Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/824f78-dee2-47bc-af2f-38cb6e416f3a/1/rXkquTKb2OqoXutklE6lpDOGcoA.roa
File: rXkquTKb2OqoXutklE6lpDOGcoA.roa (raw, json)
Hash identifier: Jd9Pte+30dRdyYUN2ixVSzbCLQgv3I5qsV1yCO4p5eQ=
Subject key identifier: AD:79:2A:B9:32:9B:D8:EA:A8:5E:EB:64:94:4E:A5:A4:33:86:72:80
Certificate issuer: /CN=c87b594e5e6713a5b80a5481a5ce71e652d84573
Certificate serial: 01856F6FF427BEE4688F7F6BBA9C76842BBC
Authority key identifier: C8:7B:59:4E:5E:67:13:A5:B8:0A:54:81:A5:CE:71:E6:52:D8:45:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yHtZTl5nE6W4ClSBpc5x5lLYRXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/824f78-dee2-47bc-af2f-38cb6e416f3a/1/rXkquTKb2OqoXutklE6lpDOGcoA.roa
Signing time: Sun 01 Jan 2023 22:24:46 +0000
ROA not before: Sun 01 Jan 2023 22:24:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6060
IP address blocks: 194.36.175.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:6f:f4:27:be:e4:68:8f:7f:6b:ba:9c:76:84:2b:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c87b594e5e6713a5b80a5481a5ce71e652d84573
Validity
Not Before: Jan 1 22:24:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ad792ab9329bd8eaa85eeb64944ea5a433867280
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:f9:a5:3d:b3:cb:44:e4:74:cd:29:18:2f:2d:
b9:ad:f6:67:7b:79:ef:cd:b6:5d:f7:3d:5d:dd:d6:
b5:6e:67:26:cd:c0:a2:9a:d4:9e:44:5a:ec:75:3b:
2b:70:71:41:c1:d2:99:50:97:3e:10:e0:4f:e8:3f:
17:21:fe:3d:0b:6b:7c:f0:e2:9f:f2:65:f2:d4:d9:
e2:d1:fb:6e:82:50:0a:a2:68:81:f1:ed:cd:b2:19:
da:ea:71:e3:ce:c1:d3:35:e3:d1:10:8e:3d:e9:6a:
81:af:c8:5b:e8:3c:20:66:12:07:b7:6b:ce:79:15:
08:11:10:79:a9:bb:73:f1:d0:7a:9f:7b:01:32:b9:
41:20:1a:52:fe:ce:8b:5d:1a:6b:dc:42:05:00:b4:
d6:f6:51:f4:c5:d1:03:75:fd:98:60:30:45:8f:e0:
92:d3:db:04:1e:c4:44:b3:f6:9d:d8:7e:b8:67:69:
17:98:ab:13:c9:24:1d:56:3c:4b:ee:da:4a:64:44:
f0:2c:9e:a0:98:bf:e0:5c:93:09:bc:5c:71:4c:2d:
3f:43:0c:6f:dc:ae:f1:36:02:7b:74:3e:a3:ba:81:
61:28:98:f9:07:80:c2:41:c5:dc:15:40:f2:c3:ab:
34:c8:b8:51:ca:29:62:0a:4e:32:cc:dc:3d:06:eb:
9d:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:79:2A:B9:32:9B:D8:EA:A8:5E:EB:64:94:4E:A5:A4:33:86:72:80
X509v3 Authority Key Identifier:
keyid:C8:7B:59:4E:5E:67:13:A5:B8:0A:54:81:A5:CE:71:E6:52:D8:45:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yHtZTl5nE6W4ClSBpc5x5lLYRXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/824f78-dee2-47bc-af2f-38cb6e416f3a/1/rXkquTKb2OqoXutklE6lpDOGcoA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/824f78-dee2-47bc-af2f-38cb6e416f3a/1/yHtZTl5nE6W4ClSBpc5x5lLYRXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.36.175.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:18:ff:d3:25:5a:06:82:f3:d1:a7:a8:6d:3c:d5:42:42:ee:
88:24:8a:2a:07:9b:27:bf:f1:60:ac:84:37:f8:ca:69:79:c3:
d9:89:49:6f:85:07:84:a8:ca:fe:5c:80:78:3f:c7:35:18:a5:
6c:fd:7d:8c:4a:0d:43:92:5d:df:3f:c5:90:fa:b8:37:88:1b:
05:26:b5:91:39:27:07:fc:ab:9d:74:3d:12:f3:fc:be:2b:67:
26:9f:cf:ca:46:41:af:52:1c:da:0d:d2:f0:2b:2a:ac:0c:4c:
87:a8:a9:48:13:0c:46:d1:16:fe:ba:a8:65:33:8b:7e:b0:fe:
85:54:80:c8:0c:69:27:d0:3e:eb:ea:7c:00:55:30:87:04:d4:
03:8f:a5:01:e8:ea:ff:67:9e:c2:49:cd:cf:d4:7b:df:a8:0a:
2d:39:94:82:73:8a:de:2f:6b:cb:b5:50:8c:1c:6c:25:24:a0:
f7:c1:c0:7f:70:33:0b:3b:f6:26:61:d1:b8:a1:dd:9b:87:39:
13:6f:e3:cc:03:eb:9e:6e:85:7b:1d:09:2b:d6:df:53:d0:20:
1c:15:3e:3f:ef:0a:54:d3:7b:0e:19:68:d7:24:53:c0:d7:a2:
54:3f:08:03:92:ee:6b:bd:3a:80:7e:17:b9:1a:89:a1:f8:23:
aa:a4:9d:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:54:34 2025 by rpki-client