Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/wQlB8cY1Q7xkP7XgUIWsSiK-bzQ.roa
File: wQlB8cY1Q7xkP7XgUIWsSiK-bzQ.roa (raw, json)
Hash identifier: XO2Q13A8YoAJx9uxi+zbtzKwA7bJqvgAk4WL9hv4kaw=
Subject key identifier: C1:09:41:F1:C6:35:43:BC:64:3F:B5:E0:50:85:AC:4A:22:BE:6F:34
Certificate issuer: /CN=f651dc9875e35ec580c571fd0416f4d5f5d4158a
Certificate serial: 018570DE4D7FBDEAC6AF68F9562581CB71F0
Authority key identifier: F6:51:DC:98:75:E3:5E:C5:80:C5:71:FD:04:16:F4:D5:F5:D4:15:8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9lHcmHXjXsWAxXH9BBb01fXUFYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/wQlB8cY1Q7xkP7XgUIWsSiK-bzQ.roa
Signing time: Mon 02 Jan 2023 05:04:55 +0000
ROA not before: Mon 02 Jan 2023 05:04:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204968
IP address blocks: 193.30.101.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:de:4d:7f:bd:ea:c6:af:68:f9:56:25:81:cb:71:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f651dc9875e35ec580c571fd0416f4d5f5d4158a
Validity
Not Before: Jan 2 05:04:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c10941f1c63543bc643fb5e05085ac4a22be6f34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:dc:ed:c4:8f:68:70:ba:b7:a7:a9:a2:d1:14:
1b:c1:98:aa:3c:11:35:92:9c:ba:d7:b3:89:4e:05:
93:ee:20:60:2c:53:96:2f:50:b8:35:e2:79:f2:d4:
d1:4c:89:90:8b:c1:62:d0:6a:e1:49:95:8c:5c:4f:
f1:cc:85:13:fa:0f:b6:77:fa:cf:6b:94:3e:c8:16:
e7:52:9a:ff:e2:11:76:a8:ec:ad:b6:19:d4:8c:8a:
94:f7:64:54:ad:4a:86:6c:cd:0f:66:ed:38:15:9f:
90:d9:82:bc:5a:25:d5:f3:4b:5d:4a:ce:79:aa:42:
f7:f9:d7:b3:18:ca:53:65:4e:62:41:08:e3:45:d0:
c9:fc:12:03:51:a1:6d:62:48:c2:b2:38:21:d2:20:
5a:66:89:3d:9a:7b:8b:87:f2:bc:09:f7:03:6c:77:
1e:90:34:b6:dd:ce:bf:f9:52:76:24:0d:3b:fd:a2:
9d:e3:8a:82:80:03:56:70:4b:b4:04:12:79:8b:27:
f5:e3:2e:a4:60:d0:59:df:ea:e4:b0:0a:32:2f:66:
ff:01:be:1c:5d:2d:c7:c6:6a:65:a4:dc:8c:31:e1:
03:44:98:d8:ce:a3:58:1a:69:a0:32:00:af:27:e1:
58:9b:66:77:85:70:82:4b:bb:51:3a:f8:3d:d1:6e:
9d:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:09:41:F1:C6:35:43:BC:64:3F:B5:E0:50:85:AC:4A:22:BE:6F:34
X509v3 Authority Key Identifier:
keyid:F6:51:DC:98:75:E3:5E:C5:80:C5:71:FD:04:16:F4:D5:F5:D4:15:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9lHcmHXjXsWAxXH9BBb01fXUFYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/wQlB8cY1Q7xkP7XgUIWsSiK-bzQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.30.101.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:51:a5:e1:1d:d6:57:a8:3e:6b:bf:21:17:7c:c7:5e:b8:42:
12:51:84:6f:2b:9f:03:48:37:45:49:64:5a:d6:05:1f:d2:85:
d4:33:ff:a8:47:c4:2c:43:db:37:d2:45:41:7e:3b:91:0a:3f:
36:12:19:0f:7c:79:0f:e2:fe:c8:09:1f:65:97:d9:3a:75:19:
e5:3c:43:f8:92:80:69:17:87:2d:29:b1:e0:85:49:5f:69:75:
27:00:c5:1b:3a:ee:47:be:a3:31:10:46:fc:e3:78:bc:bd:0c:
8e:0f:28:81:0f:ad:2e:73:8f:36:92:31:c5:03:49:e4:b2:44:
c1:d8:9f:df:dd:3f:cd:0c:64:84:59:50:33:b1:49:d5:5d:47:
ad:c7:6b:12:dc:2f:2e:a0:2a:cf:c7:50:e4:c3:40:13:62:d7:
98:46:aa:cf:8b:f4:dc:19:e8:62:a7:76:c2:46:03:5b:f7:ad:
fe:47:43:54:a3:39:42:cc:70:f2:19:44:38:10:fe:ab:e2:de:
31:de:02:f8:9a:ea:f7:aa:00:79:0e:33:02:5f:12:67:95:bf:
b6:e3:2b:eb:2c:f4:f1:53:16:84:f2:06:5b:19:a7:32:c3:d8:
0d:b9:60:ac:2e:01:6d:c7:65:35:7e:2b:2d:98:c8:8a:81:fc:
d5:df:f8:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:25:44 2025 by rpki-client