Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/31f397-4315-44f0-bad9-2649e1fda0f5/1/h7TsVbLItQcHQh5NMlvH0LeM0cM.roa
File: h7TsVbLItQcHQh5NMlvH0LeM0cM.roa (raw, json)
Hash identifier: xF//KYEC1LEUIpqQ5icQKRbAGrcFjB6gJENV5ETkuE8=
Subject key identifier: 87:B4:EC:55:B2:C8:B5:07:07:42:1E:4D:32:5B:C7:D0:B7:8C:D1:C3
Certificate issuer: /CN=aa563f5200a4933024e7b47d778619458568adb0
Certificate serial: 01856B40E7465B773084DBB5F63E7BF1D296
Authority key identifier: AA:56:3F:52:00:A4:93:30:24:E7:B4:7D:77:86:19:45:85:68:AD:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qlY_UgCkkzAk57R9d4YZRYVorbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/31f397-4315-44f0-bad9-2649e1fda0f5/1/h7TsVbLItQcHQh5NMlvH0LeM0cM.roa
Signing time: Sun 01 Jan 2023 02:54:53 +0000
ROA not before: Sun 01 Jan 2023 02:54:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 194.26.223.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:40:e7:46:5b:77:30:84:db:b5:f6:3e:7b:f1:d2:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa563f5200a4933024e7b47d778619458568adb0
Validity
Not Before: Jan 1 02:54:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=87b4ec55b2c8b50707421e4d325bc7d0b78cd1c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:54:14:64:e1:3e:a7:c1:ab:06:20:5d:5c:0a:
f1:00:16:b2:2c:f7:c1:c4:1d:ec:26:b2:0e:49:e5:
10:9d:a5:c5:25:fc:bc:6f:3d:73:7a:66:c1:48:8c:
fc:32:ed:81:3f:ac:aa:19:5b:f0:72:ba:c6:f5:b3:
0a:6e:5a:41:c0:e2:26:3c:8f:cf:bf:41:7e:bf:42:
d2:56:54:71:73:f2:8c:e8:90:11:58:b7:f9:ec:db:
41:2c:14:6b:16:4b:ae:4e:37:77:2d:5a:a0:1f:78:
d8:ad:65:d3:3f:d6:50:21:22:4c:14:0a:c7:7a:54:
1c:61:55:7f:96:70:5a:85:7e:b5:9b:4c:7e:4f:e5:
05:c4:5d:9c:fe:37:ff:73:f9:34:7b:f7:41:f4:93:
95:99:3d:df:a5:19:a0:50:cb:7c:33:08:b4:77:85:
97:ea:4b:f0:bf:ae:81:8c:89:fd:4c:82:de:e2:b2:
5e:53:cb:9e:70:18:67:12:4b:8b:ef:64:f1:22:86:
00:01:82:47:40:5e:f9:08:a6:ea:1b:8e:a8:b9:c3:
31:ec:6f:a8:a9:00:80:d9:7a:7e:9d:b1:af:eb:fb:
71:ec:c9:82:9c:d1:71:4e:cd:04:78:60:c0:5f:bb:
4e:c3:fa:87:8c:45:1a:2a:19:34:5d:4e:8d:50:a2:
95:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:B4:EC:55:B2:C8:B5:07:07:42:1E:4D:32:5B:C7:D0:B7:8C:D1:C3
X509v3 Authority Key Identifier:
keyid:AA:56:3F:52:00:A4:93:30:24:E7:B4:7D:77:86:19:45:85:68:AD:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qlY_UgCkkzAk57R9d4YZRYVorbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/31f397-4315-44f0-bad9-2649e1fda0f5/1/h7TsVbLItQcHQh5NMlvH0LeM0cM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/31f397-4315-44f0-bad9-2649e1fda0f5/1/qlY_UgCkkzAk57R9d4YZRYVorbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.26.223.0/24
Signature Algorithm: sha256WithRSAEncryption
64:6f:7a:0f:c0:ea:0a:ed:dc:36:fd:0d:ea:4d:e3:eb:f6:57:
de:22:8d:75:62:ef:33:c4:9a:96:1c:79:6f:61:45:ad:11:3b:
cc:b5:63:b0:07:a1:2b:c0:6f:83:1e:a9:57:88:6e:13:e5:a4:
5b:38:ca:7f:fe:a0:3b:a8:4d:44:19:e2:1c:21:98:9a:21:33:
8b:f9:12:c4:72:70:92:0d:2f:d7:50:88:e9:c0:1c:71:aa:21:
19:4f:75:2c:0c:cd:f9:eb:ef:8a:0e:ab:c9:d7:fe:8e:55:59:
4d:61:8a:68:6f:d9:ab:1e:0a:ec:23:6b:1e:18:3b:8c:b5:ed:
80:17:44:73:65:82:ce:ba:50:8c:1b:44:8a:ff:4a:ea:19:c4:
ab:48:39:15:9f:13:ad:ca:dc:5b:c8:fe:2d:bd:93:6c:33:3a:
10:4d:f4:20:9a:26:75:36:d1:d5:35:85:61:27:87:e5:1e:87:
11:b3:68:dd:c6:a0:4a:9b:fb:f2:da:83:1d:fd:f5:23:e4:4f:
70:b9:f8:82:76:f4:30:5e:07:c5:39:e2:b2:42:03:ed:b6:89:
03:18:63:3c:e4:72:96:93:fb:19:fc:c1:6d:0b:99:21:5b:e3:
3f:76:ba:6b:6d:6f:e4:b6:28:d5:f9:55:b5:46:d1:97:f0:92:
26:0d:14:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:41:06 2025 by rpki-client