Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/cab588-32fd-4a6d-a0e2-f4d30a7943f6/1/hRPI0iSGl2IzeA7QH3Szt11HLAA.roa
File: hRPI0iSGl2IzeA7QH3Szt11HLAA.roa (raw, json)
Hash identifier: PPwH27Sg7uIDGa5QbdK7/mYmLXCSL9d4CnlOhCXOspw=
Subject key identifier: 85:13:C8:D2:24:86:97:62:33:78:0E:D0:1F:74:B3:B7:5D:47:2C:00
Certificate issuer: /CN=2669dd2f4da888c27d130f99e88a2e0c590aad2f
Certificate serial: 01942144187116BACEDE3500C185076D7621
Authority key identifier: 26:69:DD:2F:4D:A8:88:C2:7D:13:0F:99:E8:8A:2E:0C:59:0A:AD:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmndL02oiMJ9Ew-Z6IouDFkKrS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/cab588-32fd-4a6d-a0e2-f4d30a7943f6/1/hRPI0iSGl2IzeA7QH3Szt11HLAA.roa
Signing time: Wed 01 Jan 2025 09:48:18 +0000
ROA not before: Wed 01 Jan 2025 09:48:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51849
IP address blocks: 194.42.122.0/23 maxlen: 23
195.72.122.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:18:71:16:ba:ce:de:35:00:c1:85:07:6d:76:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2669dd2f4da888c27d130f99e88a2e0c590aad2f
Validity
Not Before: Jan 1 09:48:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8513c8d22486976233780ed01f74b3b75d472c00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:05:01:b8:0b:60:9a:8e:66:ca:70:92:29:4e:
eb:06:b9:ca:c0:cf:8b:69:59:a3:0b:69:df:f8:82:
51:08:56:32:c6:f9:11:43:43:6f:e0:d2:94:7b:87:
bd:55:3d:88:7b:5a:aa:2f:b8:b5:4c:89:d9:8f:7c:
41:ca:4f:c7:93:97:37:4a:18:d1:08:9b:70:1d:28:
1f:ef:8a:08:fa:43:78:af:0d:71:3a:4e:7d:d9:fe:
3b:43:6b:4c:0e:96:9d:3f:12:66:80:d0:97:05:73:
53:2d:64:c6:12:1a:28:32:a0:9e:71:ba:42:68:48:
1a:11:e6:e6:87:45:07:57:11:eb:27:46:f3:bd:31:
90:cd:83:8a:01:97:81:a8:c8:0d:4c:ed:4c:c1:61:
af:a7:9f:6c:d3:d8:c4:b7:00:14:70:f8:96:64:94:
21:73:15:bd:4e:35:b5:2c:f5:04:47:bd:7f:82:c0:
9d:3c:32:1b:3e:bb:e8:c9:4b:b4:f1:35:0b:59:8e:
7e:22:75:e4:8a:96:57:48:1c:85:fb:c8:d9:f1:73:
70:7a:a7:62:c6:cb:e8:97:ae:86:8d:0e:06:09:3c:
f4:bd:e4:e0:53:75:33:18:97:16:17:40:93:2d:7d:
ba:b3:1f:bb:5a:80:a1:a6:df:32:6d:6a:e0:cf:c0:
76:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:13:C8:D2:24:86:97:62:33:78:0E:D0:1F:74:B3:B7:5D:47:2C:00
X509v3 Authority Key Identifier:
keyid:26:69:DD:2F:4D:A8:88:C2:7D:13:0F:99:E8:8A:2E:0C:59:0A:AD:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmndL02oiMJ9Ew-Z6IouDFkKrS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/cab588-32fd-4a6d-a0e2-f4d30a7943f6/1/hRPI0iSGl2IzeA7QH3Szt11HLAA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/cab588-32fd-4a6d-a0e2-f4d30a7943f6/1/JmndL02oiMJ9Ew-Z6IouDFkKrS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.42.122.0/23
195.72.122.0/23
Signature Algorithm: sha256WithRSAEncryption
7d:e3:cc:5e:c1:b8:7a:e7:44:6d:b7:c2:d0:19:2f:7e:6d:28:
2c:52:51:14:75:06:fc:63:1e:dc:a8:21:ba:f2:42:a0:36:3d:
a8:8a:16:09:65:28:13:5d:31:dc:13:21:ee:9f:66:13:ac:ad:
1e:6b:bd:31:cd:b7:eb:7f:a5:5d:8c:0e:71:35:80:3d:36:f5:
ec:07:8d:b3:96:9c:8e:b8:bf:c6:d9:c1:a8:95:0c:d9:64:ef:
4d:93:67:90:d1:10:e2:89:66:a7:a6:61:8f:66:d9:a2:85:7d:
3c:22:3a:71:c4:4d:6a:1d:21:b6:ea:1b:b4:63:47:68:d5:fe:
93:85:ec:26:74:16:53:6b:4a:ca:0c:e0:8c:22:60:d9:0d:0d:
a0:13:31:77:bc:51:8c:1c:a0:4a:03:24:b8:c5:0d:d6:09:ff:
bd:02:bd:55:33:36:27:58:37:03:22:32:2c:c5:0a:78:63:63:
3a:9e:fc:a4:79:7d:9f:ba:68:10:3c:e8:0e:86:0e:24:e9:5e:
e8:6f:3b:06:be:e4:69:10:b0:62:f8:e4:d2:98:91:61:dc:51:
9c:b9:49:ae:7f:5a:d8:0f:ee:41:e2:2a:3a:f8:0d:2c:7e:bd:
b1:b0:65:ea:4b:2b:a7:b0:2a:43:42:f7:dc:d3:90:21:29:24:
2d:66:75:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:50:17 2025 by rpki-client