Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/1ebccd-8d1d-46ce-8d98-f004311d4570/1/d13P1AyW6nX7Zee0-G7Dpork5Cc.roa
File: d13P1AyW6nX7Zee0-G7Dpork5Cc.roa (raw, json)
Hash identifier: i2VTKJO3xXkpODT78FHl3dR7DZ8y08Xt4G1pUNzYAIw=
Subject key identifier: 77:5D:CF:D4:0C:96:EA:75:FB:65:E7:B4:F8:6E:C3:A6:8A:E4:E4:27
Certificate issuer: /CN=0d676b1f04aa2cd4f3cd2568310ec141563b9243
Certificate serial: 1543E1
Authority key identifier: 0D:67:6B:1F:04:AA:2C:D4:F3:CD:25:68:31:0E:C1:41:56:3B:92:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DWdrHwSqLNTzzSVoMQ7BQVY7kkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/1ebccd-8d1d-46ce-8d98-f004311d4570/1/d13P1AyW6nX7Zee0-G7Dpork5Cc.roa
Signing time: Tue 11 Jan 2022 14:12:15 +0000
ROA not before: Tue 11 Jan 2022 14:12:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 194.146.115.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1393633 (0x1543e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d676b1f04aa2cd4f3cd2568310ec141563b9243
Validity
Not Before: Jan 11 14:12:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=775dcfd40c96ea75fb65e7b4f86ec3a68ae4e427
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ac:32:76:81:5b:e8:41:97:40:04:0a:70:f5:
d6:08:a2:50:b4:0c:c2:14:68:6e:20:b2:e3:55:c2:
e3:93:87:06:4d:17:23:95:46:3b:8f:00:43:b0:9c:
1c:bd:0f:55:bd:b6:74:b1:09:31:be:00:62:bd:d8:
50:71:fd:b3:06:26:33:a6:7c:94:f1:2f:ad:a3:e0:
01:ad:e5:3b:ba:30:3e:e8:c8:37:dc:68:3a:a0:e6:
f9:7a:72:10:7a:fd:03:f4:63:fe:27:eb:5b:5f:f5:
bf:c5:b5:29:ed:9d:ce:89:23:b7:3d:3f:59:80:88:
d7:2d:06:bd:c1:8d:33:c3:3d:ba:c0:f2:3d:b4:63:
f5:a5:18:01:21:ca:44:da:3a:ad:31:3a:8d:57:0f:
c8:7c:bf:2b:6e:e4:3e:d5:e7:e8:16:d3:6d:ba:8d:
2d:6d:02:fa:7a:f0:d6:e2:87:5a:c4:87:25:63:ab:
48:b5:b5:24:ca:64:92:70:73:8b:30:ce:b1:69:08:
4a:7a:74:38:a1:99:ec:0b:ce:f0:46:46:4c:11:5f:
03:9c:b3:43:ed:ff:34:3d:d7:c3:1d:99:7d:ca:b8:
34:7a:76:16:01:f8:c5:f9:97:ea:df:98:31:6b:9d:
40:74:a2:33:bc:3c:9d:cb:38:ae:5e:f4:e8:d7:36:
87:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:5D:CF:D4:0C:96:EA:75:FB:65:E7:B4:F8:6E:C3:A6:8A:E4:E4:27
X509v3 Authority Key Identifier:
keyid:0D:67:6B:1F:04:AA:2C:D4:F3:CD:25:68:31:0E:C1:41:56:3B:92:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DWdrHwSqLNTzzSVoMQ7BQVY7kkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1ebccd-8d1d-46ce-8d98-f004311d4570/1/d13P1AyW6nX7Zee0-G7Dpork5Cc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1ebccd-8d1d-46ce-8d98-f004311d4570/1/DWdrHwSqLNTzzSVoMQ7BQVY7kkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.146.115.0/24
Signature Algorithm: sha256WithRSAEncryption
15:6e:d3:11:a2:e4:87:46:d4:a0:6c:95:7d:85:3a:08:32:8d:
b7:c3:0d:93:e5:c4:04:5b:34:c3:8d:ce:cb:c0:e4:c6:93:6d:
6a:0b:38:01:26:c1:53:b1:ff:29:04:3a:0b:de:15:1f:b7:bb:
61:41:07:2a:3a:70:99:d3:57:71:ab:65:ff:f3:d5:ca:e7:89:
0d:fd:56:6e:5c:81:db:3b:f8:0b:df:ef:12:44:a6:13:ab:cb:
d5:33:13:9e:7d:17:87:88:8a:46:3f:50:f3:52:50:d9:47:f3:
ae:de:d5:eb:2a:e7:98:ac:8d:ac:ec:f2:c5:72:e9:f3:45:cd:
20:a8:d3:fb:64:15:55:a5:eb:b0:55:b9:b4:e9:00:06:3c:8d:
16:33:ff:a2:9e:00:4f:48:6a:0a:53:80:54:a5:f5:3e:9c:72:
81:4f:3f:c3:ab:54:52:92:32:c3:d8:c0:44:95:57:87:1d:0e:
ae:a4:24:b5:30:53:b7:d7:5c:93:b5:35:a1:8c:51:40:48:67:
38:76:bf:46:a9:9b:20:74:0a:7b:66:3f:4c:92:da:87:00:17:
ec:b1:50:7a:89:be:7c:ce:5d:83:05:98:2e:58:e5:b0:0f:49:
b2:d6:b9:bb:aa:a6:e9:ff:a3:94:99:93:a1:72:6b:14:67:6b:
63:61:52:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:12:43 2025 by rpki-client