Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/7f72b7-6ae6-42ba-981c-ba44979144d0/1/iLoS4xBFn1AH2sBJa5r1gbQyXQk.roa
File: iLoS4xBFn1AH2sBJa5r1gbQyXQk.roa (raw, json)
Hash identifier: j/BbtPlLx8OheiIn/F9rHimJgMqSKoG2o5M87B8QiWs=
Subject key identifier: 88:BA:12:E3:10:45:9F:50:07:DA:C0:49:6B:9A:F5:81:B4:32:5D:09
Certificate issuer: /CN=69c8ea3e18d8e9be36327534ec8ae87a4cccf263
Certificate serial: 01856E38CAC52143B134722E8F8F94B6733A
Authority key identifier: 69:C8:EA:3E:18:D8:E9:BE:36:32:75:34:EC:8A:E8:7A:4C:CC:F2:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/acjqPhjY6b42MnU07IroekzM8mM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/7f72b7-6ae6-42ba-981c-ba44979144d0/1/iLoS4xBFn1AH2sBJa5r1gbQyXQk.roa
Signing time: Sun 01 Jan 2023 16:44:53 +0000
ROA not before: Sun 01 Jan 2023 16:44:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57311
IP address blocks: 194.213.16.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:38:ca:c5:21:43:b1:34:72:2e:8f:8f:94:b6:73:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69c8ea3e18d8e9be36327534ec8ae87a4cccf263
Validity
Not Before: Jan 1 16:44:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=88ba12e310459f5007dac0496b9af581b4325d09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:9b:90:43:6a:d9:ae:a1:21:a4:49:34:67:0c:
d3:73:eb:5f:07:e4:0f:9a:fb:f2:bf:25:47:df:bd:
6a:41:5b:d8:2c:cc:26:6c:bd:99:79:9e:73:95:c2:
ec:13:04:57:13:6e:0c:3d:d9:84:32:e4:16:b8:7e:
8f:c5:31:15:e6:44:42:a0:bc:63:f8:7e:88:e6:3b:
03:56:4a:e9:a1:e3:d7:b4:71:9d:83:46:44:11:5d:
af:5a:45:9f:8f:d2:26:0f:f1:ae:04:c0:6a:f9:f4:
ed:7a:17:0a:92:45:1a:44:1b:0a:e2:94:76:3c:60:
2a:e1:86:65:76:2c:a0:9e:e4:96:1d:1b:50:68:bf:
23:d5:ac:40:bc:14:ca:4c:5b:4f:d9:52:f5:12:6f:
37:53:80:8a:de:e4:04:d0:d9:08:a1:e7:ab:9a:5b:
dc:b0:f5:32:68:0b:f9:62:b4:29:6e:12:c3:45:7b:
87:28:fd:d3:dc:cb:04:28:00:1d:4e:f4:15:58:6e:
17:10:f3:89:28:f9:89:86:49:53:62:32:c1:41:99:
5c:0b:3b:17:a4:5f:8b:69:4a:2c:e7:5e:03:ab:24:
2c:5f:64:28:b7:42:66:71:57:5f:49:db:18:5a:75:
84:3a:46:32:8a:6a:14:a0:30:e6:d9:9c:98:6d:ab:
03:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:BA:12:E3:10:45:9F:50:07:DA:C0:49:6B:9A:F5:81:B4:32:5D:09
X509v3 Authority Key Identifier:
keyid:69:C8:EA:3E:18:D8:E9:BE:36:32:75:34:EC:8A:E8:7A:4C:CC:F2:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/acjqPhjY6b42MnU07IroekzM8mM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/7f72b7-6ae6-42ba-981c-ba44979144d0/1/iLoS4xBFn1AH2sBJa5r1gbQyXQk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/7f72b7-6ae6-42ba-981c-ba44979144d0/1/acjqPhjY6b42MnU07IroekzM8mM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.213.16.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:1d:06:7e:8d:60:39:c4:84:7b:30:21:68:2b:bd:a9:16:20:
20:81:60:df:bb:3e:ea:b5:c8:f4:72:9b:ec:85:68:cc:e9:13:
11:69:66:72:c2:af:a8:f8:c9:63:d5:3c:bc:fb:24:82:73:87:
26:dd:13:23:4c:8e:b4:08:67:94:7e:e3:f9:b9:0b:0b:7a:77:
67:8d:04:d0:44:3d:4d:01:3a:09:3c:a3:5a:57:6c:6d:44:42:
be:d4:b1:e8:fb:6d:b2:b3:c9:97:4c:c4:63:92:30:57:e1:27:
58:55:37:90:d6:a6:02:6b:8d:57:da:c5:41:4f:8f:6b:e6:4a:
ea:1a:75:51:68:28:f2:c6:54:ba:7e:15:5b:8d:c8:f3:b9:ea:
73:61:c1:23:cf:e1:c6:0e:cd:af:73:3f:64:bf:10:af:24:bd:
8e:c1:6e:3b:6d:30:0d:8b:06:99:ca:6e:f5:63:28:b2:53:9b:
a5:82:af:57:f9:52:9d:0c:5c:a0:bc:65:c5:35:77:e5:0e:37:
d2:13:e1:e3:22:47:0c:15:bd:84:af:34:a7:fe:cf:44:da:46:
5e:ff:bf:95:43:2a:d2:6d:36:c4:f3:44:fd:6a:40:65:63:89:
ec:ae:92:be:98:b7:40:9f:3b:83:d2:60:57:cf:e3:4c:a9:07:
d2:26:31:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:07:32 2025 by rpki-client