Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/4SDU52fP16jva-Gx-NYiM6Pr0DA.roa
File: 4SDU52fP16jva-Gx-NYiM6Pr0DA.roa (raw, json)
Hash identifier: Ipctw75LkZH2wSmhM2EG2aSP1dT2XsYYj3jsG1PKuos=
Subject key identifier: E1:20:D4:E7:67:CF:D7:A8:EF:6B:E1:B1:F8:D6:22:33:A3:EB:D0:30
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 01936906BFDD0C0FADB82BFCB2D7431E9AD1
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/4SDU52fP16jva-Gx-NYiM6Pr0DA.roa
Signing time: Tue 26 Nov 2024 15:11:10 +0000
ROA not before: Tue 26 Nov 2024 15:11:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7018
IP address blocks: 193.233.108.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:69:06:bf:dd:0c:0f:ad:b8:2b:fc:b2:d7:43:1e:9a:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Nov 26 15:11:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e120d4e767cfd7a8ef6be1b1f8d62233a3ebd030
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:3e:c8:6b:6c:e2:db:c2:4c:c0:81:a0:81:4d:
5e:f0:de:81:25:e2:6e:49:2c:e4:b0:a6:28:dd:25:
73:e5:8d:35:f9:fe:01:6c:0a:d9:ed:ec:ae:10:77:
4f:74:c4:9f:b5:6c:9f:e9:79:7e:73:aa:2f:6a:d4:
e1:29:ca:12:2e:57:49:ae:6f:ae:7c:d8:61:e6:48:
86:42:f8:f4:04:ee:1b:1c:e8:37:dd:4b:c0:f9:ef:
34:ba:5b:b6:ee:b5:a0:81:6e:51:ba:9d:8b:fb:d4:
79:62:83:5f:e8:b6:85:98:19:02:c1:3f:6e:04:92:
f4:6e:85:ba:57:06:ed:00:7d:07:7c:cc:96:5b:17:
79:57:ed:1e:e9:90:36:56:78:c8:35:dd:83:de:ac:
2c:97:7f:f2:84:5a:a2:68:66:b0:e9:cc:f8:43:0f:
b3:7d:8c:1f:5e:6c:2d:22:59:29:31:ae:34:74:eb:
55:fd:52:68:47:1d:2c:a4:a0:fc:ae:d2:f5:cd:f8:
58:39:c3:8c:c7:93:77:6b:99:5e:db:99:ea:7c:bf:
38:5f:91:b0:00:0d:37:80:20:e4:a9:4d:4a:c6:39:
b2:f2:14:43:17:52:1d:c6:7b:1d:ae:49:37:92:58:
e0:73:de:77:d2:89:0a:d3:53:cb:3d:60:88:bb:d7:
53:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:20:D4:E7:67:CF:D7:A8:EF:6B:E1:B1:F8:D6:22:33:A3:EB:D0:30
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/4SDU52fP16jva-Gx-NYiM6Pr0DA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.233.108.0/22
Signature Algorithm: sha256WithRSAEncryption
7b:e2:e2:d4:1b:41:93:ac:b0:0d:66:ea:e3:6d:85:90:ac:9d:
29:4c:5c:09:c6:45:13:ba:71:1d:8f:a6:e4:18:32:79:73:58:
87:92:1b:6b:00:31:65:23:c7:e9:8d:d0:3e:8e:96:eb:cc:c9:
a8:0f:03:cb:d0:0f:cc:f5:5b:dc:39:5e:9d:0f:0d:ab:17:32:
69:bc:38:f5:5f:34:01:47:45:88:9e:8a:ea:6f:bb:33:bc:08:
d2:87:29:95:af:5e:74:d2:a8:07:25:e7:82:e6:45:81:e2:ab:
77:a5:af:d7:f6:35:de:37:26:93:fe:5b:f2:4d:13:f3:6f:f5:
8d:34:96:00:ca:f3:4c:ee:1f:17:67:af:5a:2f:d3:72:a0:9c:
f9:58:4c:29:3b:10:b6:cd:59:33:53:57:50:f2:02:16:7b:ae:
b4:bb:3f:11:e4:c9:d8:40:6f:61:0c:d6:88:67:60:2b:1d:10:
62:8f:90:c4:6b:8a:16:0f:f0:e1:83:03:41:f5:0b:1f:cb:44:
b8:f5:4e:a3:ae:c4:e5:0e:6d:bd:10:64:44:5e:55:06:6a:fb:
64:16:66:8b:fb:71:e6:11:28:13:8d:74:7d:5c:f1:c6:d6:c1:
b4:48:11:7b:cf:c5:1f:6f:d4:aa:42:c1:4a:07:b5:e3:48:9c:
c1:45:16:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 03:05:11 2025 by rpki-client