Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/9GHN6GSMWh16APWbnq7wDsfKnn8.roa
File: 9GHN6GSMWh16APWbnq7wDsfKnn8.roa (raw, json)
Hash identifier: JH6A2KPyYk6kU9S+YXzBoAozjZCx1I1/FQIb22szn8c=
Subject key identifier: F4:61:CD:E8:64:8C:5A:1D:7A:00:F5:9B:9E:AE:F0:0E:C7:CA:9E:7F
Certificate issuer: /CN=0c90c356e2864f43894857443555d8b5c0352819
Certificate serial: 0194228DE39BDC888E50A64DB57968BD3322
Authority key identifier: 0C:90:C3:56:E2:86:4F:43:89:48:57:44:35:55:D8:B5:C0:35:28:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DJDDVuKGT0OJSFdENVXYtcA1KBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/9GHN6GSMWh16APWbnq7wDsfKnn8.roa
Signing time: Wed 01 Jan 2025 15:48:31 +0000
ROA not before: Wed 01 Jan 2025 15:48:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214198
IP address blocks: 82.199.200.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:e3:9b:dc:88:8e:50:a6:4d:b5:79:68:bd:33:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c90c356e2864f43894857443555d8b5c0352819
Validity
Not Before: Jan 1 15:48:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f461cde8648c5a1d7a00f59b9eaef00ec7ca9e7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:26:7d:ab:a2:92:1a:dd:13:d9:6b:29:58:0e:
86:02:d2:d0:36:bc:ae:56:05:ca:6e:40:90:26:13:
2c:5e:48:a0:e2:16:aa:d9:e6:5e:bf:d7:77:47:a8:
5d:ea:72:53:10:de:2d:76:17:d5:9c:16:96:d7:ce:
10:52:1e:32:87:9b:b0:0a:fd:72:b8:46:cf:cc:24:
6b:c3:ed:09:dd:cc:6b:bb:c2:5a:c3:67:ee:59:08:
ba:cc:d0:c0:48:8f:2e:7f:c8:00:95:e9:60:f6:14:
1e:aa:01:06:75:ce:58:a8:aa:c3:3b:66:ce:de:a7:
28:01:b3:6f:72:fd:fd:b6:ea:4c:41:84:f8:71:ce:
73:c6:c7:d6:0c:56:cc:6f:e8:94:af:08:ef:d1:32:
db:8a:eb:29:ee:1a:7c:84:df:ff:90:c1:4b:0d:7d:
e5:52:95:5c:f5:43:13:1a:da:7c:ce:3d:7c:a4:3a:
72:36:49:23:a6:2c:58:e2:c9:45:3c:80:47:36:ef:
48:23:f9:1f:a2:c2:74:53:be:e6:00:b6:9e:36:69:
a3:97:66:ab:00:34:27:0d:89:0a:dd:aa:60:1d:58:
17:bb:16:e0:e9:d0:b2:15:0a:bc:f6:ab:95:74:33:
5c:93:6a:49:07:b0:35:69:06:b9:d2:b9:9b:de:ef:
87:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:61:CD:E8:64:8C:5A:1D:7A:00:F5:9B:9E:AE:F0:0E:C7:CA:9E:7F
X509v3 Authority Key Identifier:
keyid:0C:90:C3:56:E2:86:4F:43:89:48:57:44:35:55:D8:B5:C0:35:28:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DJDDVuKGT0OJSFdENVXYtcA1KBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/9GHN6GSMWh16APWbnq7wDsfKnn8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.199.200.0/24
Signature Algorithm: sha256WithRSAEncryption
78:07:64:4d:a6:33:f7:09:a6:da:3e:87:0b:28:a2:da:b3:77:
3d:03:60:0d:3b:c0:a9:1e:7a:5e:9f:5c:64:a4:71:7f:5c:3b:
4c:c9:cb:40:2e:0d:49:a6:ef:37:c7:cd:53:96:06:aa:43:00:
df:58:e8:72:b7:b8:9b:b8:4a:c9:39:a7:4d:27:b9:b3:ee:08:
e4:ff:94:95:63:36:65:64:c9:11:8a:c0:90:f4:ba:50:9d:85:
cc:9d:7c:37:12:8f:f2:1e:d4:4c:2b:2c:3e:b3:75:31:20:08:
fb:47:62:cc:1d:92:91:e6:98:dc:7c:45:c9:a4:27:9f:6d:57:
7d:8e:d3:ba:fc:4b:64:8a:79:e3:dd:20:6d:c0:ae:9c:56:45:
69:c3:bc:83:75:12:03:a4:a2:55:64:a0:51:ec:f3:60:be:47:
19:d7:67:07:a8:38:18:1a:dc:e3:b1:c8:23:ce:ed:45:26:2f:
ac:45:69:c0:9c:3d:ea:cd:58:98:91:9f:0e:86:b1:5e:ca:bf:
fb:28:0e:be:9b:b8:98:f9:5e:15:cc:49:bb:a6:ed:a0:00:8e:
f1:3c:92:54:45:0f:95:03:d2:f3:a5:55:19:76:20:ce:69:6d:
25:a0:82:83:90:b7:99:0e:b9:e0:bd:a0:2d:9c:cb:46:77:1c:
6c:bb:96:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:56:05 2025 by rpki-client