Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/c20e8e-562a-4969-a6c6-64d2710a3ca6/1/XjCPnqbO5FxVyBjsNC9OIAV_qmE.roa
File: XjCPnqbO5FxVyBjsNC9OIAV_qmE.roa (raw, json)
Hash identifier: RAbpyXRkoyBMT4lk8xYcuP94Qij3aBZAiJh6/6Fs/bM=
Subject key identifier: 5E:30:8F:9E:A6:CE:E4:5C:55:C8:18:EC:34:2F:4E:20:05:7F:AA:61
Certificate issuer: /CN=aa4b0b7eda98ef2a421cc848be47c93e869cd427
Certificate serial: 01856DEF6D7C188B8ADD7350FD2B5062380E
Authority key identifier: AA:4B:0B:7E:DA:98:EF:2A:42:1C:C8:48:BE:47:C9:3E:86:9C:D4:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qksLftqY7ypCHMhIvkfJPoac1Cc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/c20e8e-562a-4969-a6c6-64d2710a3ca6/1/XjCPnqbO5FxVyBjsNC9OIAV_qmE.roa
Signing time: Sun 01 Jan 2023 15:24:45 +0000
ROA not before: Sun 01 Jan 2023 15:24:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 194.62.160.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:ef:6d:7c:18:8b:8a:dd:73:50:fd:2b:50:62:38:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa4b0b7eda98ef2a421cc848be47c93e869cd427
Validity
Not Before: Jan 1 15:24:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5e308f9ea6cee45c55c818ec342f4e20057faa61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:a6:3e:15:85:03:ec:e0:65:35:d0:56:e4:5e:
13:b2:a3:06:db:90:fb:f8:92:92:9f:2a:22:49:98:
80:1a:20:97:10:cd:e3:7e:bf:9f:ee:be:00:7f:6f:
6a:6a:32:db:55:d4:55:85:7a:36:86:e8:3f:c4:99:
df:f7:24:f5:29:1f:53:80:f4:43:aa:71:a6:06:bb:
7c:5a:35:c5:bb:dc:78:6e:5e:0d:dc:b1:0d:53:f9:
16:90:9f:be:9a:ac:da:7c:22:c7:a0:60:60:d3:a8:
f0:9c:e8:0c:5b:66:5f:b5:e6:5c:28:92:ed:a1:4e:
ef:aa:ae:bf:45:5b:e0:c3:fd:6d:e6:f9:6c:14:e1:
84:47:b7:41:b2:99:d5:ff:08:be:74:61:d9:19:73:
58:c5:d6:a1:8a:3f:20:7d:25:ac:c6:de:c3:ba:40:
5e:13:58:76:ff:4d:00:98:59:6b:54:91:dc:1b:2d:
ae:f7:20:2d:68:5c:67:e1:9b:de:d9:82:81:50:fd:
62:2e:4a:7a:c9:c2:a0:59:0f:01:e8:80:8f:b7:cb:
ed:a1:ea:d5:56:5e:84:3c:5d:f9:66:6a:cb:8a:5a:
94:7e:d1:43:6c:46:9c:e6:cb:3a:2c:b5:55:97:c7:
9b:13:d2:38:de:71:9f:be:fd:a3:ad:d6:24:22:6b:
7b:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:30:8F:9E:A6:CE:E4:5C:55:C8:18:EC:34:2F:4E:20:05:7F:AA:61
X509v3 Authority Key Identifier:
keyid:AA:4B:0B:7E:DA:98:EF:2A:42:1C:C8:48:BE:47:C9:3E:86:9C:D4:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qksLftqY7ypCHMhIvkfJPoac1Cc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/c20e8e-562a-4969-a6c6-64d2710a3ca6/1/XjCPnqbO5FxVyBjsNC9OIAV_qmE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/c20e8e-562a-4969-a6c6-64d2710a3ca6/1/qksLftqY7ypCHMhIvkfJPoac1Cc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.62.160.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:8b:c6:4e:0a:2c:b2:16:2f:5f:ec:6b:83:f0:83:d9:96:ae:
e8:6a:de:ee:73:1c:7a:61:8d:94:ea:0f:49:24:a3:75:cf:bf:
14:71:1f:56:6b:e2:02:dc:fa:52:83:fd:d7:31:be:7e:9c:90:
bb:49:3a:ac:b0:5a:71:1c:8d:e5:78:27:5c:f4:75:33:a3:01:
09:50:e8:5a:7f:c2:17:8b:94:a7:16:48:18:bd:72:a1:9b:63:
74:d8:4d:29:e0:e8:d6:90:7e:26:a5:df:78:8b:80:b8:0d:e4:
58:1a:0f:0c:91:da:a6:3d:1b:a8:df:8d:6f:ce:8c:84:01:ea:
81:50:6a:0e:89:cc:a0:a7:8f:e4:9f:42:9c:e8:b4:7e:6e:b4:
40:c3:de:2e:64:ed:7b:e4:09:74:68:b2:28:04:db:ce:bf:ab:
97:6e:95:21:bb:41:20:38:b5:bc:18:09:2e:c9:df:2d:ce:18:
25:44:3c:f3:cb:05:ef:7a:94:8c:e4:8b:22:f6:a8:de:a2:d8:
63:44:0d:0b:15:7d:0d:9d:f3:0c:d3:58:57:7f:a9:e4:59:a3:
1a:98:5c:c7:39:af:93:79:7e:27:99:59:4e:68:70:b1:9d:bf:
d4:44:bd:04:6d:69:41:1b:c5:32:d6:fa:ea:ee:89:5e:45:0a:
c2:09:44:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:09:20 2025 by rpki-client