Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/824f78-dee2-47bc-af2f-38cb6e416f3a/1/oZiU5Hr581gGdtw-qBYbDNFQjiY.roa
File: oZiU5Hr581gGdtw-qBYbDNFQjiY.roa (raw, json)
Hash identifier: U8C2L0YzQAaYa9D/pagIj/V+5gkBcEr4JhtWnA3UXHY=
Subject key identifier: A1:98:94:E4:7A:F9:F3:58:06:76:DC:3E:A8:16:1B:0C:D1:50:8E:26
Certificate issuer: /CN=c87b594e5e6713a5b80a5481a5ce71e652d84573
Certificate serial: 018C6306E80215371CC154F57548C24C0463
Authority key identifier: C8:7B:59:4E:5E:67:13:A5:B8:0A:54:81:A5:CE:71:E6:52:D8:45:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yHtZTl5nE6W4ClSBpc5x5lLYRXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/824f78-dee2-47bc-af2f-38cb6e416f3a/1/oZiU5Hr581gGdtw-qBYbDNFQjiY.roa
Signing time: Wed 13 Dec 2023 11:54:06 +0000
ROA not before: Wed 13 Dec 2023 11:54:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9009
IP address blocks: 194.180.225.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:63:06:e8:02:15:37:1c:c1:54:f5:75:48:c2:4c:04:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c87b594e5e6713a5b80a5481a5ce71e652d84573
Validity
Not Before: Dec 13 11:54:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a19894e47af9f3580676dc3ea8161b0cd1508e26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:d1:aa:e2:9b:fd:74:27:43:1b:31:37:a6:11:
48:75:a9:5b:64:16:66:f2:e6:61:63:5e:dd:7e:80:
eb:40:6f:7b:bb:11:e4:53:0c:ad:dc:71:14:35:84:
c4:3f:09:a0:b6:66:12:fc:40:61:cf:a9:12:c6:a6:
02:4d:19:d2:ff:86:26:75:f1:a8:40:86:d5:6f:87:
f8:b9:2f:8e:ca:5b:1c:8a:8f:0d:5c:15:8e:24:94:
9c:6b:6c:31:bd:d8:de:18:75:99:49:7d:66:33:05:
4d:26:49:d9:28:0c:2c:99:36:08:07:9a:b3:97:f0:
29:e1:f8:ef:17:0e:b0:de:44:03:76:47:56:e3:51:
76:b3:85:42:8f:66:2e:c4:82:38:a1:70:4f:a7:ed:
b1:e0:c0:ee:25:30:8a:62:6b:bc:4d:8a:3d:17:bf:
10:af:5b:d9:b7:97:40:cf:71:e4:b9:dd:51:a1:5b:
65:20:0b:77:ff:71:f4:b4:1a:2a:74:13:ce:aa:e5:
dc:8a:ae:0e:1c:24:ea:cf:a4:a0:fa:e0:e1:03:25:
d9:a9:8e:05:88:14:ef:4d:a3:b4:02:5a:5d:d3:3e:
4b:e2:2c:30:77:ed:50:12:bd:df:9d:0c:38:f1:8e:
cb:44:27:b7:b4:c5:21:bc:d5:08:6b:18:09:e5:1c:
c4:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:98:94:E4:7A:F9:F3:58:06:76:DC:3E:A8:16:1B:0C:D1:50:8E:26
X509v3 Authority Key Identifier:
keyid:C8:7B:59:4E:5E:67:13:A5:B8:0A:54:81:A5:CE:71:E6:52:D8:45:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yHtZTl5nE6W4ClSBpc5x5lLYRXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/824f78-dee2-47bc-af2f-38cb6e416f3a/1/oZiU5Hr581gGdtw-qBYbDNFQjiY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/824f78-dee2-47bc-af2f-38cb6e416f3a/1/yHtZTl5nE6W4ClSBpc5x5lLYRXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.180.225.0/24
Signature Algorithm: sha256WithRSAEncryption
06:28:6f:bc:21:4c:25:e4:dc:90:61:05:8d:9d:90:a8:6f:f9:
3d:4e:c6:2c:19:2a:a2:0a:cc:3b:e2:51:4d:d0:e2:03:3f:74:
af:69:d4:fd:43:f5:34:a5:98:03:43:47:21:94:34:c3:a1:c7:
f7:1a:63:46:87:be:fe:d4:61:9f:80:d0:65:ac:b8:8e:ab:d9:
f0:97:1e:73:cc:63:df:c8:3d:b8:85:6f:c7:72:3c:98:2b:f2:
2e:71:2e:41:4c:e8:65:7f:55:31:ad:af:84:36:db:5e:e3:59:
50:e4:fa:8a:fe:0d:65:43:3c:04:7a:b1:c7:99:70:64:6f:f4:
ff:b4:75:26:94:27:49:b0:ba:9b:04:49:c0:ac:22:9f:36:a4:
29:ca:1b:18:8f:24:b4:83:7f:67:f3:27:ac:03:ac:7c:53:38:
84:38:5f:60:a7:b3:22:79:4e:06:ea:ba:bd:1f:72:63:3d:86:
b6:1a:02:1e:fc:f0:16:ea:21:bf:3f:53:83:31:13:8f:1b:32:
03:a5:33:22:f8:c5:98:69:6d:03:59:34:26:8c:48:fa:c2:50:
c6:33:47:65:a2:09:1d:41:1e:00:20:72:c7:c0:04:a3:78:0e:
94:75:eb:60:82:ae:93:70:e3:b8:8d:62:3d:cd:3e:a1:e7:97:
8a:43:22:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:27:45 2025 by rpki-client