Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/1ebccd-8d1d-46ce-8d98-f004311d4570/1/cYEQHKJXBglo-vIzEwgK_cJ5x00.roa
File: cYEQHKJXBglo-vIzEwgK_cJ5x00.roa (raw, json)
Hash identifier: KVu7kIY+kHkHaRab2wT1uPGY5xmaNgYf0fz7uqzfJnU=
Subject key identifier: 71:81:10:1C:A2:57:06:09:68:FA:F2:33:13:08:0A:FD:C2:79:C7:4D
Certificate issuer: /CN=0d676b1f04aa2cd4f3cd2568310ec141563b9243
Certificate serial: AA363D
Authority key identifier: 0D:67:6B:1F:04:AA:2C:D4:F3:CD:25:68:31:0E:C1:41:56:3B:92:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DWdrHwSqLNTzzSVoMQ7BQVY7kkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/1ebccd-8d1d-46ce-8d98-f004311d4570/1/cYEQHKJXBglo-vIzEwgK_cJ5x00.roa
Signing time: Wed 16 Mar 2022 17:34:20 +0000
ROA not before: Wed 16 Mar 2022 17:34:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49999
IP address blocks: 194.146.115.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11155005 (0xaa363d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d676b1f04aa2cd4f3cd2568310ec141563b9243
Validity
Not Before: Mar 16 17:34:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7181101ca257060968faf23313080afdc279c74d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:90:c0:e9:79:e7:6a:d0:a8:92:df:e3:de:fc:
6e:1e:4d:ea:6d:5b:dc:b5:48:6a:95:7d:92:05:c9:
54:92:9e:7d:91:f6:85:08:98:f3:dd:f9:33:00:f3:
e8:d1:1a:07:b2:34:02:94:86:24:15:ad:2a:2c:af:
7f:cb:96:a9:6c:82:bd:c4:02:c5:59:4c:3c:c6:c4:
1a:b9:e5:e4:3b:7b:04:71:0b:f2:78:4c:c7:3e:4b:
d1:25:e2:42:b7:5c:3f:07:34:74:91:4e:2b:9d:6c:
bc:9a:da:a5:df:ed:71:d4:55:25:87:a5:50:1a:7c:
ea:fa:67:cb:f1:c4:5e:33:43:83:56:2a:96:7e:11:
d4:b0:29:57:c9:3e:38:d2:b2:91:27:22:e7:61:32:
c2:f7:7e:a0:14:d3:48:c0:e4:6f:d3:9b:86:49:eb:
a1:d3:6e:43:15:a4:8f:cf:66:83:8b:43:89:1a:1d:
17:86:97:0a:56:a0:c7:f5:69:1e:a7:56:c1:a1:cd:
fa:e7:cb:f6:64:10:56:9a:2d:a8:96:5e:86:c4:02:
e5:a5:ed:62:ba:bb:1f:f7:ec:47:cc:7c:a9:55:6e:
7b:8b:0a:9e:ab:af:4c:fb:14:63:78:44:68:07:7a:
2b:d9:2c:54:fe:4e:9e:6a:25:65:d1:a6:d3:aa:d8:
18:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:81:10:1C:A2:57:06:09:68:FA:F2:33:13:08:0A:FD:C2:79:C7:4D
X509v3 Authority Key Identifier:
keyid:0D:67:6B:1F:04:AA:2C:D4:F3:CD:25:68:31:0E:C1:41:56:3B:92:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DWdrHwSqLNTzzSVoMQ7BQVY7kkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1ebccd-8d1d-46ce-8d98-f004311d4570/1/cYEQHKJXBglo-vIzEwgK_cJ5x00.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1ebccd-8d1d-46ce-8d98-f004311d4570/1/DWdrHwSqLNTzzSVoMQ7BQVY7kkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.146.115.0/24
Signature Algorithm: sha256WithRSAEncryption
68:1c:f7:c2:2f:bb:40:2c:08:12:96:21:d1:24:ea:49:a2:ec:
63:0a:94:17:37:9f:7d:81:d8:ce:ff:32:3e:f7:ff:0d:70:4c:
16:b5:cc:61:42:a8:c8:61:bb:2e:eb:0b:45:93:fd:1a:bd:b3:
92:98:9e:e2:3a:ba:0a:de:22:87:fc:35:d0:84:66:9d:e9:ac:
e0:b6:dc:95:4f:2c:1f:be:2d:0f:81:19:d3:d9:21:c0:63:ab:
8b:1d:73:97:9f:be:57:56:0b:8e:79:18:97:1b:ed:84:1a:35:
f3:af:ec:b1:e8:97:32:60:e6:fa:f4:b4:0f:5f:f1:79:58:62:
97:1b:78:03:f9:ce:95:0c:97:fe:4e:35:dc:36:d8:0f:fe:00:
76:f0:fb:86:1e:40:a8:ff:79:59:3a:45:dd:20:80:bb:0e:51:
15:55:0f:93:4e:14:24:80:be:e3:16:7d:51:85:dc:43:e4:26:
ba:d5:85:b5:5f:73:ce:86:5d:b8:2d:05:1c:b3:70:eb:9b:90:
0d:a4:00:e5:41:15:b0:a9:1e:1f:20:03:b5:3e:7f:9e:e6:4e:
be:cf:63:4c:cf:54:15:92:1f:0a:ae:9d:4f:8c:c5:e4:61:c5:
d5:a7:7b:30:5f:90:e4:83:25:e2:40:38:6e:c0:29:77:11:7e:
dd:cd:4b:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:19:39 2025 by rpki-client