Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/51b5e1-03da-4150-bd21-15fe72b15468/1/1-HRAnWQzSJuHnRH4zcHtYhycxo8.roa
File: 1-HRAnWQzSJuHnRH4zcHtYhycxo8.roa (raw, json)
Hash identifier: 2K+Kn/QNgeXv7hYGePEhEuz62Xbgoj4+7Gu5uvjfZKU=
Subject key identifier: F8:74:40:9D:64:33:48:9B:87:9D:11:F8:CD:C1:ED:62:1C:9C:C6:8F
Certificate issuer: /CN=995ecde87cb10677895b662e7e77a346bc4ab1f8
Certificate serial: 018CC94E62AB56FB3000311C08805CA4C81D
Authority key identifier: 99:5E:CD:E8:7C:B1:06:77:89:5B:66:2E:7E:77:A3:46:BC:4A:B1:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mV7N6HyxBneJW2YufnejRrxKsfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/51b5e1-03da-4150-bd21-15fe72b15468/1/1-HRAnWQzSJuHnRH4zcHtYhycxo8.roa
Signing time: Tue 02 Jan 2024 08:33:26 +0000
ROA not before: Tue 02 Jan 2024 08:33:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44396
IP address blocks: 194.48.206.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:62:ab:56:fb:30:00:31:1c:08:80:5c:a4:c8:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=995ecde87cb10677895b662e7e77a346bc4ab1f8
Validity
Not Before: Jan 2 08:33:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f874409d6433489b879d11f8cdc1ed621c9cc68f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:ca:fc:a7:9c:26:ae:12:dd:a1:46:56:32:e3:
df:0e:15:65:49:1a:93:76:26:96:bd:3a:f2:e1:54:
6a:78:b1:12:4d:00:96:89:e1:51:ee:8a:f9:c5:a7:
67:26:38:8c:f4:b5:f4:a8:f7:98:ea:26:c2:29:6c:
37:27:32:f2:15:44:31:24:10:fc:fe:7a:7a:33:30:
25:b3:79:08:be:b2:f5:36:15:8c:1e:82:02:0c:a6:
f1:01:9d:96:db:59:a8:6e:db:f0:c7:ec:fa:0a:c3:
05:d4:ba:d9:89:10:0a:32:f8:5d:9e:57:a8:eb:af:
af:e6:60:d4:f4:39:32:6d:47:bb:d5:17:72:64:5b:
1e:88:9f:15:bd:bb:5d:ad:c7:de:99:48:09:e5:a5:
83:d0:28:09:e1:31:24:8f:dc:ad:e8:75:64:8b:9d:
35:5c:ff:ad:01:05:17:92:ca:fe:de:a1:2d:99:f4:
f5:4e:c2:50:1f:54:49:1a:2a:60:cc:b8:3d:71:4c:
45:c7:a6:27:35:79:05:a9:38:dc:05:8c:68:56:26:
af:6f:2a:3a:1b:65:e7:b2:ee:65:82:b7:12:8b:da:
7c:6b:38:59:c0:ee:b0:b7:43:80:89:08:df:83:37:
89:37:fc:db:c1:fd:d0:ea:c4:ec:e7:9d:35:a8:67:
7f:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:74:40:9D:64:33:48:9B:87:9D:11:F8:CD:C1:ED:62:1C:9C:C6:8F
X509v3 Authority Key Identifier:
keyid:99:5E:CD:E8:7C:B1:06:77:89:5B:66:2E:7E:77:A3:46:BC:4A:B1:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mV7N6HyxBneJW2YufnejRrxKsfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/51b5e1-03da-4150-bd21-15fe72b15468/1/1-HRAnWQzSJuHnRH4zcHtYhycxo8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/51b5e1-03da-4150-bd21-15fe72b15468/1/mV7N6HyxBneJW2YufnejRrxKsfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.48.206.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:e7:70:d7:f8:b8:81:3c:e0:41:a2:26:3f:12:a9:79:c2:ff:
6b:12:c3:ca:d6:f9:b9:41:1c:4a:bc:8b:69:3b:cf:44:0b:96:
63:85:45:72:20:01:e6:f1:c8:28:84:0b:a8:f1:d7:d1:2c:a6:
04:9d:e1:ad:04:08:00:1c:eb:e7:3b:ed:e6:67:1d:ca:37:f3:
ac:03:b5:ac:23:cf:5e:77:7e:79:47:d8:33:32:d8:6b:e7:b5:
50:d0:19:dd:c0:42:fc:38:9d:46:00:41:7c:21:d2:e2:ff:16:
5d:29:5b:b2:c2:e1:63:5d:9a:b2:b1:2d:0b:cf:ef:32:fd:a4:
8e:76:70:3e:36:1a:54:d0:76:c7:13:70:2b:d7:54:26:82:8a:
b9:05:98:1f:6d:a3:dd:84:a0:bc:92:8a:ad:2b:e6:23:e4:f3:
04:ed:d0:a5:05:c5:9a:bf:f0:e0:b3:c9:93:48:70:28:e4:1d:
a9:a3:b0:5c:41:b6:b6:b1:ac:4b:9d:a3:f8:88:0b:63:e0:5b:
f6:a5:7b:55:77:10:fa:bf:9f:96:2c:58:cc:e1:b4:ec:72:78:
7f:de:af:cb:ed:b6:92:f1:74:31:87:03:fd:04:0e:d0:6b:c5:
f8:30:1a:19:07:1a:ee:2c:84:8f:f4:ae:00:a4:57:05:f7:87:
a6:2d:36:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:43:04 2025 by rpki-client