Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/40f481-8130-4096-bf6a-25f9c1de04dd/1/ukN0wlAWeWQUyOqW0QXash0WA3U.roa
File: ukN0wlAWeWQUyOqW0QXash0WA3U.roa (raw, json)
Hash identifier: 047gik1mwXeknWgfBmERktKdPktFIEVLGCmfU3ugSv8=
Subject key identifier: BA:43:74:C2:50:16:79:64:14:C8:EA:96:D1:05:DA:B2:1D:16:03:75
Certificate issuer: /CN=0ecf600f3311944dc4149f693db57735a9292c86
Certificate serial: 0183D09A4340CAA49E0CC652271C8C46ED8F
Authority key identifier: 0E:CF:60:0F:33:11:94:4D:C4:14:9F:69:3D:B5:77:35:A9:29:2C:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ds9gDzMRlE3EFJ9pPbV3NakpLIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/40f481-8130-4096-bf6a-25f9c1de04dd/1/ukN0wlAWeWQUyOqW0QXash0WA3U.roa
Signing time: Thu 13 Oct 2022 09:08:34 +0000
ROA not before: Thu 13 Oct 2022 09:08:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212669
IP address blocks: 194.180.6.0/23 maxlen: 23
194.180.26.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:d0:9a:43:40:ca:a4:9e:0c:c6:52:27:1c:8c:46:ed:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ecf600f3311944dc4149f693db57735a9292c86
Validity
Not Before: Oct 13 09:08:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ba4374c25016796414c8ea96d105dab21d160375
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:88:64:61:60:fc:1d:16:ac:9c:25:a7:19:cd:
33:ad:01:b9:ae:2f:f9:e3:0f:62:ed:42:73:d2:f5:
50:3c:5a:40:65:55:b3:67:17:97:9f:d1:fc:de:4f:
b9:01:1a:6b:4e:65:9a:c6:e7:d4:95:b7:99:8f:6a:
c7:3c:6a:ed:5d:29:31:bc:73:2d:86:6d:2a:76:74:
b8:93:50:70:0e:1e:4f:59:97:5d:6b:d6:02:c9:d3:
45:01:9e:b0:31:fd:55:db:e6:d2:9d:1b:44:2f:8f:
bc:06:dd:f9:a1:1c:84:30:f2:22:ad:90:d9:49:9f:
87:4a:80:d9:1d:23:0a:b7:50:53:69:6f:65:5e:dc:
aa:1d:a9:de:a1:ae:e0:00:5e:42:2e:9e:b0:dc:a8:
2f:9f:4f:e7:74:ae:de:62:ad:f1:70:37:75:bc:f8:
14:1e:87:86:1a:55:03:61:6a:82:46:7a:d8:ba:02:
88:07:fc:63:89:8a:63:5e:b9:13:10:fa:80:95:72:
cf:b1:ad:16:6e:19:59:a7:ab:67:56:27:61:ec:b6:
d8:2e:c1:2c:56:c4:2f:93:fa:35:82:1a:13:78:de:
69:ad:f3:72:13:67:b4:7c:d0:a5:aa:a6:f6:09:b4:
40:e9:66:d6:ef:21:42:b9:bb:f5:40:b1:38:de:a4:
1f:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:43:74:C2:50:16:79:64:14:C8:EA:96:D1:05:DA:B2:1D:16:03:75
X509v3 Authority Key Identifier:
keyid:0E:CF:60:0F:33:11:94:4D:C4:14:9F:69:3D:B5:77:35:A9:29:2C:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ds9gDzMRlE3EFJ9pPbV3NakpLIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/40f481-8130-4096-bf6a-25f9c1de04dd/1/ukN0wlAWeWQUyOqW0QXash0WA3U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/40f481-8130-4096-bf6a-25f9c1de04dd/1/Ds9gDzMRlE3EFJ9pPbV3NakpLIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.180.6.0/23
194.180.26.0/23
Signature Algorithm: sha256WithRSAEncryption
2c:8b:42:39:7d:4b:bd:e0:aa:4b:19:de:bf:ee:1d:05:b5:e9:
6c:0f:01:da:4b:f7:b6:92:fc:14:ee:7c:c8:1f:22:89:f5:e6:
18:59:c7:86:a9:c4:d1:17:69:cb:4e:59:a7:5a:33:f1:1f:08:
eb:ab:fa:29:b4:90:fd:5a:61:aa:2a:38:39:e2:eb:93:7a:9a:
02:49:35:f8:53:b2:2b:9f:93:1b:8a:b3:80:28:8b:12:e2:66:
20:cf:eb:0d:bb:da:2c:02:c8:62:84:88:1b:aa:d8:1c:e5:ee:
4f:eb:15:6f:a9:0c:9c:27:3e:20:bf:a5:e9:ca:86:13:d6:03:
13:b3:1d:3d:62:12:88:b2:f9:54:b1:be:90:f2:5b:7b:d3:35:
cb:b8:b7:e0:2d:78:e2:94:9b:50:2d:54:14:98:1b:9a:12:44:
93:97:76:1c:ac:a9:cb:a6:97:9d:96:3f:72:27:83:6f:e7:13:
14:59:60:ef:d5:89:9d:b3:c4:cf:d5:66:2f:87:84:7f:40:fa:
9c:32:a9:96:b6:5e:c7:5c:f8:51:e8:5f:61:0b:3a:67:63:2e:
d1:0b:3b:ae:4c:5e:82:05:c0:96:0e:6e:dc:3f:23:ff:64:a0:
c8:ee:1e:1f:02:51:ba:ea:68:fd:ad:8b:6c:37:ac:ac:08:6e:
73:ac:33:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:05:34 2025 by rpki-client