Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/RuCaYFK1PMe_xG9JSUG0Su92F3Q.roa
File: RuCaYFK1PMe_xG9JSUG0Su92F3Q.roa (raw, json)
Hash identifier: EPoS5QRirj4OzDst9W2VG4knKRvAg+qmVolOkvarOvk=
Subject key identifier: 46:E0:9A:60:52:B5:3C:C7:BF:C4:6F:49:49:41:B4:4A:EF:76:17:74
Certificate issuer: /CN=624039399017fa093dc8d503799f6ca403f0bd05
Certificate serial: 0408D118
Authority key identifier: 62:40:39:39:90:17:FA:09:3D:C8:D5:03:79:9F:6C:A4:03:F0:BD:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YkA5OZAX-gk9yNUDeZ9spAPwvQU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/RuCaYFK1PMe_xG9JSUG0Su92F3Q.roa
Signing time: Sat 01 Jan 2022 08:03:33 +0000
ROA not before: Sat 01 Jan 2022 08:03:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39368
IP address blocks: 194.31.194.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67686680 (0x408d118)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=624039399017fa093dc8d503799f6ca403f0bd05
Validity
Not Before: Jan 1 08:03:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=46e09a6052b53cc7bfc46f494941b44aef761774
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:39:e4:6f:62:50:bf:2d:da:a6:95:b5:6a:73:
6c:b1:89:42:22:c6:10:4c:92:3a:94:1a:e1:a2:23:
94:fc:0c:27:61:d3:b0:f9:ad:40:8a:e8:c5:0d:b6:
a7:1f:9c:c2:3c:1f:b1:d0:61:bc:8f:fe:80:52:9c:
39:c1:2c:69:0b:2b:a4:4a:c4:41:38:d6:79:94:aa:
fd:8f:1d:b6:18:1c:17:70:0f:43:a3:97:6f:6c:7c:
f4:6d:25:0a:9e:27:08:eb:95:17:6a:80:98:ce:8c:
8a:47:03:81:f0:fc:c1:8a:3d:6d:64:21:26:a5:02:
93:69:b2:ac:85:13:d1:bb:0f:ad:fc:f4:b7:78:e0:
24:b9:cf:1c:8f:08:ba:01:58:c4:99:92:54:e3:2d:
c3:83:3c:56:65:77:6f:7a:fe:ba:94:df:c1:1a:2d:
b6:a7:a2:b7:f8:04:3a:81:45:46:f2:27:2d:2c:64:
f8:74:ae:26:ce:ca:a4:0c:9a:8c:d3:03:38:82:c1:
01:7e:34:8a:96:b6:15:9b:2b:9c:3a:d3:28:54:a2:
d0:2a:58:8b:8f:be:8c:31:cb:f4:e2:90:45:37:16:
39:d3:77:83:07:43:1a:75:ba:ce:65:c4:89:73:89:
1d:19:13:a9:5f:c8:cd:f1:1a:c5:48:07:cb:30:06:
0b:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:E0:9A:60:52:B5:3C:C7:BF:C4:6F:49:49:41:B4:4A:EF:76:17:74
X509v3 Authority Key Identifier:
keyid:62:40:39:39:90:17:FA:09:3D:C8:D5:03:79:9F:6C:A4:03:F0:BD:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkA5OZAX-gk9yNUDeZ9spAPwvQU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/RuCaYFK1PMe_xG9JSUG0Su92F3Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/YkA5OZAX-gk9yNUDeZ9spAPwvQU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.31.194.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:20:f8:d1:83:b0:dd:cf:87:24:68:f7:89:27:3e:93:24:9a:
70:20:51:7b:5c:a9:91:59:2c:b3:95:b8:07:5b:43:b4:c7:5f:
65:06:19:44:c7:19:ae:18:59:a1:c3:cc:58:b8:81:bb:dd:74:
58:bf:09:4d:cd:e4:b3:84:1a:19:84:08:1f:77:d4:d7:f2:df:
6a:cb:80:19:cd:27:8b:c2:5e:d8:65:96:d8:40:b1:8d:c8:27:
51:85:0d:38:55:6f:6d:e7:6c:88:ca:dc:f2:15:38:09:68:48:
99:9d:fd:06:2c:d6:7f:a6:6a:fc:79:5c:7b:7e:ac:01:aa:a9:
ce:2d:34:00:62:0c:84:47:b4:2b:e9:3c:15:33:7e:46:83:b1:
c3:74:50:6c:25:da:32:f2:97:b5:1c:66:64:e7:d3:a3:35:e3:
19:60:dd:2d:31:c9:81:8f:6c:45:92:f9:f8:cf:92:7e:2f:84:
67:2c:6d:58:6f:12:06:7d:98:ae:d8:ca:c1:f6:ff:cf:d5:ab:
c2:a9:8b:8c:19:9d:f3:44:91:f4:22:e3:bd:57:05:b7:e3:f0:
75:ab:4c:f6:78:94:ba:33:ae:ff:ee:60:90:3f:28:b1:59:54:
e9:aa:51:62:69:44:af:3b:ea:14:7a:53:9f:fa:de:40:bf:b4:
dd:d5:17:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:46:37 2025 by rpki-client