Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/6e26ea-a0f2-4387-ac9e-b4d117798d41/1/n1M0cn4Hxh_pSf6NEoVDcsDWTOo.roa
File: n1M0cn4Hxh_pSf6NEoVDcsDWTOo.roa (raw, json)
Hash identifier: CJ6CbvVY5zGSCT6F2lnMoDSqYTL7cOT36Z5fI+te6No=
Subject key identifier: 9F:53:34:72:7E:07:C6:1F:E9:49:FE:8D:12:85:43:72:C0:D6:4C:EA
Certificate issuer: /CN=441fbd304346a14423e5ce5cafc6953a3e245b23
Certificate serial: 0185A07B63EBDEEDE92584AB38069732FDA9
Authority key identifier: 44:1F:BD:30:43:46:A1:44:23:E5:CE:5C:AF:C6:95:3A:3E:24:5B:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RB-9MENGoUQj5c5cr8aVOj4kWyM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/6e26ea-a0f2-4387-ac9e-b4d117798d41/1/n1M0cn4Hxh_pSf6NEoVDcsDWTOo.roa
Signing time: Wed 11 Jan 2023 10:58:39 +0000
ROA not before: Wed 11 Jan 2023 10:58:39 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 194.104.131.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:a0:7b:63:eb:de:ed:e9:25:84:ab:38:06:97:32:fd:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=441fbd304346a14423e5ce5cafc6953a3e245b23
Validity
Not Before: Jan 11 10:58:39 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9f5334727e07c61fe949fe8d12854372c0d64cea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:17:c2:0d:77:df:f7:09:63:bb:7b:03:45:78:
92:48:13:29:30:13:88:c9:5e:0b:b3:08:c7:24:5f:
fc:ee:cc:48:fb:b0:ac:a5:9e:00:13:ae:dc:48:5f:
9c:86:22:93:85:d3:a2:95:92:54:df:a8:15:3c:8f:
f5:f5:b7:7d:16:60:67:d6:18:8a:e3:36:6f:52:8e:
b1:44:d7:ad:7c:2a:43:ab:12:f0:c1:cd:5d:0a:3c:
04:bb:7f:7b:ea:3d:94:15:78:4e:72:27:48:e3:e9:
37:7a:d2:a6:7c:c0:57:f1:59:96:93:24:10:10:24:
c6:1a:a2:7b:48:a7:32:3c:fd:de:cd:44:94:4d:cc:
4f:65:63:40:01:b1:02:e6:98:99:0c:1d:14:e5:26:
61:e3:e3:b4:03:1a:08:8d:3f:4f:0e:35:0b:1f:b5:
d8:ad:20:24:91:40:cf:1a:5b:1a:24:81:b1:5e:f3:
ae:55:b9:fd:26:74:e3:3e:ee:74:d8:18:d9:3d:26:
6a:2c:07:e5:bd:a3:3b:91:99:66:63:55:68:bf:b8:
d4:64:92:81:aa:87:e5:dd:89:f1:4c:17:db:d1:20:
e4:70:0f:52:0c:c4:87:31:f1:1d:41:78:de:0d:d7:
b1:af:91:6d:79:08:81:72:ab:97:65:bc:c7:f9:10:
0c:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:53:34:72:7E:07:C6:1F:E9:49:FE:8D:12:85:43:72:C0:D6:4C:EA
X509v3 Authority Key Identifier:
keyid:44:1F:BD:30:43:46:A1:44:23:E5:CE:5C:AF:C6:95:3A:3E:24:5B:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RB-9MENGoUQj5c5cr8aVOj4kWyM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6e26ea-a0f2-4387-ac9e-b4d117798d41/1/n1M0cn4Hxh_pSf6NEoVDcsDWTOo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6e26ea-a0f2-4387-ac9e-b4d117798d41/1/RB-9MENGoUQj5c5cr8aVOj4kWyM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.104.131.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:be:ff:2b:b4:ee:67:3f:f4:37:98:f5:4d:fc:38:e7:18:6b:
ed:cd:27:67:0f:37:cf:70:79:06:b2:13:0b:a4:0b:88:06:e2:
83:63:aa:6d:04:00:c4:c7:8e:cc:21:6a:1f:b0:ba:9b:be:3b:
4c:10:34:0b:30:cb:6c:33:7d:dc:cb:ef:05:c9:de:e2:39:57:
f3:31:11:de:1e:7d:bd:8c:df:ea:a3:47:32:b3:d1:f6:4b:81:
80:70:33:03:d4:79:c2:c8:c6:77:3d:f6:37:dd:1e:4a:9f:5f:
ff:27:4e:b0:24:e6:df:40:c2:1c:f7:2c:d5:14:08:07:3f:99:
c1:c9:ce:ab:fc:82:e0:d5:4e:09:b0:6e:81:a2:ed:df:ca:3c:
65:49:d1:6a:fc:3b:fe:06:28:19:3c:fc:9b:f7:c8:30:a8:c2:
49:f8:e4:66:7a:e2:61:53:7d:4e:0b:7c:58:4e:61:fd:55:81:
d7:98:31:f9:54:cd:03:6d:fe:d7:52:84:b2:34:6c:48:d9:a7:
f8:53:e4:69:5f:b8:1f:c6:a7:0d:6b:6e:74:81:c9:97:f6:80:
07:68:97:e3:4a:d9:fb:49:8e:a3:01:e3:66:c3:a2:be:43:11:
6f:be:93:d0:7a:20:4d:3f:49:7e:9a:7f:1f:f4:65:55:8b:b2:
40:23:0b:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:24:43 2025 by rpki-client