Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/A3U_Ciw6TldKBLBjPaVjoQWnJZQ.roa
File: A3U_Ciw6TldKBLBjPaVjoQWnJZQ.roa (raw, json)
Hash identifier: NNn6iGp0+Icv1IkmWuM8dv+HdwPxzJ/+k0qqjIbDZTY=
Subject key identifier: 03:75:3F:0A:2C:3A:4E:57:4A:04:B0:63:3D:A5:63:A1:05:A7:25:94
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 0194206847BB99D8EA20D726DF51EAD156C5
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/A3U_Ciw6TldKBLBjPaVjoQWnJZQ.roa
Signing time: Wed 01 Jan 2025 05:48:12 +0000
ROA not before: Wed 01 Jan 2025 05:48:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56701
IP address blocks: 193.233.120.0/24 maxlen: 24
193.233.121.0/24 maxlen: 24
193.233.122.0/24 maxlen: 24
193.233.123.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:47:bb:99:d8:ea:20:d7:26:df:51:ea:d1:56:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Jan 1 05:48:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=03753f0a2c3a4e574a04b0633da563a105a72594
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:1b:26:a8:a2:59:05:be:25:25:ea:90:72:90:
1b:3b:29:cc:32:6b:dc:db:50:10:2e:18:6a:5a:23:
83:8b:08:4b:31:f9:67:55:14:5a:21:d8:5c:e9:b6:
30:bc:36:8d:e7:34:56:c4:74:53:02:c6:16:05:4d:
3e:3e:f1:99:36:02:ac:2b:3a:f6:a6:ed:91:c0:0e:
82:85:5f:c7:92:ac:22:78:73:69:a1:ca:21:09:47:
52:64:ef:1e:86:a0:a5:2a:0b:60:df:c9:ab:77:9a:
df:35:95:94:97:e8:91:ad:7b:de:bd:c5:2b:11:65:
5a:b8:61:71:cf:bd:c1:54:ef:8b:84:f7:ab:90:cf:
8e:40:0a:c1:3b:db:16:85:11:a7:63:5a:c4:86:4f:
fa:8e:45:97:a5:02:eb:a6:b9:5d:c9:c2:bf:d9:2a:
8c:f2:84:e5:34:db:5e:11:e7:8f:4b:2f:ba:30:46:
46:20:2b:0b:97:83:2e:55:8d:fa:59:47:2e:ae:b0:
c8:d3:14:a6:92:3d:2f:ea:03:e9:b8:7b:f8:1c:0c:
b0:08:77:53:da:c1:a2:fe:86:c6:04:b2:61:93:7e:
55:fd:4d:49:06:43:ef:59:66:be:bd:5e:67:53:cd:
32:f3:cb:39:57:2d:42:00:13:f7:1d:ba:c0:81:d3:
75:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:75:3F:0A:2C:3A:4E:57:4A:04:B0:63:3D:A5:63:A1:05:A7:25:94
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/A3U_Ciw6TldKBLBjPaVjoQWnJZQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.233.120.0/22
Signature Algorithm: sha256WithRSAEncryption
49:c1:11:eb:52:6e:b6:06:e9:96:02:d4:45:20:23:ba:6e:eb:
04:1b:cb:d9:61:1d:d2:56:e5:8d:7f:a1:00:b8:92:f2:85:96:
53:a6:14:a7:61:e4:a1:a8:18:cf:0d:c3:cc:ea:07:b8:05:0e:
58:c1:5a:b0:03:18:1f:11:5f:f4:21:0a:81:c3:96:dd:12:be:
7f:c7:c7:01:b6:5a:d9:bf:4d:dd:75:e5:88:c9:ad:e9:7d:09:
8a:c7:cf:b0:c5:24:92:0c:89:aa:05:56:55:5f:4b:4e:3a:5b:
34:1f:3f:e7:d0:18:25:ee:de:1e:30:1a:83:e4:50:e0:27:dc:
0e:d3:51:86:52:21:fa:a6:f9:eb:f5:70:db:b3:55:46:e8:36:
fd:08:ee:59:be:49:14:69:06:5f:d6:fb:8a:a3:51:62:98:d1:
66:c3:47:40:b8:ae:de:25:49:21:13:ee:6d:86:e6:2e:f5:5b:
06:90:b4:49:49:f4:0d:48:5a:be:16:cc:df:1d:ff:b8:2a:47:
72:16:0b:16:12:9c:a7:98:3d:77:39:63:ee:38:25:cd:e0:78:
d2:d8:30:26:9c:07:49:0e:49:3d:1c:76:e7:32:e3:62:99:cc:
ee:ff:0e:b3:a9:da:7a:0a:f4:24:25:d9:9a:6a:b8:0c:d5:0c:
e3:c8:d5:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 00:39:04 2025 by rpki-client