Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/e8028c-8178-4576-aaa4-866c4b4acacb/1/2werIrXkhrSCkNlD5ysv34FN9nQ.roa
File: 2werIrXkhrSCkNlD5ysv34FN9nQ.roa (raw, json)
Hash identifier: 0uKyAj+RL2lILUfPaMImxPfKOBSGTyJJ1ZAdhVUEhik=
Subject key identifier: DB:07:AB:22:B5:E4:86:B4:82:90:D9:43:E7:2B:2F:DF:81:4D:F6:74
Certificate issuer: /CN=f3101007d4bf89fbf9f7661cd75894903d2680ef
Certificate serial: 01856D0ABDFEC6817A39D5DAEB32D90D403F
Authority key identifier: F3:10:10:07:D4:BF:89:FB:F9:F7:66:1C:D7:58:94:90:3D:26:80:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8xAQB9S_ifv592Yc11iUkD0mgO8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/e8028c-8178-4576-aaa4-866c4b4acacb/1/2werIrXkhrSCkNlD5ysv34FN9nQ.roa
Signing time: Sun 01 Jan 2023 11:14:58 +0000
ROA not before: Sun 01 Jan 2023 11:14:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 13054
IP address blocks: 193.17.2.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:0a:bd:fe:c6:81:7a:39:d5:da:eb:32:d9:0d:40:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3101007d4bf89fbf9f7661cd75894903d2680ef
Validity
Not Before: Jan 1 11:14:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=db07ab22b5e486b48290d943e72b2fdf814df674
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:a2:37:11:06:37:40:f2:00:22:eb:c9:7a:ac:
7f:98:b8:16:ec:35:9a:90:bd:15:52:5c:f0:58:75:
bf:5a:7e:99:c6:86:40:fa:54:e6:b0:f4:90:30:84:
83:4f:5d:ea:62:78:f1:08:05:12:82:9c:49:2a:f3:
aa:b3:ec:a8:dd:a2:1f:21:ca:4d:60:a0:43:4d:27:
fa:81:f0:28:43:2f:c2:6f:5a:ce:e5:57:74:8e:06:
5b:5e:9c:e5:2b:e2:25:4e:aa:5b:02:68:25:36:80:
d3:79:24:1a:9c:18:51:7e:d8:af:6e:98:1f:2b:1a:
c1:0c:02:2a:86:cb:51:ff:c2:4e:7e:a1:d2:c9:89:
33:d0:54:2f:9e:7c:0c:c5:3e:6e:68:5e:24:9a:63:
e5:e5:66:c6:6a:f0:22:4c:19:72:7b:03:4c:3e:df:
50:ac:90:40:e2:0d:c1:eb:7f:f5:98:a2:f1:54:f6:
30:09:02:fa:88:7e:f0:2b:84:d3:c2:f1:66:c3:1e:
e1:0d:3f:b1:65:b9:c4:9b:77:d0:59:be:fe:4e:51:
bd:31:4b:2d:b5:78:27:80:9a:28:53:d8:a6:f2:9a:
29:4c:cd:03:7c:92:a2:6e:cc:c9:72:12:3e:92:c6:
51:d0:18:c3:33:bd:cd:d0:d0:24:ea:dc:14:f6:83:
3b:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:07:AB:22:B5:E4:86:B4:82:90:D9:43:E7:2B:2F:DF:81:4D:F6:74
X509v3 Authority Key Identifier:
keyid:F3:10:10:07:D4:BF:89:FB:F9:F7:66:1C:D7:58:94:90:3D:26:80:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8xAQB9S_ifv592Yc11iUkD0mgO8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e8028c-8178-4576-aaa4-866c4b4acacb/1/2werIrXkhrSCkNlD5ysv34FN9nQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e8028c-8178-4576-aaa4-866c4b4acacb/1/8xAQB9S_ifv592Yc11iUkD0mgO8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.17.2.0/24
Signature Algorithm: sha256WithRSAEncryption
15:78:fb:39:49:65:ad:ce:9e:a0:04:42:46:c7:4d:1a:68:49:
2a:f9:bc:cd:d2:de:9c:cf:d8:ad:f2:c7:5f:7d:6a:94:7b:90:
e7:b6:78:87:8e:7a:09:f8:cc:4a:cf:5d:58:c5:ac:9b:f3:2e:
39:c7:1c:6e:0c:88:b2:af:f8:90:7d:81:ab:07:f8:bc:0f:42:
9f:65:b9:ef:c6:d0:53:a6:5d:6f:a3:ab:e7:47:dc:69:56:48:
c1:5b:a6:e0:58:e2:b1:f3:98:64:4a:e7:56:3c:0c:4c:67:ff:
4c:f4:29:e1:d0:28:23:2a:c4:6f:3f:73:e0:19:c9:a9:07:65:
31:d3:00:6f:6f:98:58:cd:a4:e8:49:43:61:51:57:f0:b5:3b:
a5:de:a8:44:aa:a3:87:a9:3e:3f:2b:61:de:e1:9e:29:82:8a:
db:b3:46:c9:45:46:47:1e:14:be:46:fd:21:c5:21:7c:bc:fa:
fa:36:49:40:c8:da:2b:38:5f:bf:52:2e:9c:cb:d1:92:b7:57:
91:88:2c:00:73:e6:27:41:3a:a6:4e:bc:7a:31:25:b7:05:97:
b0:36:59:8f:7e:74:8e:c5:ad:f5:0a:9d:90:e6:83:35:45:9f:
e3:da:92:14:7a:fa:44:0e:85:b4:5b:65:56:71:15:7a:72:9f:
cd:9d:bd:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:33:00 2025 by rpki-client