Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/b862d3-6844-46f7-bd98-83bc797278e2/1/axyFkqObmXHqa_Ob1uVjR2A2EtY.roa
File: axyFkqObmXHqa_Ob1uVjR2A2EtY.roa (raw, json)
Hash identifier: 1J+yMLgTsDMyA6hTYUuDBv6exUr/rCwEewoPSvYJRD4=
Subject key identifier: 6B:1C:85:92:A3:9B:99:71:EA:6B:F3:9B:D6:E5:63:47:60:36:12:D6
Certificate issuer: /CN=f3b2805d8776eedeb7aa4cbe5af568cdb2629fc2
Certificate serial: 0185A4F037AEF4834EC7321D769C05AB5F13
Authority key identifier: F3:B2:80:5D:87:76:EE:DE:B7:AA:4C:BE:5A:F5:68:CD:B2:62:9F:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/87KAXYd27t63qky-WvVozbJin8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/b862d3-6844-46f7-bd98-83bc797278e2/1/axyFkqObmXHqa_Ob1uVjR2A2EtY.roa
Signing time: Thu 12 Jan 2023 07:44:44 +0000
ROA not before: Thu 12 Jan 2023 07:44:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 178.255.219.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:a4:f0:37:ae:f4:83:4e:c7:32:1d:76:9c:05:ab:5f:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3b2805d8776eedeb7aa4cbe5af568cdb2629fc2
Validity
Not Before: Jan 12 07:44:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6b1c8592a39b9971ea6bf39bd6e56347603612d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:a0:c3:c6:30:68:84:e7:30:bb:0c:67:83:45:
84:e9:76:e3:3b:4e:74:1d:54:ed:c7:07:56:7f:12:
49:4d:77:e7:dc:a3:1c:a5:89:5c:a8:7d:ca:47:9e:
a0:b1:f8:6e:e0:c2:7c:df:0e:b9:a5:57:c5:1b:44:
b5:8b:b0:19:bf:be:9e:75:60:1b:66:6a:5c:4a:82:
90:05:50:4c:26:01:59:04:7d:c1:7c:07:84:30:e2:
86:99:ac:24:c8:8f:74:ea:64:ee:76:ba:79:03:e5:
18:c4:6b:34:63:eb:42:54:fe:8d:b2:07:71:ed:0e:
b9:55:a7:51:3d:bb:3c:5a:ae:4e:0d:dc:42:ca:31:
ab:96:4c:47:24:98:b2:de:d9:1e:e6:34:e3:bc:cf:
74:9f:78:e8:54:75:90:0b:bc:42:5d:73:33:eb:a0:
e6:40:95:30:49:76:5e:a3:4b:bf:26:87:ab:7a:b0:
74:8c:fb:51:db:7c:0d:9e:5a:f7:7f:0e:db:da:9f:
26:a6:c6:f6:19:cb:84:39:a2:55:5d:60:f1:29:d8:
c6:23:d1:27:38:3d:b6:3d:6a:6e:2d:cf:98:03:f1:
e0:73:81:5a:a6:fe:75:92:e9:0a:f2:b6:e1:35:89:
94:c6:8e:9c:58:40:74:ef:56:53:0e:03:84:e3:08:
0b:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:1C:85:92:A3:9B:99:71:EA:6B:F3:9B:D6:E5:63:47:60:36:12:D6
X509v3 Authority Key Identifier:
keyid:F3:B2:80:5D:87:76:EE:DE:B7:AA:4C:BE:5A:F5:68:CD:B2:62:9F:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/87KAXYd27t63qky-WvVozbJin8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/b862d3-6844-46f7-bd98-83bc797278e2/1/axyFkqObmXHqa_Ob1uVjR2A2EtY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/b862d3-6844-46f7-bd98-83bc797278e2/1/87KAXYd27t63qky-WvVozbJin8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.255.219.0/24
Signature Algorithm: sha256WithRSAEncryption
01:68:91:6b:73:ce:83:c9:54:6d:e2:5a:2c:1b:11:a3:c5:0d:
df:d4:0a:73:9f:a7:95:c4:38:78:be:ea:40:18:90:4d:c2:45:
7b:c5:74:10:2a:dd:9c:55:5d:e8:ea:aa:a4:0e:13:7f:4f:57:
01:01:e1:c3:32:a4:7a:95:24:e5:1b:f9:54:dc:e6:2f:40:94:
d4:d5:90:35:96:8e:24:41:84:bf:ea:c8:9e:ff:63:87:07:c3:
1c:c4:2d:1c:4a:69:23:eb:4a:b7:76:da:9d:b8:e6:73:5d:52:
da:02:45:25:41:a0:e9:52:a8:de:9c:3f:89:21:67:ef:70:c5:
ef:de:61:13:54:27:ff:8d:d1:79:62:4a:b1:ad:fd:86:2a:1d:
28:78:03:e7:ab:8a:7c:b3:97:1f:91:36:cc:01:a4:93:eb:44:
32:09:fc:71:d6:28:9e:84:bb:0c:59:22:03:50:17:ed:32:ca:
d3:c7:cb:1d:f6:1c:aa:eb:2e:4c:80:46:fc:dc:e5:19:d7:d3:
d7:fd:6d:dc:91:77:71:2f:4e:08:b1:44:ab:de:6b:46:c9:ed:
94:8c:98:10:db:5b:41:62:f4:ba:66:28:af:88:5f:fb:25:ff:
00:b9:53:2e:ae:a6:be:93:4b:f7:87:d8:e1:47:63:33:07:ed:
0a:6e:ab:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:08:19 2025 by rpki-client