Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/f0eefe-abce-4387-be38-5fe22b983b9e/1/1A6zmbSSFFCtJUTAK3Ne0vYFM7k.roa
File: 1A6zmbSSFFCtJUTAK3Ne0vYFM7k.roa (raw, json)
Hash identifier: EEmsZ3h7k3+1oq66fccJcJgmAy5p73dvVCKTe7zrBgU=
Subject key identifier: D4:0E:B3:99:B4:92:14:50:AD:25:44:C0:2B:73:5E:D2:F6:05:33:B9
Certificate issuer: /CN=e8abec04fd529994f5456a13a8b88f13fde12abb
Certificate serial: 018CC7952AEAB52ED6AF73AD35F907D068E4
Authority key identifier: E8:AB:EC:04:FD:52:99:94:F5:45:6A:13:A8:B8:8F:13:FD:E1:2A:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6KvsBP1SmZT1RWoTqLiPE_3hKrs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/f0eefe-abce-4387-be38-5fe22b983b9e/1/1A6zmbSSFFCtJUTAK3Ne0vYFM7k.roa
Signing time: Tue 02 Jan 2024 00:31:31 +0000
ROA not before: Tue 02 Jan 2024 00:31:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6830
IP address blocks: 194.56.244.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:2a:ea:b5:2e:d6:af:73:ad:35:f9:07:d0:68:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8abec04fd529994f5456a13a8b88f13fde12abb
Validity
Not Before: Jan 2 00:31:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d40eb399b4921450ad2544c02b735ed2f60533b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f0:3b:83:c8:49:11:ff:14:0f:15:4e:12:3f:
26:df:38:51:99:02:06:39:b0:08:3e:79:1e:41:eb:
b5:2e:1b:15:86:b4:40:5f:12:53:e9:87:e9:92:f1:
8f:04:82:ca:ba:92:67:41:1d:d9:6a:5d:c1:b4:b2:
5c:e9:64:53:97:26:6e:07:b8:ba:b5:07:ee:aa:0b:
77:13:e7:21:7b:54:31:f1:d6:e0:91:0f:d3:5d:fa:
c1:ee:82:b0:70:85:c2:4d:ad:7c:98:21:03:5d:eb:
76:54:bb:a8:86:76:82:6a:01:24:0a:69:f7:e9:7c:
89:fa:b6:6b:bd:a1:39:83:a3:c0:37:ed:7d:98:df:
64:14:74:df:c7:60:a6:f7:ff:d0:6a:b1:4d:bf:8c:
62:67:43:79:69:5d:70:5c:56:cf:d1:18:12:04:78:
ee:bf:a1:ca:db:40:5e:f1:14:0f:d3:d8:7b:43:8e:
ca:b5:8c:8d:9f:07:3f:66:4e:35:51:bb:e8:9f:fc:
28:c3:d2:b0:30:49:65:8d:37:a6:f2:a4:6a:ee:db:
38:df:3f:06:75:c0:ae:0b:a2:72:eb:6b:c4:ea:d4:
1e:63:b6:26:e8:36:d9:ce:f6:26:15:dd:24:7d:ab:
2f:44:f8:5c:8c:8a:91:d1:b4:ff:44:8b:7e:a8:65:
9f:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:0E:B3:99:B4:92:14:50:AD:25:44:C0:2B:73:5E:D2:F6:05:33:B9
X509v3 Authority Key Identifier:
keyid:E8:AB:EC:04:FD:52:99:94:F5:45:6A:13:A8:B8:8F:13:FD:E1:2A:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6KvsBP1SmZT1RWoTqLiPE_3hKrs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f0eefe-abce-4387-be38-5fe22b983b9e/1/1A6zmbSSFFCtJUTAK3Ne0vYFM7k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f0eefe-abce-4387-be38-5fe22b983b9e/1/6KvsBP1SmZT1RWoTqLiPE_3hKrs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.56.244.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:2a:e0:e7:3b:fa:29:ec:b8:b5:79:35:27:b8:08:36:9d:2f:
de:4c:c2:76:2e:41:fa:59:33:94:eb:13:12:6a:f0:53:cc:4b:
6d:29:ef:7f:9f:91:4e:5c:a8:6e:74:8b:26:bd:1f:aa:78:82:
26:40:aa:22:da:5a:9e:c3:fb:74:8d:0c:1b:c6:75:90:e6:f5:
5a:cf:df:ad:7a:1c:3c:a7:d1:dd:69:f9:88:fe:0e:80:bd:1d:
48:96:99:06:14:81:c1:3c:3a:c6:64:d3:3c:77:d1:6f:e7:f3:
09:a1:9e:60:8c:ae:60:dc:3f:0c:d1:48:73:0b:96:a5:b4:72:
f8:55:23:0a:f2:fe:a4:b1:2b:a2:b7:43:d5:31:22:f1:6c:a5:
e4:1a:84:50:86:67:be:1e:ef:cf:0e:1e:ed:92:95:ed:95:c2:
fe:25:b8:ab:fb:62:16:af:21:5e:c9:4f:d4:4b:ed:5a:5d:f5:
6b:b5:83:43:ba:57:5e:35:eb:2a:8d:c8:12:c6:40:a9:9f:ef:
ff:fe:8c:5e:44:33:7e:7d:23:5a:ad:2f:c6:e6:5c:bc:7d:d7:
22:33:18:e1:5e:83:ab:58:6f:d7:67:ab:24:3e:1c:ee:79:0d:
f4:dd:3a:36:7d:1c:74:aa:ec:2b:47:18:d3:38:b6:84:a7:fd:
b1:ef:d8:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:57:08 2025 by rpki-client