Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/98MVtbu_NnF77ysFAO8hwwHtets.roa
File: 98MVtbu_NnF77ysFAO8hwwHtets.roa (raw, json)
Hash identifier: KANPOvohMPH4XjdBZRoXDficvvBeQvCkHjlMSJ4OAyI=
Subject key identifier: F7:C3:15:B5:BB:BF:36:71:7B:EF:2B:05:00:EF:21:C3:01:ED:7A:DB
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 072FAC5C
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/98MVtbu_NnF77ysFAO8hwwHtets.roa
Signing time: Sat 01 Jan 2022 14:08:18 +0000
ROA not before: Sat 01 Jan 2022 14:08:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25145
IP address blocks: 194.146.50.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120564828 (0x72fac5c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Jan 1 14:08:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f7c315b5bbbf36717bef2b0500ef21c301ed7adb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:24:60:14:91:28:37:94:96:ff:fc:68:eb:fb:
1e:c8:0f:e3:19:8a:8d:93:7f:ca:62:ac:33:d4:cc:
54:d9:75:9f:65:0d:7a:46:46:b8:bd:a4:79:fd:77:
0e:5b:c9:76:79:f7:92:8f:c3:9f:5c:44:de:ee:f1:
01:83:70:15:8b:bc:56:28:d6:f1:00:a5:ba:bd:cc:
84:98:de:de:78:0b:fc:30:a6:2e:c8:24:cc:fa:ad:
6e:ad:8d:6e:81:c2:e1:80:84:ee:36:63:d2:72:ae:
38:81:b8:0c:76:34:29:06:c0:91:c0:5b:48:d1:94:
17:02:df:72:c6:8e:7b:6c:b3:0e:2f:77:fd:fd:75:
0e:f5:f6:4a:d9:4d:1b:20:6c:c9:0f:15:b1:24:1f:
78:c3:5e:ac:3f:c8:e1:f1:1d:68:3b:e0:60:50:89:
97:10:cd:cc:36:29:d9:a9:64:51:5b:cb:6b:30:77:
33:f0:cf:ce:d3:d5:ac:58:d7:76:03:6c:c8:da:ca:
dd:ef:d0:f2:d7:f3:e7:3b:5e:f7:6e:ce:c5:e7:be:
fc:b7:b2:53:5a:af:36:a7:fe:be:b2:dc:7b:b0:74:
b5:13:a9:94:fb:1c:dc:02:07:b1:6f:0c:b4:63:43:
a3:f4:54:55:d8:fe:38:92:1f:5c:4a:42:ea:be:2b:
ca:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:C3:15:B5:BB:BF:36:71:7B:EF:2B:05:00:EF:21:C3:01:ED:7A:DB
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/98MVtbu_NnF77ysFAO8hwwHtets.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.146.50.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:08:b4:81:76:7b:8e:ca:b1:63:ab:d5:83:ec:00:fc:e8:72:
63:05:25:ab:be:c2:79:ab:3e:37:b2:4b:e7:06:28:f7:f3:ba:
cb:f6:28:77:94:0e:72:08:3c:2a:e9:62:98:0f:76:dd:8c:da:
ac:78:e7:02:13:ff:b6:30:d1:d0:bc:40:e7:ca:06:ed:9f:07:
eb:8d:91:e6:f5:6c:94:0d:b6:78:cb:0a:85:f5:00:4c:a0:0e:
62:73:c3:e6:62:af:5f:45:5e:63:05:74:ee:79:94:fe:ef:1b:
ef:27:09:52:47:ee:ce:cd:32:88:f5:46:22:ae:59:47:c8:ff:
62:a1:12:5c:c6:08:a8:a9:fc:31:71:c2:17:e2:4e:7f:e4:33:
97:33:ed:13:c4:5a:74:f8:f1:8f:ec:9e:bc:9c:a9:83:a4:b1:
61:b3:9e:e0:4a:7b:8f:55:f6:be:b8:6d:7c:48:ca:2e:c8:5f:
9a:c4:dd:a5:79:b4:ca:8c:46:8f:b8:83:ec:90:23:00:55:30:
09:10:3f:c3:ee:eb:b5:23:ea:8f:07:36:92:ad:7c:48:a9:df:
41:d8:91:7c:37:0c:2f:e9:01:36:04:48:13:d0:de:8b:b7:0e:
0f:86:a9:84:5d:cf:b4:fa:de:25:a2:27:c2:66:ce:5d:c9:93:
a1:42:4f:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:40:42 2025 by rpki-client