Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/83233c-898e-491d-958c-4fea624413e4/1/EN-huhtzkHvqq-WSPHZv4kpwEdk.roa
File: EN-huhtzkHvqq-WSPHZv4kpwEdk.roa (raw, json)
Hash identifier: Kn8XpbcVPIhegSX+W1ZIOGWDAygssGXDmdjALmP503M=
Subject key identifier: 10:DF:A1:BA:1B:73:90:7B:EA:AB:E5:92:3C:76:6F:E2:4A:70:11:D9
Certificate issuer: /CN=00138af66eb4d557fa4b3939c6cbd961a9123560
Certificate serial: 04279BB7
Authority key identifier: 00:13:8A:F6:6E:B4:D5:57:FA:4B:39:39:C6:CB:D9:61:A9:12:35:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ABOK9m601Vf6Szk5xsvZYakSNWA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/83233c-898e-491d-958c-4fea624413e4/1/EN-huhtzkHvqq-WSPHZv4kpwEdk.roa
Signing time: Thu 20 Jan 2022 10:08:19 +0000
ROA not before: Thu 20 Jan 2022 10:08:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 9009
IP address blocks: 194.50.233.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69704631 (0x4279bb7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00138af66eb4d557fa4b3939c6cbd961a9123560
Validity
Not Before: Jan 20 10:08:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=10dfa1ba1b73907beaabe5923c766fe24a7011d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:36:58:9f:4e:94:1e:3a:13:92:5f:34:47:86:
6d:9f:17:7d:65:bb:b3:e3:58:68:f7:a7:88:41:04:
d8:4b:23:de:5d:f9:52:5e:12:94:c6:6e:bf:05:e0:
c6:fc:b7:5a:a0:e1:cd:d5:c9:a9:01:29:b8:7e:83:
ca:df:59:be:cf:27:68:4f:e4:2b:fc:5d:44:0e:63:
72:f4:15:f6:da:63:47:d5:0a:39:0d:b5:8e:91:f7:
b2:fa:af:f9:bb:46:de:09:da:e6:93:e6:57:3f:8f:
b3:62:b1:a8:cd:eb:9a:58:b3:04:e3:60:3a:33:d1:
c7:88:9f:74:36:bb:61:04:f7:41:93:a2:ab:56:fa:
bd:b4:7f:a1:9b:42:8b:1a:cc:3a:6c:a0:45:28:cb:
3a:45:d3:2c:d7:e5:15:43:9f:08:55:4e:b8:49:9e:
bb:b5:9a:43:a8:26:3d:66:ad:09:e3:9f:f8:77:da:
4f:f2:71:7c:05:31:bf:c1:32:60:75:ad:8f:e9:09:
b5:45:5f:d1:40:29:e5:5e:f1:79:05:3a:ae:0c:d9:
28:58:ea:c0:c0:67:81:de:87:b6:ce:2c:dc:01:6f:
60:aa:4a:86:93:e0:0a:90:2b:ab:b2:44:c0:25:48:
5f:b9:16:6a:a7:74:dc:37:e4:74:24:8f:eb:b0:7a:
e0:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:DF:A1:BA:1B:73:90:7B:EA:AB:E5:92:3C:76:6F:E2:4A:70:11:D9
X509v3 Authority Key Identifier:
keyid:00:13:8A:F6:6E:B4:D5:57:FA:4B:39:39:C6:CB:D9:61:A9:12:35:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ABOK9m601Vf6Szk5xsvZYakSNWA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/83233c-898e-491d-958c-4fea624413e4/1/EN-huhtzkHvqq-WSPHZv4kpwEdk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/83233c-898e-491d-958c-4fea624413e4/1/ABOK9m601Vf6Szk5xsvZYakSNWA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.50.233.0/24
Signature Algorithm: sha256WithRSAEncryption
59:90:e6:7b:fa:bf:cd:87:1f:47:8c:80:15:3e:68:55:59:37:
e7:b7:f4:88:a0:3f:43:3b:7f:db:84:f7:21:05:e9:49:54:cc:
fb:c0:79:70:40:d5:04:75:38:7f:96:25:d4:0a:d8:ff:70:a8:
86:59:9e:72:61:cc:69:3e:65:31:9b:a6:7f:dd:52:4f:c3:2a:
d4:20:e0:cb:ac:61:9f:49:c4:89:b2:ca:5c:73:8d:4e:ee:08:
e7:cc:4f:81:eb:95:15:f8:f1:7f:d6:65:48:df:dd:5f:ea:df:
af:8b:ea:6d:4f:f3:21:96:57:55:29:bb:85:2a:9e:c7:c6:47:
62:91:7a:a8:2d:e6:65:78:67:e0:04:2c:00:ec:d2:b0:d2:60:
0e:9a:42:46:4b:7b:6d:ab:22:de:a5:5d:87:2b:03:c8:3a:d6:
66:8b:5f:80:fb:cb:7c:12:99:16:c3:fa:04:9a:93:50:3d:7f:
a9:f2:eb:23:d4:46:e1:07:2f:94:ae:98:6c:42:16:6c:8d:5a:
3b:59:e3:c2:9f:53:26:9b:7c:1c:77:ab:77:ff:de:2c:50:57:
b4:e0:d5:2e:3a:33:b9:2d:07:35:ad:ef:25:d3:3f:51:c3:82:
5b:c4:36:13:9f:bf:59:f9:c4:3d:f5:a2:15:41:f9:53:ad:6a:
97:76:54:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:44:27 2025 by rpki-client