:6e:bd:80:5f:ce:f4:da:e8:e6:de:aa:51:
7f:a7:75:78:6e:37:1d:0d:cf:a0:45:99:33:28:ef:dd:1f:8f:
60:cb:1e:29:d5:6f:e2:d3:dd:a8:df:81:5d:43:fe:87:45:b0:
57:10:2e:4d:97:07:5d:8b:fe:51:b7:f9:b2:fc:b7:5e:26:ee:
d2:22:77:34:f1:cf:10:1e:20:16:6d:d0:ad:3b:a5:fb:61:99:
66:74:02:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:00:08 2025 by rpki-client