Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/890-NQsNefdKFiGYTPOTR0mAj6c.roa
File: 890-NQsNefdKFiGYTPOTR0mAj6c.roa (raw, json)
Hash identifier: EU2TEnvFRUTQr6VPhpfZ2sfLk1R2CL7zoVx2e65weho=
Subject key identifier: F3:DD:3E:35:0B:0D:79:F7:4A:16:21:98:4C:F3:93:47:49:80:8F:A7
Certificate issuer: /CN=4f8aea2f025f495beacee7ce5a8820519dda1370
Certificate serial: 01888DEB0EF4A653ED8A0827B3892C2F27FE
Authority key identifier: 4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/890-NQsNefdKFiGYTPOTR0mAj6c.roa
Signing time: Mon 05 Jun 2023 23:36:12 +0000
ROA not before: Mon 05 Jun 2023 23:36:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198469
IP address blocks: 194.110.175.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:8d:eb:0e:f4:a6:53:ed:8a:08:27:b3:89:2c:2f:27:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f8aea2f025f495beacee7ce5a8820519dda1370
Validity
Not Before: Jun 5 23:36:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f3dd3e350b0d79f74a1621984cf3934749808fa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:1d:64:0c:a9:58:39:f7:ed:6f:28:e6:67:9d:
f0:89:a2:e6:a5:1f:e1:03:e2:39:58:26:3d:bd:2e:
4e:80:9b:b7:cb:fa:91:33:ae:85:9e:7e:dc:49:98:
e1:37:72:71:7e:f0:19:49:82:a9:bc:9a:df:ee:d5:
4f:cd:35:9c:5f:5c:eb:63:cc:32:94:1d:77:cb:c4:
61:53:69:40:9b:7b:56:8a:41:a0:84:4d:6a:24:8a:
a5:3c:d9:ab:c7:4d:08:d5:3e:6c:e7:32:3e:02:e6:
0e:24:4d:12:85:72:42:5b:d9:ea:0e:3b:e2:ae:da:
f4:b7:5f:db:df:58:c6:65:ef:51:80:ff:71:2b:9b:
af:e6:0c:43:83:e7:24:13:2f:8e:86:c2:af:17:3c:
f7:53:81:78:4d:41:97:e0:cb:da:5d:01:8c:ed:65:
57:08:31:80:3e:1a:a2:4e:0a:da:55:1c:a9:63:51:
d2:19:5d:6a:40:74:e0:de:d5:e1:bd:79:ba:1c:70:
3c:51:fe:20:4d:b1:00:c7:29:e1:ac:4e:12:c4:fb:
3c:f8:52:e3:5d:0e:fa:32:da:4a:0b:8a:c1:1d:1d:
bd:4d:f1:5c:0e:06:a1:4c:3b:93:af:dc:b5:7d:10:
c9:d9:66:4f:a3:05:0d:a0:10:58:5b:55:0c:f7:5f:
49:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:DD:3E:35:0B:0D:79:F7:4A:16:21:98:4C:F3:93:47:49:80:8F:A7
X509v3 Authority Key Identifier:
keyid:4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/890-NQsNefdKFiGYTPOTR0mAj6c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.110.175.0/24
Signature Algorithm: sha256WithRSAEncryption
17:20:dd:36:f3:ec:12:f1:a7:54:f5:cf:a3:f6:47:32:c4:9d:
64:c1:db:a2:bd:7e:9b:08:fb:20:9b:d3:f1:ed:59:1c:3a:b9:
7f:93:43:9d:db:a1:22:da:9a:8a:53:28:79:14:e4:eb:9f:46:
db:c4:f2:98:02:7f:dc:8d:6c:58:da:9f:0b:37:62:30:77:2c:
85:34:4f:18:69:71:7f:5c:38:99:e5:46:d9:02:be:9b:99:4e:
05:bd:09:6e:35:7d:10:af:32:37:26:47:c1:63:32:f6:65:91:
89:3a:1a:0c:3d:63:38:d7:99:f4:b0:d5:4f:32:48:0d:2e:d2:
b2:09:6f:eb:7e:83:35:1e:d8:97:af:61:02:b2:b5:d5:ca:0b:
85:82:a0:43:46:c9:16:4f:6c:67:fb:f0:ee:25:ec:e0:61:e0:
99:4b:bf:5d:69:da:b9:34:9f:59:b5:fa:81:e1:c1:39:95:15:
ae:a4:db:36:74:cb:3b:b2:63:ae:d1:27:55:f0:c2:5b:50:44:
51:1a:06:59:c9:32:34:3a:d9:ce:b1:b4:f3:7b:73:21:e4:e3:
23:1b:6a:34:92:8e:98:f2:3d:ee:20:44:6e:98:fd:da:f3:0c:
ae:fb:2d:e0:ac:4b:05:1e:ef:a2:a4:a0:49:95:7e:ba:ec:8b:
2a:2a:44:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:40:03 2025 by rpki-client