Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/RK2Gr25XPldzRCmLDtMxAnInYVQ.roa
File: RK2Gr25XPldzRCmLDtMxAnInYVQ.roa (raw, json)
Hash identifier: zY+DarQsoQobA27fr/zcKimsWrg6/jvHxMgr+n+vXx4=
Subject key identifier: 44:AD:86:AF:6E:57:3E:57:73:44:29:8B:0E:D3:31:02:72:27:61:54
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 01936906BF4CE8FD72FC3AC4DCA1FAAF447A
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/RK2Gr25XPldzRCmLDtMxAnInYVQ.roa
Signing time: Tue 26 Nov 2024 15:11:10 +0000
ROA not before: Tue 26 Nov 2024 15:11:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 1239
IP address blocks: 193.233.110.0/23 maxlen: 24
193.233.116.0/23 maxlen: 24
193.233.118.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:69:06:bf:4c:e8:fd:72:fc:3a:c4:dc:a1:fa:af:44:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Nov 26 15:11:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=44ad86af6e573e577344298b0ed3310272276154
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:45:a2:d7:06:7d:5c:01:dd:a9:fc:84:73:c2:
d6:6f:49:ae:e5:3d:88:72:a6:fd:a6:94:47:73:d5:
ea:ac:fb:6f:f5:c2:84:e5:2f:e1:20:0d:87:9b:de:
56:b1:77:2e:02:45:1c:f7:63:2f:c9:95:9b:9a:4d:
f5:ca:d6:f3:d4:ca:f3:b1:01:89:84:77:85:51:76:
57:cc:51:f6:c2:fc:3b:cc:47:77:79:a3:ef:77:e6:
29:6d:e1:7f:50:e5:08:ba:5f:9d:94:1b:ff:0b:6a:
1e:8e:ff:d2:2d:e0:7a:20:8c:b0:e1:be:b3:13:bb:
83:97:ba:24:2b:9d:a0:0e:20:76:3f:cd:fd:ec:c8:
57:5d:89:44:ff:73:f8:be:36:ed:c8:ab:67:21:9b:
17:81:2f:e8:c7:df:08:c2:e8:aa:27:a7:ee:5a:e1:
02:0a:37:50:8d:61:76:c9:62:94:bf:59:04:26:c6:
15:79:7d:b9:5c:c9:a1:9f:f2:88:78:67:95:71:4f:
6c:53:6e:e8:ac:13:ff:f6:61:57:4d:22:c9:e0:ae:
58:f9:bd:cb:aa:84:53:13:d0:45:ab:f8:25:b6:4a:
22:59:dc:55:9a:8f:74:c7:9a:a1:77:aa:b9:b9:c3:
ba:5c:9e:5e:60:24:cc:6a:a9:37:7a:08:7c:1e:e4:
8b:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:AD:86:AF:6E:57:3E:57:73:44:29:8B:0E:D3:31:02:72:27:61:54
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/RK2Gr25XPldzRCmLDtMxAnInYVQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.233.110.0/23
193.233.116.0/22
Signature Algorithm: sha256WithRSAEncryption
36:eb:8f:cd:3c:5c:f5:9c:e1:25:68:9a:71:7d:65:83:ba:24:
0a:a0:42:e8:c0:00:47:85:fe:56:6e:a8:00:c1:4b:cf:cd:09:
24:9b:9f:a2:6c:c3:44:ae:78:1b:7c:96:50:ad:ec:0d:96:69:
b0:ef:0a:75:2a:1c:c1:d4:9d:3f:cc:65:be:4a:f5:db:73:5a:
23:25:92:49:cf:ad:9c:3e:3a:01:95:76:ed:18:b6:c6:69:7b:
78:04:74:ce:7a:88:a7:d0:ee:23:33:f0:7d:34:33:aa:07:aa:
a0:8d:ab:47:d9:6e:f1:48:d5:18:8b:a3:35:7e:b0:f7:ad:31:
14:74:26:ff:1b:1d:09:e0:aa:f3:02:eb:49:08:7c:33:6c:39:
74:71:b2:4f:7a:80:5c:2b:c5:4a:a0:75:ef:be:10:f3:8c:6f:
81:70:67:25:f9:e9:f7:d0:9e:ff:fe:69:4b:39:86:be:a7:58:
72:6f:ae:20:e1:6a:88:40:22:52:82:5f:27:74:0f:20:2e:c1:
38:59:f0:d3:46:de:32:fd:38:23:f0:ad:27:12:1e:bf:28:06:
d7:fd:75:1e:fb:f3:d7:f7:f9:ad:17:45:1f:4e:f8:94:49:76:
72:e2:e9:cb:62:95:68:a2:d1:11:46:3a:79:c3:42:c5:e8:ab:
63:49:09:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 03:07:34 2025 by rpki-client