Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/c1d4a2-7c4e-4adc-8f65-b148d4f066ce/1/qlVed9IDKNlbwKyMUniexi-Huko.roa
File: qlVed9IDKNlbwKyMUniexi-Huko.roa (raw, json)
Hash identifier: ZmySM6NKLQXsA+yAkO5jbWs6907MVchpzYiqlB4edPc=
Subject key identifier: AA:55:5E:77:D2:03:28:D9:5B:C0:AC:8C:52:78:9E:C6:2F:87:BA:4A
Certificate issuer: /CN=91189e6edf53e40672c9b5f1f3519728291ec2ee
Certificate serial: 01856DB8850E3E8872571F2049FFBB7BAFD7
Authority key identifier: 91:18:9E:6E:DF:53:E4:06:72:C9:B5:F1:F3:51:97:28:29:1E:C2:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kRiebt9T5AZyybXx81GXKCkewu4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/c1d4a2-7c4e-4adc-8f65-b148d4f066ce/1/qlVed9IDKNlbwKyMUniexi-Huko.roa
Signing time: Sun 01 Jan 2023 14:24:47 +0000
ROA not before: Sun 01 Jan 2023 14:24:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 193.178.134.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:b8:85:0e:3e:88:72:57:1f:20:49:ff:bb:7b:af:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91189e6edf53e40672c9b5f1f3519728291ec2ee
Validity
Not Before: Jan 1 14:24:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aa555e77d20328d95bc0ac8c52789ec62f87ba4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:45:6e:ff:89:7b:35:03:f0:34:1f:29:a1:39:
02:31:87:e4:f8:15:82:9c:9c:05:56:1a:44:53:ff:
01:eb:65:1a:ff:33:d6:06:af:3b:23:b8:9a:69:35:
e6:60:9a:29:55:ab:6a:9a:78:75:c4:25:5a:f1:b7:
ea:40:3c:60:56:fb:28:e2:d1:6a:f4:3b:35:9a:62:
44:34:33:9d:32:d1:3b:da:f6:bd:7b:81:7f:f5:81:
9c:33:ea:1c:42:b1:44:e8:98:bc:56:78:b1:98:06:
a9:57:4b:cd:ec:4e:4d:88:35:15:bf:bb:25:98:37:
33:5c:f2:85:d3:10:57:1f:75:95:cb:bb:57:2d:57:
bc:54:f7:ec:4d:8b:ac:2a:85:6d:a0:eb:a4:b8:22:
1e:21:18:03:ba:15:2c:20:2e:0c:c5:0e:1f:1a:9c:
42:7a:0e:04:e9:2b:6e:2a:b6:16:75:48:1c:c3:c9:
b5:ef:0c:cd:29:5f:71:5d:b0:16:3e:d3:8f:11:ec:
a0:3c:f9:32:83:48:2a:d7:79:15:bf:94:ee:27:64:
b0:46:92:2a:d7:a3:8e:4a:b8:c2:b0:17:21:ab:10:
93:8f:d0:3c:aa:3f:cb:6a:e3:5d:c2:e5:ce:65:cd:
8c:d6:14:33:ca:b4:77:97:57:96:f6:64:01:99:f5:
22:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:55:5E:77:D2:03:28:D9:5B:C0:AC:8C:52:78:9E:C6:2F:87:BA:4A
X509v3 Authority Key Identifier:
keyid:91:18:9E:6E:DF:53:E4:06:72:C9:B5:F1:F3:51:97:28:29:1E:C2:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kRiebt9T5AZyybXx81GXKCkewu4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/c1d4a2-7c4e-4adc-8f65-b148d4f066ce/1/qlVed9IDKNlbwKyMUniexi-Huko.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/c1d4a2-7c4e-4adc-8f65-b148d4f066ce/1/kRiebt9T5AZyybXx81GXKCkewu4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.178.134.0/24
Signature Algorithm: sha256WithRSAEncryption
23:27:63:00:66:58:6e:b2:0d:2a:55:eb:8e:31:fe:75:e2:d8:
b9:bb:d7:4c:d3:93:6a:c2:cc:9a:5b:a6:54:f2:ba:86:90:47:
80:3d:33:21:a8:77:0b:49:09:ed:2f:b2:97:e6:f7:36:52:77:
22:d4:59:f2:8c:6e:63:b9:1f:18:3f:b4:e5:de:12:bd:b0:1b:
98:60:bd:65:98:71:a9:7a:b8:9b:a2:f1:cd:b3:7a:c6:04:03:
a2:8a:f0:ec:d2:94:66:b5:04:33:bb:24:88:04:ff:ee:8b:e4:
18:c0:f9:9c:eb:08:ff:6a:58:14:69:12:74:d8:48:da:fe:49:
4e:a0:37:87:e4:2e:5c:3d:85:09:3f:f5:8b:a3:85:9c:a5:40:
a8:15:d3:35:74:17:f6:12:7a:a5:54:d9:10:94:a0:06:c5:2e:
31:cc:7a:8f:b1:59:64:78:e7:36:cb:f6:48:6f:00:94:4e:99:
7b:82:e6:16:cd:be:7b:47:d5:4f:9b:d1:fd:ea:3f:29:88:1f:
30:30:68:cd:c7:76:cf:f9:be:86:0d:3e:09:85:7f:90:87:22:
5b:c9:b3:81:ba:bd:7d:98:b5:bc:3f:1c:18:21:8a:4a:09:18:
da:5c:1d:15:a3:8a:cf:68:db:eb:f9:31:d6:16:84:b2:d9:ba:
f3:8a:70:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:15:34 2025 by rpki-client