Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/MYpKZXsP9chfvqgriRsrK90Wt5M.roa
File: MYpKZXsP9chfvqgriRsrK90Wt5M.roa (raw, json)
Hash identifier: LJa6s9hCk0LVlZuQ3hg7GtMDPY+Bf7EIXYflp6/1t2c=
Subject key identifier: 31:8A:4A:65:7B:0F:F5:C8:5F:BE:A8:2B:89:1B:2B:2B:DD:16:B7:93
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 018C005BBE29A4FF09840D11133E89E147F6
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/MYpKZXsP9chfvqgriRsrK90Wt5M.roa
Signing time: Fri 24 Nov 2023 08:04:21 +0000
ROA not before: Fri 24 Nov 2023 08:04:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 216347
IP address blocks: 194.68.244.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:00:5b:be:29:a4:ff:09:84:0d:11:13:3e:89:e1:47:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Nov 24 08:04:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=318a4a657b0ff5c85fbea82b891b2b2bdd16b793
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:2f:e2:6d:3d:e9:86:35:45:56:f8:26:0a:ed:
6c:b2:bd:ad:e5:c0:cc:a8:fe:6d:06:4a:53:50:76:
0b:00:8f:f2:4a:34:0a:d8:82:ee:bd:1b:92:db:5f:
2f:59:30:1a:5c:0f:cc:0e:a5:e7:41:ea:0e:06:6a:
34:be:45:2e:b1:35:f0:bf:47:fe:79:9b:94:49:88:
c4:1b:bc:e6:55:a2:f2:32:00:6a:ad:e9:7f:5a:d2:
4f:01:f2:1b:b4:58:85:3a:90:a9:dc:32:92:f1:6d:
07:71:32:3b:28:97:0f:5c:e1:23:97:be:32:57:30:
10:94:e5:84:7f:ca:6c:b9:b9:b9:5f:8a:7f:9e:43:
0f:32:a8:b2:42:ee:56:26:78:e2:0b:69:08:5b:58:
88:4b:1a:54:9e:5c:d3:5a:9b:90:41:6f:9c:52:f1:
6b:da:e1:57:c9:33:2f:ac:e9:5a:c9:6d:7b:7a:d8:
84:6b:9e:76:9d:de:54:eb:26:8a:33:7d:53:9b:95:
63:22:d2:5f:1c:84:7a:cf:b8:59:70:f5:7e:c5:f0:
d5:b8:97:1b:46:3b:8c:73:d3:6a:8e:ee:d7:f5:35:
1e:e3:20:b3:c0:e6:3b:2b:d2:ae:05:f6:94:c0:47:
62:35:40:d4:9b:a4:ec:08:09:fd:cd:b1:92:65:28:
d7:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:8A:4A:65:7B:0F:F5:C8:5F:BE:A8:2B:89:1B:2B:2B:DD:16:B7:93
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/MYpKZXsP9chfvqgriRsrK90Wt5M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.68.244.0/22
Signature Algorithm: sha256WithRSAEncryption
2c:42:72:0a:b1:05:df:27:72:23:36:b4:42:ee:f7:32:ec:f4:
91:2d:78:59:e3:85:59:8b:83:60:12:08:3e:33:cd:de:f3:db:
5a:ec:f9:f7:4d:86:0b:34:66:90:e3:4c:6a:94:2a:93:e9:02:
5d:52:02:ea:56:43:7a:d0:20:c5:74:1e:9a:b5:96:5d:a0:89:
4b:72:05:b7:95:cd:b5:88:a9:32:28:9d:8f:e4:83:87:fa:e0:
7c:41:a9:cf:16:62:81:89:ab:ec:09:98:37:8f:2e:95:49:ee:
07:a6:b5:04:2e:ea:b5:7a:0d:7e:ef:f8:29:00:86:c2:b7:4b:
12:dd:0d:f3:ae:e0:82:9a:ef:73:7a:09:df:f0:74:1b:36:ea:
05:8a:c9:5e:e6:47:d2:d2:94:98:da:55:87:20:4c:38:27:c6:
27:a0:06:8d:8b:a0:63:bf:a6:f7:e7:85:bc:cd:af:1f:07:94:
c9:8e:e1:f5:c9:94:61:ff:dc:c2:36:c1:73:d0:f5:c5:88:b8:
2d:b2:06:f7:44:86:52:16:65:2d:52:16:a0:2a:31:a8:df:5b:
ec:70:40:33:4e:dd:b7:3f:8f:2f:a2:69:a2:92:96:98:12:b1:
36:bb:74:fe:b4:3e:78:50:67:32:c3:3e:2c:05:49:a7:b4:8d:
65:7a:4a:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:00:41 2025 by rpki-client