Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/056800-d57a-48cc-8775-a6f327fd8d60/1/v4_9CySa8IHFrNm8v29jOs-KcGo.roa
File: v4_9CySa8IHFrNm8v29jOs-KcGo.roa (raw, json)
Hash identifier: WTaiF3nHXbv5/Dks+aohGptUDOV1EA8OIh0EFIATPdA=
Subject key identifier: BF:8F:FD:0B:24:9A:F0:81:C5:AC:D9:BC:BF:6F:63:3A:CF:8A:70:6A
Certificate issuer: /CN=77070a983fd1f6b5cc558602fbf18def920b1af0
Certificate serial: 018964C061E014CCEDC814F5BC75EF601573
Authority key identifier: 77:07:0A:98:3F:D1:F6:B5:CC:55:86:02:FB:F1:8D:EF:92:0B:1A:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dwcKmD_R9rXMVYYC-_GN75ILGvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/056800-d57a-48cc-8775-a6f327fd8d60/1/v4_9CySa8IHFrNm8v29jOs-KcGo.roa
Signing time: Mon 17 Jul 2023 16:47:56 +0000
ROA not before: Mon 17 Jul 2023 16:47:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49505
IP address blocks: 194.104.232.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:64:c0:61:e0:14:cc:ed:c8:14:f5:bc:75:ef:60:15:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77070a983fd1f6b5cc558602fbf18def920b1af0
Validity
Not Before: Jul 17 16:47:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bf8ffd0b249af081c5acd9bcbf6f633acf8a706a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:a5:bf:91:ec:5d:0b:c7:7e:03:db:56:0e:9e:
49:0f:58:03:8c:f1:ed:6c:c0:7c:c4:60:4f:65:67:
10:1a:c9:98:a6:93:74:99:56:12:61:87:6d:eb:68:
21:a4:96:ac:0d:a1:ed:1f:13:8b:4b:87:17:c2:d3:
17:44:eb:c9:f8:4f:08:7b:87:dc:f4:ca:1d:aa:61:
8e:03:d6:cf:36:77:81:f7:f6:47:71:4e:ed:09:cd:
42:12:93:02:1a:0b:cd:43:70:06:a8:d5:35:ff:51:
cd:65:72:94:0b:d7:99:23:1e:0b:cd:53:f0:82:9a:
c6:8b:b8:95:a5:51:eb:dd:65:67:1e:b1:dd:d5:cb:
b4:25:f5:26:74:70:2c:92:f7:f6:2a:a8:48:29:33:
46:4b:fe:e4:ba:db:9a:b9:85:5d:6a:12:91:6b:69:
db:e4:b8:c3:d1:c7:85:fe:bd:22:e8:d4:8c:82:f3:
e8:57:b5:4f:59:0c:bb:ac:74:7d:14:79:d3:97:85:
43:a6:35:14:cd:51:45:ea:45:27:25:12:f0:93:b3:
5b:4c:a1:48:41:e1:b3:3e:0c:0d:2b:b8:36:cc:45:
13:d3:2b:80:33:db:00:28:19:76:ea:46:3f:c7:c6:
7f:95:73:a0:09:c2:52:fc:c2:88:fd:5c:aa:79:42:
37:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:8F:FD:0B:24:9A:F0:81:C5:AC:D9:BC:BF:6F:63:3A:CF:8A:70:6A
X509v3 Authority Key Identifier:
keyid:77:07:0A:98:3F:D1:F6:B5:CC:55:86:02:FB:F1:8D:EF:92:0B:1A:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dwcKmD_R9rXMVYYC-_GN75ILGvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/056800-d57a-48cc-8775-a6f327fd8d60/1/v4_9CySa8IHFrNm8v29jOs-KcGo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/056800-d57a-48cc-8775-a6f327fd8d60/1/dwcKmD_R9rXMVYYC-_GN75ILGvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.104.232.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:16:82:3d:d3:1a:6f:87:9c:04:6b:7d:61:4e:6b:65:59:fb:
42:45:f7:0b:93:c2:2d:96:2d:b6:6c:6f:a5:e6:06:dc:16:47:
7a:53:36:75:24:ae:4e:6b:a0:38:b6:f4:63:98:b3:06:32:55:
21:a4:9d:77:9a:25:18:eb:b9:5f:43:a4:14:42:ac:f0:c5:44:
d8:e9:a6:de:40:1a:ff:79:be:36:c2:dc:7b:49:3f:25:8e:3e:
c2:4c:77:3b:a5:59:fe:1c:59:0a:57:9a:e8:4c:19:e2:49:6f:
46:ad:9b:e6:37:4f:33:7c:17:2c:93:37:5c:52:83:18:02:c9:
df:87:ef:71:11:07:47:57:a7:33:71:63:da:ec:3d:0b:d4:64:
63:32:f9:cf:9d:73:b2:b7:f6:c7:8b:13:ee:f8:17:58:48:c7:
23:ed:2f:15:6f:6a:8b:0c:24:00:f2:59:ae:a0:82:a7:83:a4:
3c:26:b4:1e:42:91:ff:02:b1:d7:c3:80:cc:f8:7f:7e:7f:1f:
1a:2a:9f:b1:bd:f2:6e:53:72:5b:1f:b8:b3:55:c1:63:06:51:
ee:7b:62:61:48:4a:9d:db:2f:48:39:37:0e:02:fe:ed:09:22:
67:e7:59:46:fd:22:90:85:3f:1d:b3:6c:1d:22:6b:87:2a:27:
2f:44:e2:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 13:21:35 2025 by rpki-client