Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ce8619-0b3c-4d15-bd7b-c0e72e2ab802/1/rlwxoqReFZHmhkrpraemowPOHFw.roa
File: rlwxoqReFZHmhkrpraemowPOHFw.roa (raw, json)
Hash identifier: kHoL7R9EEaKAxMFFGohcmD8VL6AZU7dsgz5QT0wl9yM=
Subject key identifier: AE:5C:31:A2:A4:5E:15:91:E6:86:4A:E9:AD:A7:A6:A3:03:CE:1C:5C
Certificate issuer: /CN=cefff6ae51ea2a679f745fd8cc3984315e57299b
Certificate serial: 05506B66
Authority key identifier: CE:FF:F6:AE:51:EA:2A:67:9F:74:5F:D8:CC:39:84:31:5E:57:29:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zv_2rlHqKmefdF_YzDmEMV5XKZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ce8619-0b3c-4d15-bd7b-c0e72e2ab802/1/rlwxoqReFZHmhkrpraemowPOHFw.roa
Signing time: Thu 07 Apr 2022 09:11:07 +0000
ROA not before: Thu 07 Apr 2022 09:11:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42831
IP address blocks: 194.50.1.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89156454 (0x5506b66)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cefff6ae51ea2a679f745fd8cc3984315e57299b
Validity
Not Before: Apr 7 09:11:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ae5c31a2a45e1591e6864ae9ada7a6a303ce1c5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:92:66:9f:1a:f0:26:55:d8:8e:e5:1a:95:0c:
9f:2e:58:79:00:3d:c8:9f:c4:ce:ae:70:fe:c8:96:
41:e3:e1:70:d0:e5:cb:40:bf:02:ac:2e:69:aa:dd:
95:bd:48:77:ee:24:d2:1d:80:2f:f2:62:ee:d0:aa:
bf:8a:ba:e7:a8:ef:73:f9:45:d9:a8:c1:78:25:98:
3e:86:4f:c5:39:a2:ca:f0:b6:37:0c:38:b1:30:b5:
fd:9c:44:dd:99:bf:ac:7b:ab:23:b2:f7:5e:08:01:
6a:e6:b7:9f:de:b5:ae:a9:42:1c:bd:05:55:b8:e4:
5d:91:64:13:92:8b:09:e9:cf:0c:ed:b7:aa:96:0f:
16:bb:44:2f:be:e0:bb:72:f7:64:ab:96:0f:2d:2d:
13:0a:1d:fd:0d:65:7e:4a:4e:6a:32:fc:e0:1f:08:
f7:46:6b:63:41:e0:de:9b:18:8e:b0:9e:ab:e9:9a:
7f:40:53:c1:da:6d:2e:6a:31:88:15:cb:91:99:0a:
60:a9:f1:77:ce:67:b6:64:1d:6d:47:06:5f:55:c3:
55:9c:c8:0e:94:bf:16:17:9c:13:66:0c:0e:1f:27:
96:2f:54:91:e7:21:97:8c:31:94:c1:31:2a:6a:e5:
00:0f:e2:a7:de:85:fa:48:43:a8:b2:3f:68:7d:bc:
9a:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:5C:31:A2:A4:5E:15:91:E6:86:4A:E9:AD:A7:A6:A3:03:CE:1C:5C
X509v3 Authority Key Identifier:
keyid:CE:FF:F6:AE:51:EA:2A:67:9F:74:5F:D8:CC:39:84:31:5E:57:29:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zv_2rlHqKmefdF_YzDmEMV5XKZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ce8619-0b3c-4d15-bd7b-c0e72e2ab802/1/rlwxoqReFZHmhkrpraemowPOHFw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ce8619-0b3c-4d15-bd7b-c0e72e2ab802/1/zv_2rlHqKmefdF_YzDmEMV5XKZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.50.1.0/24
Signature Algorithm: sha256WithRSAEncryption
32:3c:17:64:90:28:b1:a3:d2:4c:7b:4c:56:90:9a:fe:e2:86:
92:1f:29:0f:ac:43:86:ba:b6:1d:0a:1d:c1:71:44:aa:f9:02:
f1:a9:57:b5:ce:b5:fe:34:cc:1e:97:e5:c8:06:0f:b4:ec:57:
f2:08:60:95:ee:cc:f2:13:04:f9:83:a2:a4:c1:8e:48:b0:7d:
1d:68:80:60:52:e3:d0:87:d9:de:ab:4e:96:51:5b:35:6b:55:
fe:42:0d:a2:e5:ca:ce:d3:cf:e2:cf:d6:ec:69:be:50:84:86:
7b:94:13:ec:70:11:75:2d:7b:0e:fc:e5:1e:79:a1:d6:42:98:
45:b8:9d:6e:6f:9a:3e:9e:69:74:fe:6b:7e:3a:92:f4:20:8b:
44:30:45:1f:09:b6:3e:21:3d:9d:98:e4:96:7c:4a:f0:59:de:
23:fb:58:ad:b7:d0:cc:07:4e:41:e6:a2:5b:e9:15:f7:2f:67:
10:66:8a:db:22:db:73:cd:e4:c6:a0:2c:d0:a2:4b:78:f6:8f:
6f:c0:d6:da:11:ca:ed:88:6c:2c:d3:cc:db:36:d2:84:90:e7:
d8:14:10:8a:1c:f4:ce:e1:ab:32:ad:c3:b5:c2:a5:f7:9e:40:
89:d7:f9:2f:67:07:38:1a:61:7b:f9:70:a5:54:40:d5:a5:c7:
05:1e:20:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:14:25 2025 by rpki-client