Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/45c9ad-c4a7-4652-aad3-c952804932c2/1/SSpiYs0pI02VGsK-JIsxaoQz5OI.roa
File: SSpiYs0pI02VGsK-JIsxaoQz5OI.roa (raw, json)
Hash identifier: lDPMSLn/4UT0ys/fRqgSr7bhadPEaP1Qc5csj2Whu1U=
Subject key identifier: 49:2A:62:62:CD:29:23:4D:95:1A:C2:BE:24:8B:31:6A:84:33:E4:E2
Certificate issuer: /CN=6a016dad273047b18886691485dedd97171c4d68
Certificate serial: 01875683F991A6B5661964148DA73ECC77A6
Authority key identifier: 6A:01:6D:AD:27:30:47:B1:88:86:69:14:85:DE:DD:97:17:1C:4D:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/agFtrScwR7GIhmkUhd7dlxccTWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/45c9ad-c4a7-4652-aad3-c952804932c2/1/SSpiYs0pI02VGsK-JIsxaoQz5OI.roa
Signing time: Thu 06 Apr 2023 12:21:42 +0000
ROA not before: Thu 06 Apr 2023 12:21:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 194.1.164.0/23 maxlen: 23
194.1.166.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:56:83:f9:91:a6:b5:66:19:64:14:8d:a7:3e:cc:77:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a016dad273047b18886691485dedd97171c4d68
Validity
Not Before: Apr 6 12:21:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=492a6262cd29234d951ac2be248b316a8433e4e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:60:37:fc:8f:73:ec:a5:92:6d:d1:66:27:2c:
ab:5d:ea:81:88:f0:a9:be:89:fe:98:52:a2:7f:e5:
32:b0:b6:65:eb:45:80:64:32:32:38:40:38:21:35:
a0:b2:da:5c:b9:f6:82:9e:07:ff:0a:dd:5e:a7:ed:
b7:26:e4:c1:06:8c:eb:26:96:b2:fc:2f:3d:b9:c2:
a6:86:26:79:ee:be:83:8f:67:a9:64:8e:d4:e9:3a:
b0:08:d6:df:4f:13:67:eb:be:50:06:62:ca:e3:af:
09:7a:6d:a1:08:d3:16:e7:5a:0b:ff:2d:35:c2:8d:
35:41:81:8a:92:6b:59:b9:5e:04:d2:8b:52:ee:cb:
32:83:a1:66:fa:88:d8:ca:56:6b:c9:de:14:9c:84:
60:2c:91:33:f6:47:38:28:2a:81:b5:c1:a8:fd:9c:
98:71:02:c6:0a:8a:e2:ed:db:73:da:58:e1:82:e0:
67:e7:05:6c:0a:4d:bd:13:99:89:1d:08:49:b7:66:
ab:4a:72:30:69:4b:61:c1:58:63:48:21:38:38:9c:
f2:3f:16:d1:52:33:7a:55:c6:57:14:15:95:49:4f:
50:2b:3a:6e:b2:7b:0f:36:2e:6b:75:75:02:78:f1:
2a:06:09:45:50:79:aa:0b:1f:eb:e0:0a:5b:ad:15:
22:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:2A:62:62:CD:29:23:4D:95:1A:C2:BE:24:8B:31:6A:84:33:E4:E2
X509v3 Authority Key Identifier:
keyid:6A:01:6D:AD:27:30:47:B1:88:86:69:14:85:DE:DD:97:17:1C:4D:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/agFtrScwR7GIhmkUhd7dlxccTWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/45c9ad-c4a7-4652-aad3-c952804932c2/1/SSpiYs0pI02VGsK-JIsxaoQz5OI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/45c9ad-c4a7-4652-aad3-c952804932c2/1/agFtrScwR7GIhmkUhd7dlxccTWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.1.164.0-194.1.166.255
Signature Algorithm: sha256WithRSAEncryption
62:ba:21:9c:5e:80:cc:36:bf:26:57:96:3d:88:06:12:71:1f:
9d:bf:7a:b1:14:85:19:d9:e0:ca:0e:0a:18:9f:32:ac:c3:96:
4c:11:fc:6b:63:de:16:c1:91:84:75:f7:86:28:e2:46:47:b6:
b9:7c:36:e7:cb:c8:4d:be:2a:10:ea:4a:05:90:62:0c:ad:62:
15:20:f4:0f:c2:ff:8a:4a:c9:4a:61:ee:b5:bc:c1:a3:61:c7:
52:2a:ca:c8:d9:28:bc:5d:2b:69:3b:67:b0:e9:d4:cc:fb:55:
49:69:5d:29:96:8d:3a:24:43:c7:ae:69:7f:ee:fc:e0:0f:d9:
8f:b9:28:57:81:93:5b:d6:2a:eb:6b:a1:28:2f:8c:c4:8c:00:
db:06:8c:da:fd:16:26:5f:d2:8b:77:80:43:a8:88:3f:42:c3:
a9:22:35:19:aa:25:4e:0f:35:53:32:a0:86:e1:7c:63:e7:1e:
d2:b4:77:81:d6:4a:a4:32:2b:f0:6d:59:8f:75:b4:9e:c0:99:
b8:31:15:f5:85:7d:1d:ed:e5:8e:ec:ba:07:aa:14:37:b2:c4:
6c:bf:a4:0a:23:8a:ff:3f:72:fd:1f:4e:10:08:3a:ca:7d:b6:
14:57:b1:48:2e:18:91:13:32:16:30:8d:86:72:b5:cf:d0:00:
d7:5c:f3:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:18:57 2025 by rpki-client