Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/1ebccd-8d1d-46ce-8d98-f004311d4570/1/RFUgnWullotLTZU_VsPKMhKMLg0.roa
File: RFUgnWullotLTZU_VsPKMhKMLg0.roa (raw, json)
Hash identifier: qtUwnUA2CZ8OcUUpeYLJJ9HOLacc7/9DBZe0VZYYgCA=
Subject key identifier: 44:55:20:9D:6B:A5:96:8B:4B:4D:95:3F:56:C3:CA:32:12:8C:2E:0D
Certificate issuer: /CN=0d676b1f04aa2cd4f3cd2568310ec141563b9243
Certificate serial: 018CC2DB32860EEB3D0AB953E10D95A90C96
Authority key identifier: 0D:67:6B:1F:04:AA:2C:D4:F3:CD:25:68:31:0E:C1:41:56:3B:92:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DWdrHwSqLNTzzSVoMQ7BQVY7kkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/1ebccd-8d1d-46ce-8d98-f004311d4570/1/RFUgnWullotLTZU_VsPKMhKMLg0.roa
Signing time: Mon 01 Jan 2024 02:29:54 +0000
ROA not before: Mon 01 Jan 2024 02:29:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 398465
IP address blocks: 194.146.115.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:32:86:0e:eb:3d:0a:b9:53:e1:0d:95:a9:0c:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d676b1f04aa2cd4f3cd2568310ec141563b9243
Validity
Not Before: Jan 1 02:29:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4455209d6ba5968b4b4d953f56c3ca32128c2e0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:63:12:77:dc:57:26:fe:15:13:46:67:f5:57:
f9:30:bf:c8:e8:8b:dd:7c:51:30:8f:33:32:2d:e5:
40:74:ab:d4:d4:96:da:50:61:76:e5:b7:0d:42:19:
16:32:38:a2:cf:cf:ff:6c:f9:16:53:70:fd:d9:6a:
e5:3f:bc:7d:a3:05:6f:1f:1d:e1:52:93:26:9d:ed:
6b:11:69:4e:1f:e2:ce:01:43:4f:bf:60:7e:15:0e:
f0:ba:f4:22:2b:e6:e2:e7:8b:16:03:3d:cc:dd:0b:
d3:ac:b9:75:4f:06:d0:a9:6a:7c:cb:be:24:1d:13:
d8:14:0f:b7:5f:c3:35:9b:9e:a1:ed:90:2b:d8:50:
02:87:4a:a5:1d:2e:4f:c7:f9:51:34:fc:a6:98:ba:
61:b8:2b:6a:21:80:59:82:a0:61:3b:3d:cc:ba:28:
58:79:9d:18:3f:81:c1:0b:85:b0:45:3b:d5:56:54:
fe:98:b8:da:da:f8:3c:30:75:37:bc:e4:51:e1:ac:
72:75:62:c3:1c:1e:92:ec:e1:08:f1:5a:58:c7:cc:
bc:1d:02:c1:cb:6a:08:bc:d6:80:8a:e7:72:a1:b9:
aa:da:b8:da:02:ec:3a:68:2b:b8:1d:c7:90:c1:7b:
e4:47:64:d7:50:42:fb:1a:a4:a4:37:db:f8:f6:1e:
7e:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:55:20:9D:6B:A5:96:8B:4B:4D:95:3F:56:C3:CA:32:12:8C:2E:0D
X509v3 Authority Key Identifier:
keyid:0D:67:6B:1F:04:AA:2C:D4:F3:CD:25:68:31:0E:C1:41:56:3B:92:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DWdrHwSqLNTzzSVoMQ7BQVY7kkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1ebccd-8d1d-46ce-8d98-f004311d4570/1/RFUgnWullotLTZU_VsPKMhKMLg0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1ebccd-8d1d-46ce-8d98-f004311d4570/1/DWdrHwSqLNTzzSVoMQ7BQVY7kkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.146.115.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:63:fe:8f:64:8d:bc:2c:c6:59:9d:88:03:ca:7b:77:a3:d9:
0e:ff:58:30:7b:40:a9:df:64:da:52:a8:0a:54:b8:fe:c3:b8:
c6:e3:cb:c5:93:f7:45:7a:a1:13:ae:07:be:c0:84:b6:23:9e:
42:f5:4a:d4:84:60:a0:e7:99:f0:ae:58:d6:22:73:60:d9:ce:
48:30:5e:01:18:4b:66:e0:85:18:65:42:d5:19:b1:33:3f:27:
3f:fa:5a:e4:92:d3:59:2a:92:89:1e:67:74:98:4e:e9:5b:74:
bf:7d:8a:f7:bf:63:7c:57:da:37:ca:f3:1c:4b:4f:0e:00:55:
eb:3a:5d:70:44:2b:9e:3a:16:00:1b:ba:62:ef:ec:e4:6d:73:
a9:7a:40:12:7f:88:f3:43:f6:0b:b2:36:00:cb:af:65:aa:e7:
24:f0:94:05:9e:78:90:eb:14:9f:62:c4:8b:1f:49:9f:8f:51:
79:af:72:75:16:8c:5f:62:c6:73:cc:74:74:8e:ff:7b:17:44:
fd:30:1c:16:56:ec:65:18:36:2e:89:24:12:df:dd:8f:69:f7:
4e:a4:08:e7:d9:47:19:ef:32:1b:db:08:1e:53:55:73:d2:2f:
9c:86:99:74:ff:c2:6c:c5:5b:5d:ff:1d:b4:91:0a:c7:68:bf:
af:7f:1a:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:09:24 2025 by rpki-client