Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/KEcrHHJ8gg9bE-n5pKdppzfJbrk.roa
File: KEcrHHJ8gg9bE-n5pKdppzfJbrk.roa (raw, json)
Hash identifier: JyyFyV5uQFEHpEWyI3K3eYC1NkxG0JHu1b8WJgpS02E=
Subject key identifier: 28:47:2B:1C:72:7C:82:0F:5B:13:E9:F9:A4:A7:69:A7:37:C9:6E:B9
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 01942068413A36BCC6B82BD29B2E8FF5B568
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/KEcrHHJ8gg9bE-n5pKdppzfJbrk.roa
Signing time: Wed 01 Jan 2025 05:48:10 +0000
ROA not before: Wed 01 Jan 2025 05:48:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49418
IP address blocks: 193.233.86.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:41:3a:36:bc:c6:b8:2b:d2:9b:2e:8f:f5:b5:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Jan 1 05:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=28472b1c727c820f5b13e9f9a4a769a737c96eb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:99:8b:4a:27:18:c7:64:0d:71:99:fd:1c:93:
29:f7:bd:42:48:cd:f8:63:13:2f:18:8d:fb:35:23:
1f:1f:ae:1e:55:2b:4d:27:51:e1:7e:26:6e:a7:01:
f7:80:e3:fc:8b:bd:77:e8:a6:a3:e3:67:ac:a5:66:
3c:0f:cf:3d:86:fc:8b:b3:80:b0:32:be:f2:f0:94:
df:0e:ee:b7:72:68:ea:83:d0:8e:8f:4b:1c:98:2c:
be:d9:76:56:df:fc:fa:f2:c9:18:50:f5:0c:d4:d3:
cd:09:a7:1d:1f:2b:ec:47:4a:18:e5:e5:f7:63:15:
f4:66:0a:fc:2d:86:47:2a:1b:1b:13:98:6b:10:c6:
f6:73:a5:1a:b9:9f:4d:ce:66:34:f7:2f:4e:94:b8:
06:76:88:ae:49:8a:0f:9f:66:50:ba:94:ef:e0:bd:
f4:7c:fb:4e:0c:88:7c:e9:cd:22:ba:1b:bf:99:37:
fb:45:1c:66:84:74:84:ee:6f:ce:b5:46:11:f0:23:
00:f9:73:88:b7:6c:63:43:ca:9b:3c:5f:a8:77:04:
a6:7a:94:0c:2d:4d:8c:99:33:64:35:61:5a:5e:ca:
d8:4d:55:c5:5f:3b:3d:39:af:59:19:b5:e1:a5:fe:
d1:f6:88:27:32:b5:95:1f:65:03:70:ee:b5:d6:ad:
a2:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:47:2B:1C:72:7C:82:0F:5B:13:E9:F9:A4:A7:69:A7:37:C9:6E:B9
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/KEcrHHJ8gg9bE-n5pKdppzfJbrk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.233.86.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:1f:43:2c:2e:6f:b0:55:6a:74:3a:36:83:75:9f:3f:92:cb:
09:08:34:e4:f9:42:17:72:a4:6d:32:d8:13:4f:1b:ac:95:a1:
54:a5:3e:f9:5b:59:5f:8b:b1:e0:40:85:71:d9:27:3d:3a:b5:
62:ab:7d:70:c4:40:95:1b:d2:36:2c:97:4e:9a:76:ee:78:16:
b9:c5:b5:bc:8b:46:e4:ba:13:46:53:36:44:2b:83:e2:3f:f7:
9c:5a:4e:62:96:94:7c:73:82:46:81:22:81:70:ad:69:56:66:
fd:3c:04:7b:53:c4:45:f8:59:5a:78:09:40:c3:99:fc:4e:df:
fa:5d:50:b6:67:34:91:69:d7:2b:04:d0:43:14:41:3f:23:01:
05:2f:da:c3:8c:09:66:4f:03:00:fc:97:26:5e:cc:86:52:7f:
aa:dc:a0:a7:1c:e3:89:0d:e7:54:03:ec:14:50:41:73:13:e9:
12:59:38:e6:b2:d3:8b:45:b7:98:b5:d2:5e:9d:f3:d3:2d:c0:
7b:06:d1:54:1e:7e:3c:46:65:9b:ef:a9:3f:b5:25:37:72:ab:
b4:24:35:f6:d3:39:55:11:ac:d5:e2:60:4a:83:9c:8e:54:b7:
e9:a4:ef:07:27:19:ad:5c:08:20:05:0c:e1:fd:38:1f:98:03:
36:ee:1d:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 00:11:45 2025 by rpki-client