Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/7a44cc-bc62-4fd2-b0c1-8d2a279e02b3/1/Cev3n8kGDVJyoC__a2q2hPyL61w.roa
File: Cev3n8kGDVJyoC__a2q2hPyL61w.roa (raw, json)
Hash identifier: pUyPFFWgPBzVQm2mw/mZ+/W5VfsSDyXWNZrsaY/d6GY=
Subject key identifier: 09:EB:F7:9F:C9:06:0D:52:72:A0:2F:FF:6B:6A:B6:84:FC:8B:EB:5C
Certificate issuer: /CN=a67ecbb4f65f88b45cccce7cc97807a984384b5d
Certificate serial: FB1C
Authority key identifier: A6:7E:CB:B4:F6:5F:88:B4:5C:CC:CE:7C:C9:78:07:A9:84:38:4B:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pn7LtPZfiLRczM58yXgHqYQ4S10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/7a44cc-bc62-4fd2-b0c1-8d2a279e02b3/1/Cev3n8kGDVJyoC__a2q2hPyL61w.roa
Signing time: Tue 17 May 2022 15:58:59 +0000
ROA not before: Tue 17 May 2022 15:58:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200845
IP address blocks: 193.19.148.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64284 (0xfb1c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a67ecbb4f65f88b45cccce7cc97807a984384b5d
Validity
Not Before: May 17 15:58:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=09ebf79fc9060d5272a02fff6b6ab684fc8beb5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a2:5c:a3:4c:b2:3f:16:a0:db:e5:9a:ee:c0:
c6:42:05:3f:78:44:c4:97:f8:52:77:f4:3d:1d:e5:
66:ff:36:ca:0f:30:d7:f9:eb:36:ef:ae:0e:d6:6b:
50:89:15:31:fd:8e:0b:60:96:b4:b8:eb:d4:83:af:
0a:2b:0e:24:fe:04:f5:20:6d:a9:3a:c1:c3:26:22:
cc:3a:3f:c3:60:b5:2e:e6:8f:46:9f:de:00:d8:b1:
16:e6:13:e1:88:5a:5e:44:9f:0d:b4:d5:fd:4e:d5:
83:99:a1:76:fe:f9:00:f3:da:bb:c4:96:3c:17:3b:
56:52:d6:ac:62:48:93:d5:f3:e3:2d:c0:4f:59:14:
7f:7b:38:67:fd:94:19:e2:c6:d6:35:14:80:98:49:
89:2d:b4:76:b6:52:7b:63:58:e0:68:25:9d:f4:c1:
3e:59:5e:d3:f0:d9:6a:be:ce:79:e6:21:a6:53:2d:
21:ef:4d:1c:f7:63:77:cf:bc:3c:38:a8:b0:b8:2a:
e4:34:ae:9e:8e:88:98:f5:37:21:34:fd:f9:5e:ce:
ed:0c:e9:bc:fc:91:ed:16:93:5c:66:74:81:97:a6:
93:a9:18:c4:fd:8f:2f:3a:03:db:d9:a2:26:cf:69:
d3:28:67:6a:7c:cd:47:d1:bd:05:4f:2c:08:d2:5d:
77:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:EB:F7:9F:C9:06:0D:52:72:A0:2F:FF:6B:6A:B6:84:FC:8B:EB:5C
X509v3 Authority Key Identifier:
keyid:A6:7E:CB:B4:F6:5F:88:B4:5C:CC:CE:7C:C9:78:07:A9:84:38:4B:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pn7LtPZfiLRczM58yXgHqYQ4S10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7a44cc-bc62-4fd2-b0c1-8d2a279e02b3/1/Cev3n8kGDVJyoC__a2q2hPyL61w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7a44cc-bc62-4fd2-b0c1-8d2a279e02b3/1/pn7LtPZfiLRczM58yXgHqYQ4S10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.19.148.0/22
Signature Algorithm: sha256WithRSAEncryption
11:8b:08:c1:40:ca:2d:23:4e:4d:9a:18:6b:7f:13:84:75:d9:
67:b7:ff:3c:54:8f:fd:36:36:97:53:90:f3:ab:a2:ef:83:89:
0c:69:c3:88:48:b7:93:90:d7:f7:ff:62:21:35:74:56:00:4b:
a4:bd:f0:e5:09:3a:04:19:a5:09:95:bb:9f:61:04:5a:bb:2f:
45:8e:e3:b5:f8:8f:08:c7:e8:52:c0:a0:4c:57:bd:fc:c8:8a:
44:a5:6d:60:40:e0:d7:7d:cc:f0:bf:84:a8:32:a9:40:ff:c9:
ca:6a:00:f3:8e:2d:de:28:19:13:f2:51:a9:86:6e:a1:18:9d:
8d:01:64:5a:99:48:c3:4b:1a:d7:62:7f:61:f9:a0:84:7d:bc:
fc:c4:05:2b:cf:e7:26:3c:ff:ae:d6:11:88:88:5a:9d:81:c3:
12:d7:0d:89:76:29:a1:bb:38:d6:32:28:38:d4:58:18:4c:22:
7f:c2:f6:67:e8:ba:ba:90:59:b1:05:17:48:bc:db:1c:ff:c1:
d2:ec:e4:ce:fc:c2:5d:84:86:40:4a:17:e7:d2:c4:f3:25:22:
06:76:f1:3a:de:37:17:57:76:5e:93:66:a1:58:b6:e2:ef:ef:
35:e3:be:e2:3e:51:fa:85:81:60:d5:95:29:c8:46:a2:1d:28:
c6:69:b2:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:36:50 2025 by rpki-client