Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/c8c0f5-042a-47eb-bb08-b7d30dae7172/1/SjfurY1zD3vAFm0TWYZiOep7DrQ.roa
File: SjfurY1zD3vAFm0TWYZiOep7DrQ.roa (raw, json)
Hash identifier: uk5OM9DMwlVD/aOZhmnvzGQ0eT8L3I8Fjx38LMHQmco=
Subject key identifier: 4A:37:EE:AD:8D:73:0F:7B:C0:16:6D:13:59:86:62:39:EA:7B:0E:B4
Certificate issuer: /CN=5c9cf1e26175fffa6126798eca43812312c4414b
Certificate serial: 1357EF10
Authority key identifier: 5C:9C:F1:E2:61:75:FF:FA:61:26:79:8E:CA:43:81:23:12:C4:41:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XJzx4mF1__phJnmOykOBIxLEQUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/c8c0f5-042a-47eb-bb08-b7d30dae7172/1/SjfurY1zD3vAFm0TWYZiOep7DrQ.roa
Signing time: Sat 01 Jan 2022 07:03:22 +0000
ROA not before: Sat 01 Jan 2022 07:03:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 9050
IP address blocks: 188.213.1.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 324529936 (0x1357ef10)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c9cf1e26175fffa6126798eca43812312c4414b
Validity
Not Before: Jan 1 07:03:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4a37eead8d730f7bc0166d1359866239ea7b0eb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:74:14:7a:d6:18:a4:34:70:44:7d:af:f0:e0:
a2:5f:99:6d:be:2c:a3:29:21:a6:bc:83:dd:d3:b0:
d4:dc:2a:15:f7:68:e9:1d:58:7c:65:6f:4a:0c:ec:
e7:ed:ac:f1:83:33:4c:e7:46:b4:b4:c9:60:b6:6f:
42:18:3a:4a:c8:64:0e:58:63:9b:56:1e:58:d6:19:
dd:5a:3a:45:68:85:a6:24:60:94:a7:00:61:c4:50:
c8:91:81:88:29:4f:b3:7d:d7:8e:6d:d9:ea:6c:6d:
4a:73:be:1d:1a:07:94:6c:22:5b:46:90:62:48:5d:
5f:69:dd:46:fa:e5:8e:a4:ee:7f:78:18:84:23:a5:
ec:25:f6:3e:0a:96:78:59:1d:e5:79:52:ae:40:7a:
a8:4e:d9:ca:30:0d:dc:23:44:85:78:07:21:05:e9:
26:3b:20:03:9a:fd:ff:16:d0:60:4b:25:a1:88:82:
25:57:2e:5d:08:a8:c4:0e:e0:df:6b:07:0e:44:6f:
23:1c:e6:c4:c5:bc:35:b3:04:a6:9f:c8:08:05:c6:
76:e9:6c:c5:d5:72:29:61:92:4c:c4:8d:fe:f4:33:
20:9c:07:d5:7f:65:8e:7e:22:30:6b:0f:51:be:9b:
e6:9d:53:9a:ef:35:b3:a1:8c:56:9b:c0:29:c7:65:
98:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:37:EE:AD:8D:73:0F:7B:C0:16:6D:13:59:86:62:39:EA:7B:0E:B4
X509v3 Authority Key Identifier:
keyid:5C:9C:F1:E2:61:75:FF:FA:61:26:79:8E:CA:43:81:23:12:C4:41:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XJzx4mF1__phJnmOykOBIxLEQUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c8c0f5-042a-47eb-bb08-b7d30dae7172/1/SjfurY1zD3vAFm0TWYZiOep7DrQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c8c0f5-042a-47eb-bb08-b7d30dae7172/1/XJzx4mF1__phJnmOykOBIxLEQUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.213.1.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:c6:48:72:03:07:88:43:26:47:4b:26:40:aa:b8:42:77:25:
0f:94:a5:ad:74:6e:29:0c:e1:0a:60:e3:6f:f2:db:5a:1b:3f:
4f:89:03:c5:56:e7:7e:3c:a0:83:9f:95:7f:54:d3:4c:56:ff:
37:62:4f:b9:0f:f8:2e:84:9d:78:8a:1f:a6:37:26:5e:c7:f3:
fe:d0:72:5e:a9:e7:63:a8:3d:76:93:2b:90:87:d5:ee:ca:2d:
2a:80:ac:d1:0f:70:e8:8a:61:a7:55:3e:63:6c:58:35:1b:c7:
fc:34:d9:7b:14:c0:0b:93:4a:fd:10:47:e2:4d:c0:d6:a0:ea:
3f:2b:ce:6b:26:b1:2a:25:e0:7b:1f:de:d9:fa:6a:58:8c:e8:
bc:e9:72:c0:60:34:f3:3f:b9:89:75:31:2d:9a:7c:d3:27:67:
a8:75:a6:8f:f1:42:ab:30:b6:ed:d5:96:5b:18:dd:be:21:3e:
ae:96:55:f7:3d:a1:ed:44:b9:24:d0:60:39:e3:33:73:0a:af:
cb:d8:18:55:d0:75:b0:04:18:0f:ab:29:fb:9d:d7:58:ba:c0:
69:56:c9:35:ab:12:77:1b:32:4f:79:16:a7:04:af:da:41:00:
6d:4e:7c:d8:2c:f2:62:3f:bc:75:54:79:cf:40:d7:87:e9:2b:
9b:17:cc:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:56:42 2025 by rpki-client