Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/fe7b79-1568-4eb6-bc0f-5489e22cab81/1/_5myfNZ6GxP43zSZXiv-ahvAdic.roa
File: _5myfNZ6GxP43zSZXiv-ahvAdic.roa (raw, json)
Hash identifier: ReBBgfJmyExtnMmLRqxdbjqbJfre5UWx+swB6chDHPk=
Subject key identifier: FF:99:B2:7C:D6:7A:1B:13:F8:DF:34:99:5E:2B:FE:6A:1B:C0:76:27
Certificate issuer: /CN=80f3f3114caa8e926281725f727d608d93395118
Certificate serial: 0193DFAFD97EB31A2AA403C324C4C1EE86E9
Authority key identifier: 80:F3:F3:11:4C:AA:8E:92:62:81:72:5F:72:7D:60:8D:93:39:51:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gPPzEUyqjpJigXJfcn1gjZM5URg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/fe7b79-1568-4eb6-bc0f-5489e22cab81/1/_5myfNZ6GxP43zSZXiv-ahvAdic.roa
Signing time: Thu 19 Dec 2024 16:11:03 +0000
ROA not before: Thu 19 Dec 2024 16:11:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197058
IP address blocks: 194.28.144.0/22 maxlen: 22
194.28.144.0/24 maxlen: 24
194.28.145.0/24 maxlen: 24
194.28.146.0/24 maxlen: 24
194.28.147.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:df:af:d9:7e:b3:1a:2a:a4:03:c3:24:c4:c1:ee:86:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80f3f3114caa8e926281725f727d608d93395118
Validity
Not Before: Dec 19 16:11:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ff99b27cd67a1b13f8df34995e2bfe6a1bc07627
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:25:ce:98:b9:08:57:ed:11:e8:3b:00:da:18:
d7:86:ee:57:0a:0e:56:3f:11:33:03:f6:a4:b6:de:
0d:9d:26:b5:b3:ea:c0:74:d9:67:f3:34:29:1d:49:
d9:81:eb:2c:d2:26:35:98:d7:f2:0d:4b:da:7b:d4:
84:3a:6d:2e:c3:6a:e7:9c:3d:04:27:3a:40:87:9b:
a7:e6:75:7c:7b:df:39:c7:46:71:3e:b2:78:fc:40:
09:10:1b:9b:57:f1:83:88:4c:6e:83:c2:d5:85:2a:
76:7a:30:eb:62:d7:cf:50:64:06:90:09:0d:7b:8e:
70:43:64:28:69:dd:04:44:f1:49:82:1d:61:c5:e7:
20:3d:d5:63:d4:3e:95:eb:bc:3e:2e:75:43:45:77:
4d:02:b4:51:d0:49:9b:d5:77:39:ee:e6:59:b8:cc:
7a:2c:b2:69:14:2a:6f:76:c3:24:e9:92:b1:20:20:
f6:d6:cd:34:0c:45:59:fe:41:d6:b3:a3:2b:20:e0:
f1:c3:c8:f8:ce:ee:dd:19:bb:e0:5d:7c:d3:d6:17:
5d:c3:16:8d:d3:10:f8:6f:e2:ae:24:ad:ad:25:53:
e6:af:53:45:7e:9d:92:e3:97:d1:ce:87:c2:ba:91:
71:4f:07:c8:40:8a:cc:7d:dc:bd:62:1c:e6:22:2f:
dc:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:99:B2:7C:D6:7A:1B:13:F8:DF:34:99:5E:2B:FE:6A:1B:C0:76:27
X509v3 Authority Key Identifier:
keyid:80:F3:F3:11:4C:AA:8E:92:62:81:72:5F:72:7D:60:8D:93:39:51:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gPPzEUyqjpJigXJfcn1gjZM5URg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/fe7b79-1568-4eb6-bc0f-5489e22cab81/1/_5myfNZ6GxP43zSZXiv-ahvAdic.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/fe7b79-1568-4eb6-bc0f-5489e22cab81/1/gPPzEUyqjpJigXJfcn1gjZM5URg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.28.144.0/22
Signature Algorithm: sha256WithRSAEncryption
9a:fd:47:cf:71:4a:0f:81:3f:25:96:d4:a0:a0:5d:c6:7d:9f:
90:67:df:ec:2a:81:78:0e:72:0a:4d:b9:23:71:00:e1:cb:85:
90:a6:98:11:00:61:84:1e:89:9d:7f:8c:59:01:2c:b3:0e:a1:
ff:73:e5:ee:e1:d5:b7:7e:0f:cc:e7:5c:8c:a1:19:ce:92:c6:
36:68:e6:df:cd:5d:e5:c8:65:87:e9:6c:ce:5f:59:3f:e6:dd:
3e:0c:97:4c:ac:af:5d:89:49:84:d0:8f:94:89:98:f7:20:77:
46:aa:9c:e8:05:83:4b:7b:31:90:38:1b:e0:6f:a4:00:01:49:
9b:45:44:0f:31:fe:e4:54:40:8b:67:80:ce:e7:e8:8c:22:aa:
68:e8:56:c1:42:89:28:41:61:a1:8d:f3:70:4c:9f:5a:d3:19:
f1:f2:1f:c5:0b:08:37:57:27:1b:f3:31:6d:fe:51:9d:da:b4:
a4:fe:58:9a:02:38:5b:dc:87:38:b0:af:f1:bf:b3:7d:48:91:
c3:c6:03:37:57:f8:29:98:75:41:8e:9d:68:5f:fb:54:c4:f8:
44:20:cb:d7:b5:57:61:23:5e:ba:42:a5:0e:c8:30:01:72:c7:
03:00:eb:7e:a2:12:9a:14:36:b7:00:ec:07:c5:20:1b:ae:c0:
9b:22:d0:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:26:51 2024 by rpki-client on console.sobornost.net