Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/e35ac1-05d1-406d-b668-36eaf7948531/1/663owoCy0geoSEBq18zjFiT7Z94.roa
File: 663owoCy0geoSEBq18zjFiT7Z94.roa (raw, json)
Hash identifier: 1TSeYE3XDa7rGIOANkOioACjFE0zrxWJZSCcKrx3NcU=
Subject key identifier: EB:AD:E8:C2:80:B2:D2:07:A8:48:40:6A:D7:CC:E3:16:24:FB:67:DE
Certificate issuer: /CN=365b4abab716ad1407a902e5176560ecc37c966d
Certificate serial: 019427B57832D8D06998EFAB063E6708D764
Authority key identifier: 36:5B:4A:BA:B7:16:AD:14:07:A9:02:E5:17:65:60:EC:C3:7C:96:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NltKurcWrRQHqQLlF2Vg7MN8lm0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/e35ac1-05d1-406d-b668-36eaf7948531/1/663owoCy0geoSEBq18zjFiT7Z94.roa
Signing time: Thu 02 Jan 2025 15:49:51 +0000
ROA not before: Thu 02 Jan 2025 15:49:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16019
IP address blocks: 130.193.17.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:78:32:d8:d0:69:98:ef:ab:06:3e:67:08:d7:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=365b4abab716ad1407a902e5176560ecc37c966d
Validity
Not Before: Jan 2 15:49:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ebade8c280b2d207a848406ad7cce31624fb67de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:7c:ab:cc:bc:22:d3:7f:fe:64:6b:ba:5a:10:
65:06:c8:0f:13:ee:04:0e:75:77:6f:b7:14:01:4c:
e3:f6:dd:ec:56:29:e6:d0:0c:0a:02:5c:b6:6c:b3:
07:0b:1c:90:e9:50:1e:a3:47:ee:3c:16:08:6d:a0:
4c:a5:3e:0c:95:01:cf:ff:8e:e4:13:a5:ea:13:c5:
06:b1:ee:c7:56:a6:b0:9f:4d:21:64:10:59:be:07:
67:cd:e1:60:82:e2:c8:5c:6a:c0:bd:5e:05:26:75:
2e:16:ab:f2:72:a4:04:b0:12:89:e4:d1:19:98:3a:
8b:01:36:f1:c1:61:0b:75:4f:39:c1:66:4b:bf:f4:
07:54:06:22:96:02:8e:eb:0f:f8:f5:15:d1:36:56:
23:11:ec:b0:4b:7f:bf:e5:6c:43:c4:d5:12:4e:15:
39:80:26:60:f9:da:a5:32:d0:72:31:f0:c6:80:4d:
47:21:e3:20:4a:b6:ec:2f:50:f8:0c:a3:bd:47:cc:
a6:3d:38:90:8d:ed:d4:a0:3f:50:65:6b:a3:74:ec:
ab:b6:8f:f3:ed:74:6b:71:6d:a2:54:60:37:8c:e1:
d1:69:4b:11:4a:30:fa:f9:13:ba:46:f9:b6:d3:47:
61:be:cd:a8:92:81:7d:ca:33:2d:30:16:ab:b3:da:
32:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:AD:E8:C2:80:B2:D2:07:A8:48:40:6A:D7:CC:E3:16:24:FB:67:DE
X509v3 Authority Key Identifier:
keyid:36:5B:4A:BA:B7:16:AD:14:07:A9:02:E5:17:65:60:EC:C3:7C:96:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NltKurcWrRQHqQLlF2Vg7MN8lm0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/e35ac1-05d1-406d-b668-36eaf7948531/1/663owoCy0geoSEBq18zjFiT7Z94.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/e35ac1-05d1-406d-b668-36eaf7948531/1/NltKurcWrRQHqQLlF2Vg7MN8lm0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.193.17.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:87:44:5c:01:89:9e:0a:38:4e:44:04:bc:0f:6a:4d:4e:23:
6a:d0:29:31:b0:d6:3d:a2:71:e7:91:37:53:74:bf:58:e5:72:
66:40:c1:2f:c4:f6:1f:29:8a:9a:db:d0:81:e0:81:3f:77:d2:
cb:c3:de:22:4b:ec:1e:48:3a:67:83:9d:4b:91:b4:de:ef:dc:
d5:66:95:39:72:2e:2e:72:c7:d0:5c:4e:b2:f1:ec:84:51:e0:
16:39:ed:c4:b5:67:95:3b:1f:e5:2a:f1:78:ed:3e:27:75:6a:
ec:e9:f9:7a:7a:91:4f:cb:47:5d:e7:0b:b7:3a:69:2c:49:92:
a6:46:42:f0:b5:2d:4f:3e:87:22:47:9d:2f:41:81:b2:72:83:
9b:d6:3d:12:ff:70:87:bd:9d:be:9c:ad:37:4f:46:1d:ca:4e:
94:73:08:01:75:3e:3f:a1:07:41:ed:cb:c9:cc:45:b5:73:8b:
b6:24:f6:e1:45:8a:9f:0d:a0:e6:85:3e:f5:8d:31:ec:29:63:
95:d2:bb:3b:ee:ce:dd:84:21:23:6a:99:cd:42:b6:02:d2:44:
0c:e7:71:2a:55:b8:a7:8e:e9:ad:ba:89:a2:07:73:b6:b4:20:
63:b3:76:cd:07:b3:18:e4:d7:a3:00:b3:70:81:21:13:16:3e:
a3:d9:49:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 04:09:18 2025 by rpki-client