Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/6f4855-c1e4-4499-a077-1acbfc4965c4/1/6zCCibqr7LAI0rsNeVN7LXmtrus.roa
File: 6zCCibqr7LAI0rsNeVN7LXmtrus.roa (raw, json)
Hash identifier: LO0HYlgKTSlu3mU9ZlT78k7gLSMCGZelldwI68F5E84=
Subject key identifier: EB:30:82:89:BA:AB:EC:B0:08:D2:BB:0D:79:53:7B:2D:79:AD:AE:EB
Certificate issuer: /CN=f521a7409ed492eaa7afa7007dfc59423b58829c
Certificate serial: 018369427E9E87D253487978F92A8DA521E9
Authority key identifier: F5:21:A7:40:9E:D4:92:EA:A7:AF:A7:00:7D:FC:59:42:3B:58:82:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9SGnQJ7Ukuqnr6cAffxZQjtYgpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/6f4855-c1e4-4499-a077-1acbfc4965c4/1/6zCCibqr7LAI0rsNeVN7LXmtrus.roa
Signing time: Fri 23 Sep 2022 07:31:48 +0000
ROA not before: Fri 23 Sep 2022 07:31:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 20900
IP address blocks: 194.4.13.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:69:42:7e:9e:87:d2:53:48:79:78:f9:2a:8d:a5:21:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f521a7409ed492eaa7afa7007dfc59423b58829c
Validity
Not Before: Sep 23 07:31:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=eb308289baabecb008d2bb0d79537b2d79adaeeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:39:36:0f:cf:59:32:d6:37:d1:39:b3:04:d3:
49:c1:0f:5c:9b:26:b2:6b:bb:3f:07:ae:3d:39:da:
2a:90:8a:b7:3f:cd:9d:29:87:f1:4b:c0:96:6e:03:
57:83:fc:9e:61:7c:8c:d7:ee:78:f8:3e:fb:8a:4a:
fd:dd:8a:6a:a4:56:bf:3a:d9:a2:43:72:5c:79:6a:
03:8a:e4:48:99:ef:b2:f1:eb:bb:f1:fe:6d:34:52:
d7:ba:97:da:8d:22:6a:b9:89:ee:b7:aa:f8:bf:ec:
22:c8:30:d8:1a:b8:21:23:03:d1:6f:ff:bf:b4:ab:
d1:57:17:13:77:53:fc:16:cb:67:26:18:b1:01:16:
83:18:77:22:8b:66:ab:68:54:05:ec:d0:b3:b7:f3:
70:fa:a8:60:54:35:69:89:79:b0:de:e0:55:5b:de:
32:b3:ab:fd:28:b2:31:f6:17:15:93:32:28:29:00:
5e:d8:00:5e:cb:00:b3:01:45:88:c6:14:73:4e:0e:
8e:0b:d3:61:37:be:ed:7d:f5:e1:6b:d5:1f:02:f2:
ad:61:fc:0d:63:c7:4e:de:83:e0:45:b9:91:af:53:
75:93:59:86:c0:e3:41:00:5a:f1:b7:b1:f7:85:7f:
05:7c:4c:c1:a1:a0:de:d1:47:fb:c2:99:76:69:21:
32:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:30:82:89:BA:AB:EC:B0:08:D2:BB:0D:79:53:7B:2D:79:AD:AE:EB
X509v3 Authority Key Identifier:
keyid:F5:21:A7:40:9E:D4:92:EA:A7:AF:A7:00:7D:FC:59:42:3B:58:82:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9SGnQJ7Ukuqnr6cAffxZQjtYgpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/6f4855-c1e4-4499-a077-1acbfc4965c4/1/6zCCibqr7LAI0rsNeVN7LXmtrus.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/6f4855-c1e4-4499-a077-1acbfc4965c4/1/9SGnQJ7Ukuqnr6cAffxZQjtYgpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.4.13.0/24
Signature Algorithm: sha256WithRSAEncryption
71:85:de:42:f6:68:9c:1f:75:e4:2a:45:99:c9:b9:91:a1:f8:
56:5d:23:2b:a4:4d:9a:d5:92:7b:33:7d:57:76:c3:38:90:e4:
6f:af:53:63:0d:74:51:c1:4c:dc:48:6a:1e:ec:a8:f0:76:45:
51:68:af:0b:3a:18:f6:97:44:87:62:1c:3d:8e:9a:e2:d8:8b:
8d:59:cc:32:48:54:34:e2:93:26:a2:0f:f4:16:16:a7:ce:49:
57:9d:94:a9:b8:f5:96:da:56:cd:ae:de:21:df:1e:ba:69:bc:
c3:43:a4:43:30:17:71:73:09:74:a7:76:6d:7e:d9:14:1e:58:
78:f4:a1:a8:95:fe:6f:8f:85:04:e2:3c:44:49:95:b9:a1:d5:
7b:2a:a5:66:36:60:3e:10:27:72:b5:53:a0:88:d0:e9:c7:14:
70:16:5c:64:09:96:7f:9a:a1:9a:fb:d4:7c:66:3b:16:66:d9:
04:98:24:c6:c8:b2:e1:dc:a0:49:32:f5:37:8c:ba:f0:30:8e:
fe:90:94:66:93:01:95:7a:e2:f0:b0:5a:bc:f8:06:50:a1:63:
79:cd:58:8f:40:d9:6b:55:04:a6:09:b1:73:4b:69:5d:ec:4a:
3c:43:2c:b1:8f:5b:f2:46:71:82:4a:cc:cd:71:fb:dd:2d:79:
bc:c3:2d:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:34:09 2025 by rpki-client