Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/f7453d-96ec-4d4e-9f3e-0e8bc8e812ee/1/iySxd4tMbCEPkoMPKxUDu_5FR6M.roa
File: iySxd4tMbCEPkoMPKxUDu_5FR6M.roa (raw, json)
Hash identifier: aI0T28ewsgkic6wSWjP7Zq6jLamL49Y0wJiPkH5nxZQ=
Subject key identifier: 8B:24:B1:77:8B:4C:6C:21:0F:92:83:0F:2B:15:03:BB:FE:45:47:A3
Certificate issuer: /CN=7192f22a78a8071b02a362a8db33e8f3f72dd348
Certificate serial: 0194258F696129A6D186D69AABC2232569F3
Authority key identifier: 71:92:F2:2A:78:A8:07:1B:02:A3:62:A8:DB:33:E8:F3:F7:2D:D3:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cZLyKnioBxsCo2Ko2zPo8_ct00g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/f7453d-96ec-4d4e-9f3e-0e8bc8e812ee/1/iySxd4tMbCEPkoMPKxUDu_5FR6M.roa
Signing time: Thu 02 Jan 2025 05:49:03 +0000
ROA not before: Thu 02 Jan 2025 05:49:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207522
IP address blocks: 192.145.111.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:69:61:29:a6:d1:86:d6:9a:ab:c2:23:25:69:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7192f22a78a8071b02a362a8db33e8f3f72dd348
Validity
Not Before: Jan 2 05:49:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8b24b1778b4c6c210f92830f2b1503bbfe4547a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:9d:ff:fc:ea:98:67:89:26:36:af:6a:ea:c9:
ee:8a:05:33:82:5c:c0:8b:6b:94:a4:a7:fb:00:20:
bb:a7:47:01:85:16:f7:d9:9c:5b:5c:18:15:0b:d2:
b0:ac:df:8e:c7:6a:87:d5:58:db:7d:86:c5:19:80:
e1:36:ba:50:f6:ef:d8:61:33:e8:8a:46:73:6c:49:
3d:aa:a2:98:fd:90:79:81:7d:6e:c3:a5:af:7d:2a:
4c:74:73:a9:68:97:60:0f:e0:e5:67:0f:6d:30:3d:
43:c0:44:1d:43:10:11:4d:65:fa:0b:6e:d4:f3:8c:
e8:a2:43:7c:37:c6:6a:d9:e7:dc:fe:c9:89:89:a3:
88:5c:ac:a7:a0:a2:01:9a:61:61:bd:9e:ce:7e:48:
1c:a0:d7:7d:e3:fa:6c:7d:6b:c7:65:ff:b2:4e:da:
9f:34:aa:d1:39:cd:b7:b1:85:94:85:be:02:b5:32:
ce:6a:e5:05:9c:1f:b8:a8:7a:53:9b:a0:c5:5e:66:
00:d7:8c:58:ec:75:77:b6:f3:1f:66:fd:a2:c2:9b:
ce:00:63:13:24:f5:fc:1f:0b:ae:aa:9d:ae:95:1a:
50:79:ef:28:dd:ac:60:74:f3:11:77:97:08:61:c2:
26:b3:6e:81:98:15:c5:08:05:9a:5e:27:50:94:a4:
58:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:24:B1:77:8B:4C:6C:21:0F:92:83:0F:2B:15:03:BB:FE:45:47:A3
X509v3 Authority Key Identifier:
keyid:71:92:F2:2A:78:A8:07:1B:02:A3:62:A8:DB:33:E8:F3:F7:2D:D3:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cZLyKnioBxsCo2Ko2zPo8_ct00g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/f7453d-96ec-4d4e-9f3e-0e8bc8e812ee/1/iySxd4tMbCEPkoMPKxUDu_5FR6M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/f7453d-96ec-4d4e-9f3e-0e8bc8e812ee/1/cZLyKnioBxsCo2Ko2zPo8_ct00g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.145.111.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:21:b6:0c:17:79:b9:35:82:f0:96:d3:b1:f6:6c:4b:00:6f:
b1:a7:ce:bf:49:98:c8:8b:ae:08:30:8c:6e:79:d3:21:e0:69:
2c:48:1a:8c:26:1a:4f:b3:0f:e5:d0:40:73:97:1f:39:ab:3f:
cc:88:34:fd:5a:5d:07:2c:5f:ca:37:f5:b3:f3:1d:5d:d3:1d:
ab:31:5c:22:d8:2a:3c:cf:5b:3c:23:4d:f0:e3:69:e1:4b:8a:
a6:77:18:84:82:27:82:47:4b:9b:26:b8:31:dc:e3:1e:ac:d9:
33:a8:d2:24:c4:4e:36:b6:14:1d:b2:f3:33:79:89:05:07:c6:
76:0d:34:d1:e3:50:ba:64:40:97:91:7b:56:8b:ad:58:31:a0:
52:08:ac:a3:74:b0:ae:18:e4:12:28:25:98:46:38:1e:af:7b:
6f:36:80:c5:f5:68:7d:b6:02:5e:9a:bd:9e:92:e8:49:d9:b1:
e3:d6:2b:7f:04:79:c5:73:b8:c0:5d:13:49:20:42:63:bf:70:
8a:36:e9:79:0c:5b:6b:65:3f:cb:84:63:78:8b:b8:70:f9:41:
3d:fa:fe:a9:a8:bd:ed:97:18:45:ae:6e:aa:9c:af:9b:fb:7b:
a7:0c:e2:dd:13:28:59:d0:b9:98:f8:d1:5c:48:48:82:fc:90:
c3:6a:ad:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:33:21 2025 by rpki-client