Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/45c9ad-c4a7-4652-aad3-c952804932c2/1/ym3XJ3ype50HizHuKgHawZQQHoY.roa
File: ym3XJ3ype50HizHuKgHawZQQHoY.roa (raw, json)
Hash identifier: pZNCjFiELTlmd4uWG4AKmKqzPW8Cmxm95ybnI4hNrek=
Subject key identifier: CA:6D:D7:27:7C:A9:7B:9D:07:8B:31:EE:2A:01:DA:C1:94:10:1E:86
Certificate issuer: /CN=6a016dad273047b18886691485dedd97171c4d68
Certificate serial: 0187E798EE4EAD43E0AA72F34CD717D128F6
Authority key identifier: 6A:01:6D:AD:27:30:47:B1:88:86:69:14:85:DE:DD:97:17:1C:4D:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/agFtrScwR7GIhmkUhd7dlxccTWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/45c9ad-c4a7-4652-aad3-c952804932c2/1/ym3XJ3ype50HizHuKgHawZQQHoY.roa
Signing time: Thu 04 May 2023 16:29:32 +0000
ROA not before: Thu 04 May 2023 16:29:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 194.1.164.0/24 maxlen: 24
194.1.165.0/24 maxlen: 24
194.1.166.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:e7:98:ee:4e:ad:43:e0:aa:72:f3:4c:d7:17:d1:28:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a016dad273047b18886691485dedd97171c4d68
Validity
Not Before: May 4 16:29:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ca6dd7277ca97b9d078b31ee2a01dac194101e86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:0e:a8:1f:52:d2:fb:7c:5b:5b:5c:d2:fa:f0:
97:7b:ec:9a:2f:76:79:be:08:13:6c:b3:ff:b4:95:
3a:0c:0f:9a:1e:f7:a1:67:89:fa:17:9f:72:8d:0d:
a2:63:50:ad:f0:ff:e6:4c:17:25:72:c9:69:c9:47:
b0:ce:ec:ee:c4:b5:40:15:7e:1f:57:25:be:e2:83:
0d:28:f1:3d:2d:40:9e:78:1e:19:1b:17:72:08:de:
03:0b:49:b5:88:b6:05:f7:cd:a6:18:5e:fa:03:93:
6b:1b:13:db:0d:38:73:d0:19:6b:d6:e0:00:44:3d:
e4:86:b1:c2:c5:0f:d2:21:cc:53:89:a6:a5:9f:79:
ad:c3:01:66:95:9e:09:6e:0f:6d:ea:58:49:ba:42:
c3:c4:2a:dc:a6:c8:e6:d6:e1:1f:0c:8f:d4:ac:ff:
24:57:51:ed:4b:04:5b:2c:ec:11:09:32:5f:15:49:
a4:c9:7e:3a:90:cd:68:4f:f2:23:07:a1:9d:56:a0:
be:1d:53:16:2a:cf:3e:79:45:e5:0b:0a:f5:28:8b:
cd:fc:4b:cd:34:c3:24:4e:b0:02:c5:88:53:7d:45:
f1:bc:d9:1c:da:83:09:72:e6:33:1f:71:4b:c7:26:
8b:7d:9b:60:b8:37:c7:e6:89:8d:90:0d:d3:ab:06:
23:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:6D:D7:27:7C:A9:7B:9D:07:8B:31:EE:2A:01:DA:C1:94:10:1E:86
X509v3 Authority Key Identifier:
keyid:6A:01:6D:AD:27:30:47:B1:88:86:69:14:85:DE:DD:97:17:1C:4D:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/agFtrScwR7GIhmkUhd7dlxccTWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/45c9ad-c4a7-4652-aad3-c952804932c2/1/ym3XJ3ype50HizHuKgHawZQQHoY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/45c9ad-c4a7-4652-aad3-c952804932c2/1/agFtrScwR7GIhmkUhd7dlxccTWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.1.164.0-194.1.166.255
Signature Algorithm: sha256WithRSAEncryption
99:43:ca:bf:fc:cc:c1:9b:7c:21:c5:96:7a:59:8d:bc:4b:b3:
e9:e8:c4:2f:23:38:0b:b1:a3:ab:80:c4:6b:a8:d7:ee:33:89:
15:c3:7d:32:2c:4d:be:12:4c:0f:f6:9c:34:36:38:45:4f:b2:
09:6f:0e:41:b7:ad:8d:0c:45:b4:fc:e2:a4:c7:ed:66:23:86:
e8:2b:53:41:b1:01:e2:2b:1a:6a:ab:66:14:2c:69:0d:ad:c2:
8e:38:61:94:67:58:33:4c:19:ba:fe:eb:fd:72:b9:72:29:b5:
31:1d:c4:02:fc:ff:ef:c8:31:f3:d5:ee:f3:66:3e:01:91:d6:
cc:cd:0d:2c:e7:ce:67:67:a6:be:3b:b5:90:a2:e1:07:d6:64:
bc:0a:98:e6:ce:59:9e:9c:44:66:a2:dd:73:7e:1c:97:a0:8b:
6f:df:37:86:a6:f0:db:80:5c:ad:6d:0a:25:ea:14:26:7f:4b:
70:97:e8:d9:e2:b9:ae:d0:b3:18:a0:33:32:fe:60:dc:2b:e9:
eb:cb:27:52:ca:2e:9a:0e:f3:63:69:fa:49:5d:0a:d8:33:3a:
7e:63:75:c2:6a:00:11:9e:d5:f1:4c:0e:9c:a8:f7:3b:00:d8:
64:f7:91:98:49:f8:a1:5b:84:d4:5d:82:72:18:f0:89:6f:66:
6d:c3:bf:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:23:50 2025 by rpki-client