Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/1ebccd-8d1d-46ce-8d98-f004311d4570/1/tOX5Y36ER5IsiZ0_gU05ceUSwYc.roa
File: tOX5Y36ER5IsiZ0_gU05ceUSwYc.roa (raw, json)
Hash identifier: ndeZcdkLKRWQLnysQUgu9yQANNTrGSaeUF5ob0wRIvU=
Subject key identifier: B4:E5:F9:63:7E:84:47:92:2C:89:9D:3F:81:4D:39:71:E5:12:C1:87
Certificate issuer: /CN=0d676b1f04aa2cd4f3cd2568310ec141563b9243
Certificate serial: 018CF7240038FE0DB557F9716A9C792A6272
Authority key identifier: 0D:67:6B:1F:04:AA:2C:D4:F3:CD:25:68:31:0E:C1:41:56:3B:92:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DWdrHwSqLNTzzSVoMQ7BQVY7kkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/1ebccd-8d1d-46ce-8d98-f004311d4570/1/tOX5Y36ER5IsiZ0_gU05ceUSwYc.roa
Signing time: Thu 11 Jan 2024 06:09:40 +0000
ROA not before: Thu 11 Jan 2024 06:09:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216414
IP address blocks: 194.146.115.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:f7:24:00:38:fe:0d:b5:57:f9:71:6a:9c:79:2a:62:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d676b1f04aa2cd4f3cd2568310ec141563b9243
Validity
Not Before: Jan 11 06:09:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b4e5f9637e8447922c899d3f814d3971e512c187
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:5c:39:6c:98:7f:fc:a8:f2:f4:53:b8:f8:ab:
c8:94:9a:f3:44:9f:16:69:33:8e:5f:69:7f:ce:35:
60:b4:d4:df:d7:a8:d9:b3:dc:89:a6:ae:93:b1:39:
10:a5:87:f4:80:11:c4:7b:84:48:a1:d1:80:e8:28:
73:a9:b3:ea:58:44:7d:07:56:ec:b9:b8:db:1b:8c:
b2:6b:fc:07:7c:0c:ce:9e:1b:50:f7:cf:06:6e:5b:
ed:4f:63:0b:78:8f:47:cb:e4:d6:ac:75:93:6e:fd:
a2:42:5f:b7:73:6c:e6:45:d3:16:15:b7:a6:83:4d:
32:b1:83:af:93:79:42:e4:62:17:d6:d0:a4:dc:e3:
a2:e1:c8:7a:95:85:6c:dd:ef:95:d3:c7:18:20:f8:
b2:45:02:fd:1d:39:b9:5b:35:45:b5:e6:82:ad:90:
0d:c3:b4:3e:06:17:95:22:ea:0a:28:5c:39:8b:b6:
2a:72:6d:04:ba:d1:b8:09:3c:a7:6b:2f:63:61:42:
da:ff:59:8b:f3:b0:a5:da:4a:ba:9b:a3:20:ac:2e:
0e:59:b8:97:d5:64:b7:58:02:75:7a:41:4e:fb:78:
8c:9f:fd:6a:99:d2:c9:e2:13:33:1f:3a:1c:cc:0d:
f8:04:c8:3c:2f:69:5e:d4:b9:eb:77:e9:11:de:ad:
01:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:E5:F9:63:7E:84:47:92:2C:89:9D:3F:81:4D:39:71:E5:12:C1:87
X509v3 Authority Key Identifier:
keyid:0D:67:6B:1F:04:AA:2C:D4:F3:CD:25:68:31:0E:C1:41:56:3B:92:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DWdrHwSqLNTzzSVoMQ7BQVY7kkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1ebccd-8d1d-46ce-8d98-f004311d4570/1/tOX5Y36ER5IsiZ0_gU05ceUSwYc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1ebccd-8d1d-46ce-8d98-f004311d4570/1/DWdrHwSqLNTzzSVoMQ7BQVY7kkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.146.115.0/24
Signature Algorithm: sha256WithRSAEncryption
73:05:1e:f2:3c:f2:25:7f:5d:1a:b6:49:a4:88:8b:71:36:64:
ac:2e:08:7d:a1:34:af:a2:a0:19:ac:6c:1f:d6:c4:96:bb:fd:
ab:c7:b6:ee:27:31:91:4d:ad:44:d3:6c:45:f8:36:3e:51:c3:
5e:c7:43:61:42:db:38:53:87:78:ce:7c:79:47:36:f2:91:a2:
6f:85:9c:a8:80:b0:23:bc:af:b4:0e:92:70:55:e4:e2:f7:b8:
28:09:d4:9c:b9:57:41:dc:79:e6:e6:7a:4e:67:08:7f:ad:eb:
99:fb:7d:59:b1:8d:c0:1a:a4:d5:a9:a5:07:2e:79:7c:ce:68:
41:fe:4e:26:4e:84:a2:68:ab:fb:91:f4:37:1d:5a:69:ec:2e:
62:cc:18:c5:70:16:eb:9c:fa:99:f6:5e:b3:4c:0b:b3:fc:5a:
f8:58:67:af:4b:95:41:91:71:ed:1b:43:99:7f:6c:44:3f:4a:
ec:33:0c:dc:31:07:74:8b:35:c4:25:e1:5f:7d:0d:b6:ae:89:
cf:9a:f1:75:b8:a2:dc:69:b5:4a:f8:05:5e:6a:66:b3:02:9b:
8c:c6:e4:4e:3c:7b:ff:2c:33:cc:6b:84:65:85:10:75:a1:9a:
69:a6:b3:bb:ad:13:12:f9:7c:26:73:b7:69:66:14:57:2e:69:
f2:81:2e:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:06:10 2025 by rpki-client