Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/40f481-8130-4096-bf6a-25f9c1de04dd/1/Ij3BSg8T3YCScPhJ8KCIZYG_xMs.roa
File: Ij3BSg8T3YCScPhJ8KCIZYG_xMs.roa (raw, json)
Hash identifier: RbWO5tnxVm79eqDKiWNTceRbO6uhh+JcN8fExe9GPpk=
Subject key identifier: 22:3D:C1:4A:0F:13:DD:80:92:70:F8:49:F0:A0:88:65:81:BF:C4:CB
Certificate issuer: /CN=0ecf600f3311944dc4149f693db57735a9292c86
Certificate serial: 01879D9612E43CAC2BEEBFAFD63B08DB9560
Authority key identifier: 0E:CF:60:0F:33:11:94:4D:C4:14:9F:69:3D:B5:77:35:A9:29:2C:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ds9gDzMRlE3EFJ9pPbV3NakpLIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/40f481-8130-4096-bf6a-25f9c1de04dd/1/Ij3BSg8T3YCScPhJ8KCIZYG_xMs.roa
Signing time: Thu 20 Apr 2023 07:34:30 +0000
ROA not before: Thu 20 Apr 2023 07:34:30 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212669
IP address blocks: 194.180.6.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:9d:96:12:e4:3c:ac:2b:ee:bf:af:d6:3b:08:db:95:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ecf600f3311944dc4149f693db57735a9292c86
Validity
Not Before: Apr 20 07:34:30 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=223dc14a0f13dd809270f849f0a0886581bfc4cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:8a:f9:ed:53:c5:fe:92:f3:be:4c:77:17:83:
5f:0b:a3:43:db:7b:ee:2a:ed:e7:0d:34:9c:2c:d0:
b1:96:af:74:ed:a4:66:27:6f:b2:a0:c8:30:c5:42:
96:93:3a:12:fb:90:15:67:76:d2:62:45:bd:3b:a8:
b2:1f:59:f6:be:9a:a3:23:c6:58:f3:1c:7a:61:bf:
14:e2:7a:39:2b:25:00:2c:3c:a1:ba:0d:1f:e6:0c:
d8:66:16:67:51:69:62:68:7f:fc:51:c2:ac:b1:e5:
41:8a:71:43:e3:59:22:06:cc:35:38:ba:72:ce:94:
95:59:e4:69:26:b6:c7:51:84:d4:85:35:2d:27:a6:
98:d1:91:5b:c0:6d:95:cb:87:33:2b:79:fc:95:d3:
a0:44:72:87:00:50:27:8b:7a:17:c3:84:82:c9:48:
6c:b9:21:be:71:3d:31:27:f9:80:b6:ab:fa:bc:63:
3b:8c:64:1b:f3:d3:6a:05:b5:d6:c8:2d:2e:d8:58:
74:c3:b5:6b:0b:3a:ed:d0:a1:e0:2a:73:8d:de:44:
dc:8d:8e:43:0c:04:4a:8b:ea:1a:88:03:15:ac:f5:
4f:a3:82:e6:31:0a:85:99:65:4d:7f:5c:99:c5:01:
51:ad:4d:5f:b0:90:a0:75:60:cd:c0:e9:14:b0:34:
b2:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:3D:C1:4A:0F:13:DD:80:92:70:F8:49:F0:A0:88:65:81:BF:C4:CB
X509v3 Authority Key Identifier:
keyid:0E:CF:60:0F:33:11:94:4D:C4:14:9F:69:3D:B5:77:35:A9:29:2C:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ds9gDzMRlE3EFJ9pPbV3NakpLIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/40f481-8130-4096-bf6a-25f9c1de04dd/1/Ij3BSg8T3YCScPhJ8KCIZYG_xMs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/40f481-8130-4096-bf6a-25f9c1de04dd/1/Ds9gDzMRlE3EFJ9pPbV3NakpLIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.180.6.0/23
Signature Algorithm: sha256WithRSAEncryption
30:7f:f7:54:dd:ef:ff:03:fd:03:a7:ab:9b:46:1d:02:64:87:
34:1c:4e:e7:73:7a:5a:f7:36:b6:fb:0c:ff:24:67:3f:83:bf:
5a:2d:be:40:e8:20:20:cc:74:66:bf:1a:e8:b5:8c:44:fe:3c:
39:f0:bc:f2:97:84:7a:e5:7e:32:4e:3f:aa:b4:0f:ec:c3:5c:
8e:fe:33:b8:80:0a:cd:59:af:e4:b7:4d:7b:08:87:84:81:a8:
9f:e2:df:e1:55:65:d4:7b:d9:54:da:bc:e1:bd:df:93:5c:1b:
81:e5:f9:c2:fe:94:8a:3e:da:46:67:cd:ba:21:20:38:22:d1:
ea:0d:20:13:5f:4c:24:ec:54:83:32:ca:e6:31:f3:bc:97:35:
db:85:ba:39:f8:78:6a:30:c8:5d:1b:8e:a5:62:77:94:06:16:
64:e1:45:e0:fb:14:0d:9e:04:e0:f6:ce:00:b1:e3:22:f9:2d:
52:99:b2:5e:4d:6c:7c:c0:f3:5b:0b:93:df:96:68:f2:29:b1:
39:45:41:bc:9e:90:48:ac:51:13:3e:6b:b5:d2:c7:82:63:93:
e3:d4:0b:c6:6c:c2:27:a2:de:9d:b1:93:eb:9b:8f:aa:7e:be:
f4:ef:6a:bc:3b:72:83:75:45:88:37:74:f5:cf:46:eb:d4:ab:
fe:66:c6:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:19:30 2025 by rpki-client