Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/1ebccd-8d1d-46ce-8d98-f004311d4570/1/tU4SlrE4LfcM8vnDJM0EJkg5RA4.roa
File: tU4SlrE4LfcM8vnDJM0EJkg5RA4.roa (raw, json)
Hash identifier: H60ssBP9OpEx9jKoybBja2yeT+jUxqvi7RD8zVb1vtY=
Subject key identifier: B5:4E:12:96:B1:38:2D:F7:0C:F2:F9:C3:24:CD:04:26:48:39:44:0E
Certificate issuer: /CN=0d676b1f04aa2cd4f3cd2568310ec141563b9243
Certificate serial: 02871A
Authority key identifier: 0D:67:6B:1F:04:AA:2C:D4:F3:CD:25:68:31:0E:C1:41:56:3B:92:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DWdrHwSqLNTzzSVoMQ7BQVY7kkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/1ebccd-8d1d-46ce-8d98-f004311d4570/1/tU4SlrE4LfcM8vnDJM0EJkg5RA4.roa
Signing time: Tue 04 Jan 2022 15:54:15 +0000
ROA not before: Tue 04 Jan 2022 15:54:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 194.146.115.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 165658 (0x2871a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d676b1f04aa2cd4f3cd2568310ec141563b9243
Validity
Not Before: Jan 4 15:54:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b54e1296b1382df70cf2f9c324cd04264839440e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:79:7f:db:f3:03:80:e7:9a:40:90:5b:6d:c4:
5f:7e:e9:51:ff:60:96:8c:3e:19:81:03:d9:52:2a:
bd:0d:70:38:d9:2e:e4:70:f9:00:72:ee:0b:3f:13:
c7:76:bd:37:60:c2:4e:27:74:1f:0d:1f:50:6b:66:
28:e0:7a:6b:4b:51:17:79:ec:c3:6c:af:cb:f8:8d:
75:2b:e0:86:e7:b4:22:5d:39:74:2e:b2:8e:fb:7a:
87:6c:22:33:db:37:c8:bb:26:d6:54:78:fb:3f:39:
46:df:1a:15:88:2c:45:54:a1:0a:ce:60:1a:76:27:
24:74:8b:4a:59:b5:2b:57:34:86:e7:d0:35:8a:b3:
4f:43:51:e5:0d:b1:9a:aa:8b:f7:82:0b:57:6a:3b:
54:42:c5:65:7d:56:cd:53:67:37:13:98:72:6e:7f:
b7:ee:55:aa:ab:06:25:2c:f2:b1:fd:f5:c4:44:67:
75:0a:e5:97:ee:b4:3b:ab:59:e7:60:ce:c4:03:86:
f4:10:1b:0f:c2:80:9d:2b:4c:01:47:7c:d9:87:f6:
51:ee:a0:e7:dd:de:79:99:3d:6e:98:01:cb:58:fe:
75:0b:eb:a2:f2:8b:38:e3:1a:c9:9c:ee:b8:86:70:
17:c4:cc:2f:a8:50:c2:9e:b3:a1:bc:2a:48:a7:f5:
fd:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:4E:12:96:B1:38:2D:F7:0C:F2:F9:C3:24:CD:04:26:48:39:44:0E
X509v3 Authority Key Identifier:
keyid:0D:67:6B:1F:04:AA:2C:D4:F3:CD:25:68:31:0E:C1:41:56:3B:92:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DWdrHwSqLNTzzSVoMQ7BQVY7kkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1ebccd-8d1d-46ce-8d98-f004311d4570/1/tU4SlrE4LfcM8vnDJM0EJkg5RA4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1ebccd-8d1d-46ce-8d98-f004311d4570/1/DWdrHwSqLNTzzSVoMQ7BQVY7kkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.146.115.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:69:90:e1:c4:8e:29:09:e7:59:56:e0:9e:77:95:61:dd:c9:
02:d6:85:08:80:6a:ae:f1:d8:df:e1:13:cd:60:4e:75:de:18:
54:f0:58:3a:51:d1:33:f6:01:c8:1c:48:63:5b:f3:2e:b1:aa:
b7:03:f9:40:3c:2e:f6:8a:ca:51:99:2e:da:b4:1a:91:67:29:
10:15:d5:6c:42:d8:cb:23:40:25:3d:ee:9d:0e:4d:6c:6e:a6:
7e:83:49:4f:2a:22:31:d4:6a:6f:91:c0:ed:75:3a:41:41:0b:
a9:f1:f2:01:db:58:19:f8:34:94:aa:f0:87:19:cb:2c:01:b2:
89:f9:4f:7c:ab:5c:b5:c9:a3:3e:02:a7:02:1d:19:85:30:94:
78:b9:ac:f5:7d:ef:8d:10:11:f2:f8:d7:ea:16:de:6e:2e:a2:
a8:8b:6f:e5:2a:17:fb:38:4e:c7:33:d7:66:01:d9:20:ec:69:
62:27:08:3e:1d:e7:5b:b3:4c:a8:0d:32:66:f7:92:b3:44:13:
e0:f5:13:ee:0c:40:c5:7a:7f:1c:ba:e4:16:49:41:5e:a1:ca:
80:35:dc:40:45:f4:34:8c:54:d9:2b:e8:66:e3:11:e4:df:24:
00:b1:23:39:93:c7:82:a0:4e:ee:b4:ef:96:a6:fb:cb:24:a5:
a9:2a:59:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:26:17 2025 by rpki-client