Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/45c9ad-c4a7-4652-aad3-c952804932c2/1/2QmdPTWuauRgji0RCcHaU--Tzxk.roa
File: 2QmdPTWuauRgji0RCcHaU--Tzxk.roa (raw, json)
Hash identifier: tHSR+1ptH5MKYwgPzIAqWWbvXgxVDPzl9e5X3uKM65I=
Subject key identifier: D9:09:9D:3D:35:AE:6A:E4:60:8E:2D:11:09:C1:DA:53:EF:93:CF:19
Certificate issuer: /CN=6a016dad273047b18886691485dedd97171c4d68
Certificate serial: 01875683F9DF60E129C7A4750E983E6B05CC
Authority key identifier: 6A:01:6D:AD:27:30:47:B1:88:86:69:14:85:DE:DD:97:17:1C:4D:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/agFtrScwR7GIhmkUhd7dlxccTWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/45c9ad-c4a7-4652-aad3-c952804932c2/1/2QmdPTWuauRgji0RCcHaU--Tzxk.roa
Signing time: Thu 06 Apr 2023 12:21:42 +0000
ROA not before: Thu 06 Apr 2023 12:21:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 194.1.164.0/23 maxlen: 23
194.1.166.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:56:83:f9:df:60:e1:29:c7:a4:75:0e:98:3e:6b:05:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a016dad273047b18886691485dedd97171c4d68
Validity
Not Before: Apr 6 12:21:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d9099d3d35ae6ae4608e2d1109c1da53ef93cf19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a4:9a:d5:c1:0f:85:15:dc:a6:64:12:8e:93:
a2:46:16:30:4f:dc:0d:7b:b5:ab:05:40:0e:f1:3a:
87:d8:12:9c:52:62:58:85:f8:c4:ad:81:9f:e7:c4:
8f:ae:40:06:80:9b:84:12:d7:ca:b1:30:8e:de:af:
e0:cd:a4:76:e1:dc:35:0e:42:74:56:47:3b:2c:63:
30:e8:4e:58:a8:ea:97:ed:a7:ed:38:34:d1:e1:ba:
4e:d1:b4:25:e7:d9:c1:74:5c:de:8a:97:c6:02:64:
79:ba:0a:cc:72:bd:98:92:54:fa:52:c0:71:00:9a:
bc:da:c2:e2:a5:f5:e5:b2:24:8f:07:e4:36:24:1e:
5e:2a:34:85:30:87:2b:fd:f5:1d:1d:ed:2d:ee:57:
f1:8c:b9:f3:e1:79:36:3b:ae:f7:a2:76:0a:7b:83:
d8:77:bf:f2:75:f1:17:d1:2b:48:3f:ec:86:18:6f:
73:bc:dd:1d:ce:8a:4d:3b:c9:98:8e:2b:89:75:ba:
ac:d3:86:64:46:ac:e0:e4:14:c2:f6:e8:76:f2:bf:
4c:fd:95:20:44:2d:cc:28:27:8c:29:ee:1d:0d:7c:
5d:d3:1c:24:00:4e:ee:59:8f:4b:f5:1f:6b:1a:4e:
c7:3f:8f:64:1a:74:88:76:f4:83:4a:6d:32:b6:14:
2e:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:09:9D:3D:35:AE:6A:E4:60:8E:2D:11:09:C1:DA:53:EF:93:CF:19
X509v3 Authority Key Identifier:
keyid:6A:01:6D:AD:27:30:47:B1:88:86:69:14:85:DE:DD:97:17:1C:4D:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/agFtrScwR7GIhmkUhd7dlxccTWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/45c9ad-c4a7-4652-aad3-c952804932c2/1/2QmdPTWuauRgji0RCcHaU--Tzxk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/45c9ad-c4a7-4652-aad3-c952804932c2/1/agFtrScwR7GIhmkUhd7dlxccTWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.1.164.0-194.1.166.255
Signature Algorithm: sha256WithRSAEncryption
6a:16:d0:ce:60:b0:84:94:b2:13:4f:d9:01:f5:5e:a9:1b:f9:
7e:b6:79:cb:a9:ba:aa:8f:26:86:cc:6f:e5:c1:80:95:6b:ab:
1a:17:5a:75:fa:57:ff:0e:9e:02:f2:9b:ca:ba:ea:35:6d:ec:
66:87:8b:4a:77:c9:1d:da:75:bc:37:86:cc:ad:14:5a:aa:35:
96:ce:34:21:f4:c3:e9:31:eb:b3:7b:ad:7d:66:71:79:43:f5:
84:2e:ae:89:24:8e:d6:47:19:91:f9:5a:46:a3:ba:8d:5c:0f:
2b:57:5a:ac:69:a0:36:d4:aa:26:b2:bb:74:28:93:26:44:8e:
85:85:9f:d6:8b:d2:ec:32:c9:bc:e0:2f:b9:16:f8:de:69:7c:
ab:7f:d6:a9:7e:57:ed:a9:53:a0:aa:da:57:36:e1:04:59:28:
38:97:98:9d:6b:c4:6f:70:ad:91:81:3b:9c:96:73:e2:7a:6e:
2d:cd:d8:30:17:67:51:46:df:27:c2:8f:d5:bb:0d:84:cc:79:
0d:97:4a:7c:e1:82:bb:bf:19:78:d2:00:cf:3a:7a:75:54:75:
9f:09:96:9a:99:fb:16:ed:c9:f9:0c:42:97:0f:9b:c4:37:7f:
e5:05:3a:64:34:e6:7e:8f:c3:a8:b4:02:96:23:ae:3e:13:d0:
f7:c2:78:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:21:36 2025 by rpki-client