Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/656ca9-bbbc-49b7-aacc-24aa4cee6b2c/1/fr_-yoC2HIArMFAMfGvuKN6OqOY.roa
File: fr_-yoC2HIArMFAMfGvuKN6OqOY.roa (raw, json)
Hash identifier: EtyQ65SzUQdI8Iyk9tEHDQ179+cgOtzdU812sgoVpsk=
Subject key identifier: 7E:BF:FE:CA:80:B6:1C:80:2B:30:50:0C:7C:6B:EE:28:DE:8E:A8:E6
Certificate issuer: /CN=0aac388b37d44768fce0eaec97de433faf72b9dc
Certificate serial: 0186FF4BDDC5A108C8749D10FB790E951BBC
Authority key identifier: 0A:AC:38:8B:37:D4:47:68:FC:E0:EA:EC:97:DE:43:3F:AF:72:B9:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cqw4izfUR2j84Orsl95DP69yudw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/656ca9-bbbc-49b7-aacc-24aa4cee6b2c/1/fr_-yoC2HIArMFAMfGvuKN6OqOY.roa
Signing time: Mon 20 Mar 2023 13:53:27 +0000
ROA not before: Mon 20 Mar 2023 13:53:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209828
IP address blocks: 194.69.162.0/24 maxlen: 24
2a0c:ae81::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:ff:4b:dd:c5:a1:08:c8:74:9d:10:fb:79:0e:95:1b:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0aac388b37d44768fce0eaec97de433faf72b9dc
Validity
Not Before: Mar 20 13:53:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7ebffeca80b61c802b30500c7c6bee28de8ea8e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:94:66:86:b4:dc:79:f9:52:af:2b:92:98:6f:
99:ee:09:2d:cf:32:d6:ba:a3:b1:28:45:80:02:61:
82:42:be:82:5d:96:9e:f2:b6:d7:42:bb:3b:d5:36:
de:24:82:e3:95:00:1c:be:a5:96:df:b4:b8:85:6c:
2c:f7:fc:35:4b:90:a1:9f:f3:12:97:bb:7b:6f:35:
51:1a:2d:b4:e0:0c:1d:b3:06:95:22:e5:0e:82:b0:
94:1a:10:b0:f3:6d:14:ab:dc:41:59:20:a8:85:e5:
56:a4:7a:ca:2a:cc:b0:67:66:7f:07:fc:28:df:98:
39:bd:65:6c:77:68:01:98:5e:eb:6f:2a:27:8e:6b:
21:8c:42:e6:60:a5:f3:d6:5e:d7:2e:38:ae:ea:22:
09:85:ee:e8:fa:96:75:4d:51:c7:72:51:d4:30:c7:
d5:96:5b:a4:24:17:60:9a:9c:e6:a8:83:2b:9f:2f:
e1:d0:c5:25:d1:a2:ac:13:e2:8e:2a:70:a0:8c:d7:
87:81:72:a6:20:8d:88:c8:41:fb:ae:e2:f6:40:09:
05:bb:17:35:9a:11:81:5d:17:c6:e2:69:67:66:ab:
59:8a:5a:3a:a8:e0:19:c6:ec:b6:c2:bc:44:3f:1f:
7c:5e:5e:09:79:53:a0:2d:d7:9b:b3:fd:7d:bf:61:
7c:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:BF:FE:CA:80:B6:1C:80:2B:30:50:0C:7C:6B:EE:28:DE:8E:A8:E6
X509v3 Authority Key Identifier:
keyid:0A:AC:38:8B:37:D4:47:68:FC:E0:EA:EC:97:DE:43:3F:AF:72:B9:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cqw4izfUR2j84Orsl95DP69yudw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/656ca9-bbbc-49b7-aacc-24aa4cee6b2c/1/fr_-yoC2HIArMFAMfGvuKN6OqOY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/656ca9-bbbc-49b7-aacc-24aa4cee6b2c/1/Cqw4izfUR2j84Orsl95DP69yudw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.69.162.0/24
IPv6:
2a0c:ae81::/32
Signature Algorithm: sha256WithRSAEncryption
a5:66:18:b8:f6:8b:b3:57:94:3b:ed:29:e1:e9:21:cc:dc:62:
05:f9:4a:44:46:87:ea:73:3b:01:87:ab:54:0d:8f:b6:e5:a9:
f1:b8:05:dd:2e:24:c5:df:be:fa:b0:ec:3f:62:74:72:15:aa:
d7:a8:3d:61:03:f0:6d:24:99:50:50:b3:51:26:32:e3:5e:7e:
c1:b2:1f:0f:90:e2:50:2b:a1:12:19:39:06:1a:df:fb:1a:9c:
02:cc:5f:47:e8:55:59:92:6f:60:8e:84:17:28:ac:c5:f9:eb:
55:21:7a:11:95:2d:95:28:3d:d7:2e:55:4b:49:c8:90:3d:15:
a3:e6:e6:9a:25:d7:2d:db:05:fc:4d:7d:fa:22:dc:7b:cb:d3:
73:f1:88:73:db:d6:57:51:2f:e7:b0:2a:0b:7c:c7:94:6c:52:
30:63:4d:05:ac:ae:0b:0d:4c:c3:69:09:d9:18:d6:58:d2:c7:
cf:2a:77:12:30:14:7b:8f:ab:fb:50:ac:80:ff:79:8e:3d:d2:
bd:75:74:7e:94:b2:1a:30:0e:55:ef:79:05:a2:42:d0:e0:ce:
5f:a3:6d:1d:0f:32:5b:b2:0d:48:38:59:60:b3:1b:a8:1f:fe:
02:58:26:e2:d5:d8:f5:29:79:8f:80:a5:43:7c:63:32:38:8e:
42:9c:68:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:14:51 2025 by rpki-client