Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/414b46-db5e-4440-a1e4-3c54d11f872c/1/cFpop9dizlBgkUyaV36_gGd8lnU.roa
File: cFpop9dizlBgkUyaV36_gGd8lnU.roa (raw, json)
Hash identifier: 4REvNTps3BupjiKoFenAilAIXfeTEPHale+uZfisCuc=
Subject key identifier: 70:5A:68:A7:D7:62:CE:50:60:91:4C:9A:57:7E:BF:80:67:7C:96:75
Certificate issuer: /CN=c2807081d6fc22bdff80d2bd7eca8fec0fc5fef6
Certificate serial: 019423D6FD7888BCAB2B26C736EA1A79C875
Authority key identifier: C2:80:70:81:D6:FC:22:BD:FF:80:D2:BD:7E:CA:8F:EC:0F:C5:FE:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/woBwgdb8Ir3_gNK9fsqP7A_F_vY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/414b46-db5e-4440-a1e4-3c54d11f872c/1/cFpop9dizlBgkUyaV36_gGd8lnU.roa
Signing time: Wed 01 Jan 2025 21:47:59 +0000
ROA not before: Wed 01 Jan 2025 21:47:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29014
IP address blocks: 194.59.10.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:fd:78:88:bc:ab:2b:26:c7:36:ea:1a:79:c8:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2807081d6fc22bdff80d2bd7eca8fec0fc5fef6
Validity
Not Before: Jan 1 21:47:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=705a68a7d762ce5060914c9a577ebf80677c9675
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:64:4f:f0:1c:2b:75:0c:49:e5:d4:35:04:7b:
8e:c4:00:6c:f5:ef:c8:ac:9c:06:d7:d0:68:5f:4a:
b5:dc:bf:5f:b6:63:05:d7:c8:a7:3f:64:4c:42:bf:
d9:b0:ad:24:be:70:bd:55:42:fe:3e:e4:6e:35:1e:
00:9d:d9:ee:30:84:10:b5:2c:74:45:93:ff:98:56:
d0:9b:5c:10:d5:2e:26:83:3c:36:20:7a:9e:b4:a8:
8f:cb:77:74:4a:60:5f:12:dc:77:3e:86:ac:47:d6:
d9:74:30:90:4b:06:e9:96:db:c4:f2:9c:a2:00:81:
1c:21:da:fe:65:54:62:e8:1c:25:c9:e0:68:48:0f:
78:5c:ab:5b:de:fe:f1:be:ac:3f:47:0d:4d:d3:b2:
32:9a:94:0d:d6:86:22:4c:d8:ef:80:0c:0b:65:4c:
4c:70:db:a5:b9:c9:64:e4:60:50:07:31:a5:a9:8f:
74:6d:c0:47:e9:e8:d0:d8:48:74:4f:21:74:f0:f6:
0d:7c:cd:0d:c8:be:e2:c9:97:79:ff:ad:ae:6b:8b:
ea:08:4e:ed:21:f8:29:67:26:8f:9f:da:57:9e:ef:
e8:84:1b:75:0e:9d:1b:e5:01:e3:3f:c3:1d:6f:1f:
60:e2:c0:92:fa:db:19:0d:6c:b3:11:35:22:72:df:
3e:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:5A:68:A7:D7:62:CE:50:60:91:4C:9A:57:7E:BF:80:67:7C:96:75
X509v3 Authority Key Identifier:
keyid:C2:80:70:81:D6:FC:22:BD:FF:80:D2:BD:7E:CA:8F:EC:0F:C5:FE:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/woBwgdb8Ir3_gNK9fsqP7A_F_vY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/414b46-db5e-4440-a1e4-3c54d11f872c/1/cFpop9dizlBgkUyaV36_gGd8lnU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/414b46-db5e-4440-a1e4-3c54d11f872c/1/woBwgdb8Ir3_gNK9fsqP7A_F_vY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.59.10.0/23
Signature Algorithm: sha256WithRSAEncryption
8e:39:ed:48:bf:5e:fa:af:33:11:61:68:3f:b7:80:aa:bc:4a:
b1:cf:32:fc:04:dd:9d:99:72:5b:1d:fc:91:50:54:d0:ec:5e:
61:6d:ab:bc:fe:f8:e2:cf:de:85:e4:c8:de:bf:23:d1:71:c4:
72:8b:b5:5a:8a:4e:2e:d3:cc:49:e3:6c:0e:e4:c3:18:a2:89:
a3:63:4b:39:33:a2:4b:54:2f:79:f5:ff:39:9b:cc:dd:21:23:
56:0e:58:b5:b4:fb:de:8d:f2:7d:c2:1e:eb:b3:c9:9d:c2:dc:
aa:f6:c1:14:cf:0b:dc:74:cc:bb:02:4e:b1:c4:1c:5c:4d:32:
32:d7:2a:82:b5:95:6d:04:4c:7f:ce:38:ff:cc:36:19:fc:93:
12:6c:24:f1:03:46:28:83:0f:58:28:d4:0e:0c:3e:91:82:e0:
72:f0:95:0b:e8:c7:60:c0:ef:c3:1f:7c:de:b4:27:a9:ab:92:
71:02:ec:02:cc:35:a6:5c:f2:66:47:75:28:0e:37:b3:1e:e8:
20:52:5b:93:71:7d:5a:db:ad:26:2c:dd:16:06:10:2d:19:f3:
5d:b1:08:ff:0e:4c:26:97:67:04:2b:32:3e:92:bd:3e:4c:e9:
08:dc:f3:dc:58:35:88:cb:64:84:69:f3:5f:cf:52:44:3c:80:
7a:b0:56:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:15:10 2025 by rpki-client