Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/1G0GndQxPN_ijKQXod2nDRjRK3A.roa
File: 1G0GndQxPN_ijKQXod2nDRjRK3A.roa (raw, json)
Hash identifier: svcZUSP1M9nMS5vYUw03InJSZc0A98zEzvtu2zSVU0Y=
Subject key identifier: D4:6D:06:9D:D4:31:3C:DF:E2:8C:A4:17:A1:DD:A7:0D:18:D1:2B:70
Certificate issuer: /CN=f0521128cf634aa6afa7ef52d531f3fcd55628f9
Certificate serial: 018CCA2B665B7BAE5923524F54F229AFE6F1
Authority key identifier: F0:52:11:28:CF:63:4A:A6:AF:A7:EF:52:D5:31:F3:FC:D5:56:28:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8FIRKM9jSqavp-9S1THz_NVWKPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/1G0GndQxPN_ijKQXod2nDRjRK3A.roa
Signing time: Tue 02 Jan 2024 12:34:51 +0000
ROA not before: Tue 02 Jan 2024 12:34:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57635
IP address blocks: 193.203.38.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2b:66:5b:7b:ae:59:23:52:4f:54:f2:29:af:e6:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0521128cf634aa6afa7ef52d531f3fcd55628f9
Validity
Not Before: Jan 2 12:34:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d46d069dd4313cdfe28ca417a1dda70d18d12b70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:18:24:2a:cf:73:81:fa:5b:57:e0:5a:a6:25:
ba:25:a5:29:11:4f:cd:2d:e1:f4:4d:32:d1:6c:ff:
87:30:be:94:de:f6:e3:63:3f:02:a8:1e:88:b5:44:
14:35:93:15:51:13:1c:f8:d4:75:44:17:b4:38:fe:
34:53:3d:9f:fa:0f:01:70:f2:96:c3:9c:4b:80:c1:
22:2f:a2:4f:46:ed:9d:13:19:60:69:0c:e1:bb:39:
0a:59:64:f3:34:f4:23:c0:08:ca:f6:d2:4a:6a:d5:
cc:1a:a0:8d:1f:3d:1f:a8:23:7c:df:54:78:ba:3c:
42:2a:46:77:64:de:16:49:86:00:cd:e3:c2:ed:c7:
5c:46:fd:92:c0:27:45:9a:05:c2:cd:a0:a3:b2:4b:
16:a5:a2:5c:87:b1:a5:bb:5a:42:9d:e0:07:57:a6:
11:15:78:9d:66:83:db:dd:f6:7b:04:60:ac:05:81:
b0:3c:f8:c6:08:38:ed:43:c8:22:41:83:62:b3:01:
69:c9:14:b0:a6:12:df:40:7e:0e:c5:30:49:56:ee:
5c:0c:49:c0:82:83:cb:fc:a1:cc:ca:1a:16:28:7a:
56:26:fb:95:14:43:3d:31:a2:dc:da:fc:e8:e2:8e:
24:b4:e4:79:92:ab:47:d3:95:2a:05:6b:b8:18:82:
1d:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:6D:06:9D:D4:31:3C:DF:E2:8C:A4:17:A1:DD:A7:0D:18:D1:2B:70
X509v3 Authority Key Identifier:
keyid:F0:52:11:28:CF:63:4A:A6:AF:A7:EF:52:D5:31:F3:FC:D5:56:28:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8FIRKM9jSqavp-9S1THz_NVWKPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/1G0GndQxPN_ijKQXod2nDRjRK3A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.203.38.0/24
Signature Algorithm: sha256WithRSAEncryption
11:0a:17:1c:fe:90:ef:42:53:d6:d1:44:7c:f2:4e:8d:83:44:
a6:05:15:39:61:f8:1c:bc:66:8a:43:2b:64:d2:82:66:d6:0d:
8a:6a:a9:47:33:ee:a0:96:37:af:b9:0e:4d:14:58:a0:f5:6d:
bf:6e:93:b9:8e:16:d5:dd:36:41:be:02:7e:ea:ba:48:de:af:
73:d7:61:8c:a1:16:27:53:c3:42:c1:3f:c7:d2:04:9e:44:d0:
29:b7:41:1f:df:3c:9d:88:76:db:73:bd:12:6a:18:15:7e:f0:
ff:2c:d5:a5:0e:00:56:5c:22:9b:96:32:06:7a:0a:6e:8d:cf:
d9:70:4d:31:5c:c6:e1:9e:b0:85:d1:de:54:cc:37:39:33:55:
ec:5c:2a:ac:e1:b5:86:ab:cb:82:48:fa:98:a9:ae:3c:fc:16:
a3:2e:b9:68:06:d6:82:d7:dd:0e:29:3b:41:fa:69:be:6d:d7:
9d:eb:cb:b4:a6:dc:a2:de:9f:5e:72:35:cf:43:63:97:d4:b3:
9c:33:6c:8c:9b:1c:55:a9:58:1f:16:e0:85:b0:6c:19:10:1d:
dd:08:c2:e6:b4:75:f7:1c:83:c5:da:1d:a8:00:c6:f0:94:ac:
a7:df:82:89:36:6c:a2:a6:9e:93:b6:48:56:a8:57:c1:0c:9f:
37:07:71:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 14:23:41 2025 by rpki-client