Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/5ba610-25bb-45c9-8af7-8c38b690762f/1/1-8m4g1ukixUWEwY9G3lUIWoAckU.roa
File: 1-8m4g1ukixUWEwY9G3lUIWoAckU.roa (raw, json)
Hash identifier: Qnr3H7WlqKEK1gmJTr5JtVJmGciSbpJS7MaIKCw+HLY=
Subject key identifier: FB:C9:B8:83:5B:A4:8B:15:16:13:06:3D:1B:79:54:21:6A:00:72:45
Certificate issuer: /CN=a4c1bb101a814b9e2ee8264f81352a5bf2f2d025
Certificate serial: 01856E1434D62B5914F8FEE43201D9919B00
Authority key identifier: A4:C1:BB:10:1A:81:4B:9E:2E:E8:26:4F:81:35:2A:5B:F2:F2:D0:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pMG7EBqBS54u6CZPgTUqW_Ly0CU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/5ba610-25bb-45c9-8af7-8c38b690762f/1/1-8m4g1ukixUWEwY9G3lUIWoAckU.roa
Signing time: Sun 01 Jan 2023 16:04:56 +0000
ROA not before: Sun 01 Jan 2023 16:04:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2200
IP address blocks: 147.171.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:14:34:d6:2b:59:14:f8:fe:e4:32:01:d9:91:9b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4c1bb101a814b9e2ee8264f81352a5bf2f2d025
Validity
Not Before: Jan 1 16:04:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fbc9b8835ba48b151613063d1b7954216a007245
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:16:7e:2c:e4:10:f6:fe:2d:8c:47:da:94:4b:
57:a7:42:4b:6f:70:e6:88:a9:1f:1b:d2:91:a1:2a:
ca:ae:9c:a9:de:b8:77:4d:7a:6b:be:be:6e:84:51:
0d:e6:d8:2e:a7:d7:bf:67:df:7f:48:34:25:b6:67:
f8:89:cc:03:bc:3a:88:f0:d9:e8:9c:22:d7:5d:46:
dd:37:38:3b:4c:58:6e:b3:38:15:e9:84:74:d3:9f:
70:a4:c5:a4:cd:2c:32:e3:34:ab:4c:e5:42:46:46:
c8:e0:7f:70:7d:3a:c1:ef:0e:08:af:59:e4:20:56:
48:b9:c3:82:a3:0a:99:7d:58:8c:1c:ae:11:aa:45:
5e:90:62:49:63:9f:7a:b5:38:a8:5b:65:c4:ff:7e:
af:14:82:56:17:37:c3:e6:be:3a:57:72:7c:6c:ab:
d4:0a:e7:5e:71:2c:b7:02:95:fa:b6:48:32:38:8b:
dd:f3:2c:58:f1:ca:b8:82:a9:29:d9:5c:35:e8:f6:
b9:f2:c4:2e:ae:84:4f:a0:e9:67:09:c1:1e:43:1d:
6b:0a:1f:fd:34:58:0e:d7:1d:0a:54:e4:5f:49:e9:
44:07:a8:86:28:8a:10:ba:84:5d:01:34:3a:05:d5:
17:b6:40:8f:2e:ed:8d:d9:72:2a:4f:df:76:da:7c:
bb:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:C9:B8:83:5B:A4:8B:15:16:13:06:3D:1B:79:54:21:6A:00:72:45
X509v3 Authority Key Identifier:
keyid:A4:C1:BB:10:1A:81:4B:9E:2E:E8:26:4F:81:35:2A:5B:F2:F2:D0:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pMG7EBqBS54u6CZPgTUqW_Ly0CU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/5ba610-25bb-45c9-8af7-8c38b690762f/1/1-8m4g1ukixUWEwY9G3lUIWoAckU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/5ba610-25bb-45c9-8af7-8c38b690762f/1/pMG7EBqBS54u6CZPgTUqW_Ly0CU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.171.0.0/16
Signature Algorithm: sha256WithRSAEncryption
58:02:65:cf:b5:04:42:c1:45:d8:ee:8f:1a:fe:82:84:b7:84:
93:70:01:d1:62:77:16:33:b3:4b:e5:d4:5e:b0:46:e2:64:e1:
d9:3f:01:4e:9d:95:a2:72:f2:d4:4f:a4:ef:ea:a9:45:d7:bd:
f1:4e:6f:2c:53:f0:a5:13:e2:21:ba:43:e0:f9:ef:8d:25:eb:
61:a0:8e:54:45:fb:6c:20:11:79:b5:5a:49:52:69:c6:49:c5:
5d:6c:78:8f:a5:73:3a:5b:04:34:21:3b:73:e9:5f:88:47:d1:
34:f2:03:bd:b8:ce:62:68:7d:69:e6:89:d9:c2:6f:94:bb:88:
98:29:f5:35:58:ab:d1:ab:65:b5:bc:32:ff:1d:7c:04:b0:f6:
ae:93:ca:d4:0f:13:7e:24:bd:e0:85:17:f9:04:cb:2a:70:aa:
31:be:93:04:61:55:70:87:6a:8c:2e:18:d7:37:3b:a9:32:c7:
1a:4a:ce:f1:7e:84:40:75:d5:20:cf:3e:6b:15:ec:d5:9c:14:
c2:f5:fe:79:2b:94:c8:95:cc:13:1e:21:c2:05:ff:33:da:70:
d2:5a:ae:44:20:04:2c:fc:65:b6:2e:09:f1:22:db:d6:09:6d:
dc:03:a9:9c:c9:af:45:6a:48:9c:a5:ae:e4:f0:a5:3f:06:c3:
cf:95:65:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:49:33 2025 by rpki-client