Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/42ac52-ba66-48a2-a07a-b636988ead4d/1/xfIDQmBVlg2VV4SESIdEDkfiEdk.roa
File: xfIDQmBVlg2VV4SESIdEDkfiEdk.roa (raw, json)
Hash identifier: tskpKNtJyVdzc6v7xIgepkHsFFbCMsAQLLLJsZflyB8=
Subject key identifier: C5:F2:03:42:60:55:96:0D:95:57:84:84:48:87:44:0E:47:E2:11:D9
Certificate issuer: /CN=1f1d04807504dcbe1ab80ef84d86e514c57e7e8d
Certificate serial: D0AB8A
Authority key identifier: 1F:1D:04:80:75:04:DC:BE:1A:B8:0E:F8:4D:86:E5:14:C5:7E:7E:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hx0EgHUE3L4auA74TYblFMV-fo0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/42ac52-ba66-48a2-a07a-b636988ead4d/1/xfIDQmBVlg2VV4SESIdEDkfiEdk.roa
Signing time: Tue 08 Mar 2022 17:08:28 +0000
ROA not before: Tue 08 Mar 2022 17:08:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57724
IP address blocks: 193.239.150.0/24 maxlen: 24
193.239.151.0/24 maxlen: 24
193.239.155.0/24 maxlen: 24
193.239.154.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13675402 (0xd0ab8a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f1d04807504dcbe1ab80ef84d86e514c57e7e8d
Validity
Not Before: Mar 8 17:08:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c5f203426055960d955784844887440e47e211d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c9:fc:f1:1d:f9:7a:8a:c5:16:be:4d:28:a4:
78:cc:01:d2:66:e8:b5:45:d8:dc:ff:3c:ee:2d:fa:
4e:44:c4:7f:ab:98:f1:dd:8e:32:ca:33:66:db:6a:
f2:fb:55:b0:f3:48:1f:2a:77:d2:df:69:fc:b9:d1:
ba:91:ca:11:b6:a9:b5:97:6e:49:8c:eb:f8:fe:c5:
15:0f:e7:c4:6e:26:b9:16:8d:bd:98:61:f8:5f:70:
fd:75:5e:65:1d:54:15:a9:5e:54:a1:22:62:83:88:
22:88:95:7e:4d:11:18:1a:ac:af:5c:5c:26:64:2b:
d0:59:0a:82:4a:ec:de:f9:06:be:a0:36:8d:03:f3:
10:cf:be:81:e8:0e:31:34:ee:ba:cd:cb:de:68:09:
59:99:4b:a4:6b:9f:43:5d:d9:af:4d:0f:b7:f7:6d:
bb:a9:9f:2c:d1:c0:c7:c6:de:98:f6:07:e2:1e:e8:
a9:b5:c3:a4:9a:56:46:49:cb:5e:8a:4d:e1:d7:4c:
14:af:6d:7e:1a:64:6b:d5:47:b9:59:77:2a:cd:0f:
49:47:7e:5f:55:ef:7a:88:17:67:ba:57:c0:c6:a4:
68:a3:84:e2:7e:18:3a:3b:c6:a9:5a:5d:bf:6f:29:
d2:24:d0:02:14:d7:99:a4:35:54:33:35:e0:e2:13:
af:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:F2:03:42:60:55:96:0D:95:57:84:84:48:87:44:0E:47:E2:11:D9
X509v3 Authority Key Identifier:
keyid:1F:1D:04:80:75:04:DC:BE:1A:B8:0E:F8:4D:86:E5:14:C5:7E:7E:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hx0EgHUE3L4auA74TYblFMV-fo0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/42ac52-ba66-48a2-a07a-b636988ead4d/1/xfIDQmBVlg2VV4SESIdEDkfiEdk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/42ac52-ba66-48a2-a07a-b636988ead4d/1/Hx0EgHUE3L4auA74TYblFMV-fo0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.239.150.0/23
193.239.154.0/23
Signature Algorithm: sha256WithRSAEncryption
37:e5:12:72:54:eb:56:83:5c:ab:69:8a:f5:37:1e:02:42:c6:
4f:cb:a3:04:92:92:ba:a6:8f:e8:1c:8e:e9:97:96:38:43:c6:
98:23:4f:3f:ef:8f:d6:63:a9:15:f1:74:86:ef:5b:1d:6d:a0:
e8:69:d9:55:d3:8d:af:a9:3d:78:e0:b9:7f:01:70:24:ed:d7:
a5:ef:fb:65:4c:9d:95:fa:97:12:cc:3b:d4:54:14:98:ec:ae:
16:14:2d:48:3e:17:a7:e2:7d:39:5e:6b:8a:13:1d:2b:bc:26:
d7:54:ac:13:95:cc:21:16:d3:67:75:7c:8a:50:9f:3a:79:ca:
02:b5:2d:17:29:09:6a:13:7c:51:e6:ce:44:82:6d:0d:9a:7d:
00:72:8a:ec:29:31:5d:b7:33:88:9c:c1:89:c6:0c:20:da:a0:
6c:16:22:d4:6b:25:1a:1a:4c:a8:9d:b0:f6:16:e3:83:71:47:
62:1a:3d:9e:71:f2:59:10:00:a5:48:38:d9:15:c2:3a:de:a2:
f5:a3:13:bc:33:d9:4a:ff:e7:ec:73:78:51:2d:5f:5b:d8:ad:
4b:9b:61:65:25:46:53:b9:b4:27:0e:ae:e6:57:b9:79:7b:ee:
8d:60:e0:94:85:17:1a:ec:21:23:dd:48:3e:f3:2c:64:8e:4e:
da:7f:48:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:52:59 2025 by rpki-client