Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/42ac52-ba66-48a2-a07a-b636988ead4d/1/mN6MDAxNqY34BZIeM6yz-b8ECA0.roa
File: mN6MDAxNqY34BZIeM6yz-b8ECA0.roa (raw, json)
Hash identifier: hSXWR7AIK/rlA2eHuw/uhFW8lzZ6t1ANDOQaRELeIX8=
Subject key identifier: 98:DE:8C:0C:0C:4D:A9:8D:F8:05:92:1E:33:AC:B3:F9:BF:04:08:0D
Certificate issuer: /CN=1f1d04807504dcbe1ab80ef84d86e514c57e7e8d
Certificate serial: 62422F
Authority key identifier: 1F:1D:04:80:75:04:DC:BE:1A:B8:0E:F8:4D:86:E5:14:C5:7E:7E:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hx0EgHUE3L4auA74TYblFMV-fo0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/42ac52-ba66-48a2-a07a-b636988ead4d/1/mN6MDAxNqY34BZIeM6yz-b8ECA0.roa
Signing time: Fri 21 Jan 2022 14:25:19 +0000
ROA not before: Fri 21 Jan 2022 14:25:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 136526
IP address blocks: 193.239.151.0/24 maxlen: 24
193.239.150.0/24 maxlen: 24
193.239.155.0/24 maxlen: 24
193.239.154.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6439471 (0x62422f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f1d04807504dcbe1ab80ef84d86e514c57e7e8d
Validity
Not Before: Jan 21 14:25:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=98de8c0c0c4da98df805921e33acb3f9bf04080d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:44:6a:e7:57:a2:e4:85:e9:25:b9:60:74:2e:
62:fb:31:63:b8:ff:87:10:bd:8c:2c:f8:3d:8b:ef:
e5:c2:10:ac:28:e5:aa:02:59:91:ca:30:75:48:c0:
32:18:ae:9f:bf:d6:ee:99:95:e5:fb:95:21:26:ff:
c1:e5:6b:e1:33:fc:06:61:a3:e6:e4:26:9a:ce:b1:
c4:3b:5d:b8:dd:d8:90:1c:2f:f9:f6:a1:0a:4e:a4:
95:b2:ca:15:92:d6:de:fb:a2:41:fb:c2:8b:b2:51:
f3:41:9b:10:27:1b:4a:9b:d1:68:25:b5:cd:73:7c:
0f:e5:5f:73:a3:6e:85:85:e3:0f:d2:5b:e5:87:50:
be:60:e7:45:51:05:2e:8d:71:b6:bb:c7:f1:fc:9e:
e0:d9:c7:78:67:83:b6:8d:e0:a3:21:d2:06:1a:cb:
8a:8f:b8:14:ca:97:de:eb:aa:cf:66:43:7e:5b:44:
6e:0b:63:cc:c0:95:03:a5:aa:67:ba:fe:e3:bc:dd:
26:1c:ba:c1:01:67:4e:a9:67:81:82:b8:16:34:98:
34:54:05:cb:62:ee:cd:cb:c3:c6:62:4b:de:4e:5b:
e5:2b:e6:28:4f:64:19:03:18:12:48:27:40:14:e8:
3f:d3:46:9d:e7:07:4a:11:6a:13:76:11:d8:a8:9d:
b6:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:DE:8C:0C:0C:4D:A9:8D:F8:05:92:1E:33:AC:B3:F9:BF:04:08:0D
X509v3 Authority Key Identifier:
keyid:1F:1D:04:80:75:04:DC:BE:1A:B8:0E:F8:4D:86:E5:14:C5:7E:7E:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hx0EgHUE3L4auA74TYblFMV-fo0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/42ac52-ba66-48a2-a07a-b636988ead4d/1/mN6MDAxNqY34BZIeM6yz-b8ECA0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/42ac52-ba66-48a2-a07a-b636988ead4d/1/Hx0EgHUE3L4auA74TYblFMV-fo0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.239.150.0/23
193.239.154.0/23
Signature Algorithm: sha256WithRSAEncryption
9b:d0:22:4b:ac:a2:17:1a:f6:fc:ac:54:79:81:da:90:1e:85:
da:76:a8:ca:57:0d:d9:43:ec:fa:e5:17:8e:92:28:22:89:9e:
04:f3:0e:d6:8b:51:5a:18:60:2a:43:35:68:fe:72:ec:2d:98:
1f:33:f3:67:b1:f3:04:fe:04:bb:10:19:09:10:06:a0:6c:31:
dc:03:4d:79:55:e6:56:f2:ed:0e:9a:7b:37:b2:0c:0e:e8:ad:
eb:c6:2f:bd:95:a3:01:cd:3b:c6:46:1a:95:15:46:70:4e:4b:
fe:97:28:84:1a:f4:8c:11:13:ed:35:51:27:52:11:8c:cb:b5:
23:0d:8e:84:9b:ac:d4:df:72:72:22:20:8b:6a:53:1e:2d:fb:
3f:c0:8b:99:64:a4:1e:e5:14:a1:63:f3:d8:51:7f:a5:00:36:
d0:f8:96:1a:48:90:b0:07:55:08:39:d1:37:62:cd:b4:30:c9:
f2:ff:5a:c9:57:1d:66:05:37:0f:41:ca:cb:63:34:f8:88:ef:
c3:f6:72:8e:33:84:12:cb:e7:05:3f:9a:dd:e7:6b:48:b4:05:
87:fe:17:57:f8:21:a4:ee:de:0e:a7:1f:9c:f0:2f:e7:1c:13:
ed:17:76:d4:89:35:c8:0c:c5:c3:f1:c2:35:d6:dd:41:f9:ec:
eb:cf:cd:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:32:27 2025 by rpki-client