Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/6378bb-52ce-46af-959c-a9054928b544/1/dajDAsiHc-33zV0oulbBeXAD_z8.roa
File: dajDAsiHc-33zV0oulbBeXAD_z8.roa (raw, json)
Hash identifier: m7KuKd8Y8QkMbAFY5Cu7a521pqZY+0vAN7KRvbyFVxA=
Subject key identifier: 75:A8:C3:02:C8:87:73:ED:F7:CD:5D:28:BA:56:C1:79:70:03:FF:3F
Certificate issuer: /CN=f6450d2d0213ee4c9f3181efeeb2d663fe0d365b
Certificate serial: 018570D50739EF61B8847664DAE347028F48
Authority key identifier: F6:45:0D:2D:02:13:EE:4C:9F:31:81:EF:EE:B2:D6:63:FE:0D:36:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9kUNLQIT7kyfMYHv7rLWY_4NNls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/6378bb-52ce-46af-959c-a9054928b544/1/dajDAsiHc-33zV0oulbBeXAD_z8.roa
Signing time: Mon 02 Jan 2023 04:54:47 +0000
ROA not before: Mon 02 Jan 2023 04:54:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209828
IP address blocks: 194.15.151.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:d5:07:39:ef:61:b8:84:76:64:da:e3:47:02:8f:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6450d2d0213ee4c9f3181efeeb2d663fe0d365b
Validity
Not Before: Jan 2 04:54:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=75a8c302c88773edf7cd5d28ba56c1797003ff3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:0c:3a:b3:26:40:87:c0:c2:2c:67:83:4c:f8:
72:7b:f4:f2:a8:68:dd:cb:d2:0a:0d:12:e4:4f:a0:
10:5f:26:92:ef:cb:64:97:1a:02:6c:d7:29:75:40:
89:9f:66:a7:c6:85:2b:eb:5c:07:e6:d0:eb:29:8c:
e8:4c:a3:8d:03:4a:cd:e6:e7:9f:b5:4a:8e:ac:57:
60:85:a6:dc:75:33:4f:99:61:63:1e:d6:07:6b:d6:
bb:b4:5c:46:09:96:3e:25:5a:1f:c2:37:42:f2:41:
74:86:bd:e1:e9:94:6e:14:03:45:68:d5:f3:45:69:
d9:24:46:df:4b:74:30:bd:18:91:6b:47:67:d7:7a:
b4:c4:71:c4:41:ff:46:4b:5f:37:00:f9:c8:25:a6:
55:f1:fd:6d:4f:a9:e1:a9:b5:69:0e:d0:37:21:1a:
4a:40:e2:96:36:df:7a:c7:11:cc:9a:4e:ea:ef:e3:
3e:ab:22:88:0a:4d:0b:5d:1f:69:cb:7d:ef:a2:f7:
ea:e6:1c:be:bf:68:a2:da:68:e3:f7:7f:7f:5e:25:
15:fe:73:d0:4d:30:2e:23:9c:0d:c6:66:1c:73:ff:
b8:c7:4f:94:51:ea:e7:dd:6c:26:f6:86:5d:a9:8c:
29:28:83:2a:56:38:e4:f9:f0:46:26:fb:47:8d:0b:
16:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:A8:C3:02:C8:87:73:ED:F7:CD:5D:28:BA:56:C1:79:70:03:FF:3F
X509v3 Authority Key Identifier:
keyid:F6:45:0D:2D:02:13:EE:4C:9F:31:81:EF:EE:B2:D6:63:FE:0D:36:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9kUNLQIT7kyfMYHv7rLWY_4NNls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/6378bb-52ce-46af-959c-a9054928b544/1/dajDAsiHc-33zV0oulbBeXAD_z8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/6378bb-52ce-46af-959c-a9054928b544/1/9kUNLQIT7kyfMYHv7rLWY_4NNls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.15.151.0/24
Signature Algorithm: sha256WithRSAEncryption
93:78:66:c5:e1:a5:1b:d4:a4:a3:23:73:cf:74:7e:d4:91:74:
d6:49:62:8e:b0:00:b5:49:fe:5e:74:e7:26:9f:52:74:1f:41:
d2:86:ab:c0:c4:57:5c:bd:03:b3:f7:de:9d:3c:bd:03:f1:76:
2f:2b:77:83:6e:7a:85:9d:b1:eb:73:05:cd:58:6d:1e:07:1f:
a0:12:80:b3:eb:fb:9c:4b:e0:ae:1d:ed:93:e2:98:17:88:7f:
2a:c4:ba:37:71:bd:a7:d7:43:e5:07:c8:b3:05:08:eb:56:ed:
4a:75:54:73:32:6f:fc:ea:25:d8:52:2a:2d:86:4e:3a:4e:a5:
14:5a:7f:19:2a:12:71:d0:31:ce:20:b8:cb:ef:d0:5a:fd:42:
ca:3f:39:54:15:7a:ba:58:ed:2c:cb:46:33:16:14:80:72:e5:
12:68:62:fe:32:8d:50:95:20:da:e4:91:5c:80:85:e4:f6:11:
fc:2d:0c:a8:e1:1f:eb:22:0b:7a:5d:43:be:c9:01:fc:0d:5b:
df:47:e5:33:43:b4:3c:fd:bd:ff:7e:94:46:b8:68:bb:6b:ab:
a1:53:da:6a:37:c2:d3:fe:4e:84:02:9b:bd:c0:7f:d4:b3:34:
dc:6d:ce:80:55:ce:48:c3:f1:de:fc:f2:86:d1:26:87:87:4e:
55:b6:e2:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:58:43 2025 by rpki-client