Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/42ac52-ba66-48a2-a07a-b636988ead4d/1/yjWfhgp2NH4miRVd68t5zsIac3s.roa
File: yjWfhgp2NH4miRVd68t5zsIac3s.roa (raw, json)
Hash identifier: lvViSJ4gkHeKKFQHnDYyqQjVz1TSxjSiP6CrAO1iTM4=
Subject key identifier: CA:35:9F:86:0A:76:34:7E:26:89:15:5D:EB:CB:79:CE:C2:1A:73:7B
Certificate issuer: /CN=1f1d04807504dcbe1ab80ef84d86e514c57e7e8d
Certificate serial: 435F05
Authority key identifier: 1F:1D:04:80:75:04:DC:BE:1A:B8:0E:F8:4D:86:E5:14:C5:7E:7E:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hx0EgHUE3L4auA74TYblFMV-fo0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/42ac52-ba66-48a2-a07a-b636988ead4d/1/yjWfhgp2NH4miRVd68t5zsIac3s.roa
Signing time: Sun 09 Jan 2022 03:29:21 +0000
ROA not before: Sun 09 Jan 2022 03:29:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 136038
IP address blocks: 193.239.151.0/24 maxlen: 24
193.239.150.0/24 maxlen: 24
193.239.155.0/24 maxlen: 24
193.239.154.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4415237 (0x435f05)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f1d04807504dcbe1ab80ef84d86e514c57e7e8d
Validity
Not Before: Jan 9 03:29:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ca359f860a76347e2689155debcb79cec21a737b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:07:91:8e:bd:89:20:84:e0:30:13:44:2c:0b:
17:46:63:4a:25:69:bc:12:01:a8:02:d1:b1:30:a2:
df:f0:c3:c0:85:54:19:5e:0f:7f:1a:17:b1:27:22:
ab:16:4b:2b:23:e2:7d:1c:a7:6e:d9:89:9f:e1:b7:
7b:91:1f:d8:4d:b0:df:a4:ce:06:ce:08:58:53:49:
77:40:80:5f:cc:89:d1:6d:d5:d9:23:f2:3d:41:9d:
0e:78:e7:c2:b9:c2:03:b9:0b:51:d6:5a:04:82:5a:
f7:30:4f:e6:eb:46:80:db:9e:d8:71:0a:a2:49:68:
4a:cc:7f:87:0e:91:7f:09:55:41:4c:65:6a:6f:6b:
b8:3e:44:1e:0d:b2:50:b6:33:d3:77:ad:58:f7:de:
17:49:ea:92:b7:8f:b4:ce:f2:5a:bd:ca:d3:09:23:
0a:93:f3:62:70:10:b7:68:09:26:e2:58:9e:8a:2f:
53:4a:c8:55:e6:55:6f:fd:c8:a1:22:54:c3:d7:70:
a5:02:64:92:34:59:82:7e:4d:dc:0b:46:4d:b9:60:
b2:33:34:67:18:28:22:b2:2d:f7:6d:2d:1b:a7:2a:
58:b3:df:9d:74:9d:7c:32:83:6f:f4:74:90:94:dc:
e0:8d:2d:3c:f6:61:ba:b6:00:a1:4d:7e:f8:f6:9b:
2b:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:35:9F:86:0A:76:34:7E:26:89:15:5D:EB:CB:79:CE:C2:1A:73:7B
X509v3 Authority Key Identifier:
keyid:1F:1D:04:80:75:04:DC:BE:1A:B8:0E:F8:4D:86:E5:14:C5:7E:7E:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hx0EgHUE3L4auA74TYblFMV-fo0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/42ac52-ba66-48a2-a07a-b636988ead4d/1/yjWfhgp2NH4miRVd68t5zsIac3s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/42ac52-ba66-48a2-a07a-b636988ead4d/1/Hx0EgHUE3L4auA74TYblFMV-fo0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.239.150.0/23
193.239.154.0/23
Signature Algorithm: sha256WithRSAEncryption
b6:73:be:64:8b:55:47:7a:31:8e:88:33:b2:f0:64:b9:85:a5:
e4:98:4f:6b:45:f1:d9:b8:eb:ce:69:09:a7:f4:93:ce:03:71:
1b:60:82:45:27:17:ae:78:46:a2:02:77:12:fa:ac:63:a1:0f:
1f:bb:1d:50:41:a3:53:39:45:39:7f:2c:6f:8f:b4:03:43:d4:
67:78:08:28:05:37:45:b9:fd:8b:8a:11:04:22:ab:10:d6:47:
a4:35:59:78:62:d4:d2:69:05:5b:0e:11:b1:db:e8:33:ec:14:
57:97:1f:14:b5:0b:2f:26:aa:57:8a:c0:c7:75:96:ad:51:7c:
a0:76:2d:4e:2e:5b:a8:92:bc:5a:c5:7f:a1:53:9b:68:e1:b2:
00:fe:fe:e7:88:cc:11:7c:d3:d9:66:80:84:c3:31:93:39:f3:
04:34:8a:fe:49:c0:1c:cb:ff:c3:e3:e1:4f:1c:41:07:1e:5f:
46:7a:77:a6:a9:64:7b:f1:1d:67:cd:10:f0:56:fe:86:0b:5d:
10:ee:4f:45:2c:53:70:17:1c:e1:46:05:38:ba:6c:c0:f7:29:
b7:39:2d:81:ab:08:ff:c4:2a:86:81:40:ad:cf:b0:2a:da:20:
75:fb:2f:4e:1c:68:c5:6a:20:3e:f4:71:87:42:05:95:40:08:
37:6b:44:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:18:10 2025 by rpki-client