Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/23131b-c203-4f45-ad7b-0e94a889ffda/1/SZO83E3TAxcs2pZyFNZQgC1grSw.roa
File: SZO83E3TAxcs2pZyFNZQgC1grSw.roa (raw, json)
Hash identifier: nqYccNa5v/VopNYhiatz8pMQit4Yak7k0zRwUkpK8yg=
Subject key identifier: 49:93:BC:DC:4D:D3:03:17:2C:DA:96:72:14:D6:50:80:2D:60:AD:2C
Certificate issuer: /CN=9f1902889bdffef9a3b2acd5b273928e163fb1c2
Certificate serial: 0B8147
Authority key identifier: 9F:19:02:88:9B:DF:FE:F9:A3:B2:AC:D5:B2:73:92:8E:16:3F:B1:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nxkCiJvf_vmjsqzVsnOSjhY_scI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/23131b-c203-4f45-ad7b-0e94a889ffda/1/SZO83E3TAxcs2pZyFNZQgC1grSw.roa
Signing time: Mon 02 May 2022 20:10:54 +0000
ROA not before: Mon 02 May 2022 20:10:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44378
IP address blocks: 193.19.189.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 753991 (0xb8147)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f1902889bdffef9a3b2acd5b273928e163fb1c2
Validity
Not Before: May 2 20:10:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4993bcdc4dd303172cda967214d650802d60ad2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:b8:a4:2e:16:bf:73:b2:dd:01:38:6c:3e:a5:
1b:e4:47:13:da:fc:a3:6c:0d:a3:b8:cb:11:ab:ea:
c4:88:89:db:54:e3:69:27:2b:00:4a:a4:33:23:5f:
5d:1e:e7:e9:76:3e:65:56:da:d1:04:b2:b0:12:5d:
dc:28:0d:84:6c:a2:91:82:9b:ef:c6:8e:81:d3:34:
d7:66:9f:ae:ba:4a:08:84:f6:dc:4d:e7:22:8a:2f:
17:1b:a6:83:d3:fa:1d:7c:44:a6:51:d7:53:a8:35:
24:71:49:e6:a4:16:2d:46:be:d7:ce:c0:bc:ea:1a:
93:ca:71:2a:3e:81:fe:f8:61:a3:04:94:85:88:d0:
f0:54:c6:40:88:76:ff:c3:6a:dd:8b:63:cd:70:49:
ce:8d:46:35:1f:22:24:d2:ff:e7:c5:64:d6:29:25:
fd:46:e0:2f:2b:db:78:02:e5:af:fe:13:c5:1f:d7:
c5:7c:22:41:f6:51:33:02:51:84:65:74:05:40:c9:
40:a2:4e:33:d6:3b:b2:5a:16:dd:da:10:d5:a5:aa:
99:95:68:e0:a4:bd:18:14:ca:87:f2:89:c0:34:4b:
8c:ed:68:ea:68:92:08:5a:eb:41:e3:94:93:fc:b8:
7c:d4:ca:b9:ce:ac:30:f9:98:8e:03:2c:44:92:83:
47:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:93:BC:DC:4D:D3:03:17:2C:DA:96:72:14:D6:50:80:2D:60:AD:2C
X509v3 Authority Key Identifier:
keyid:9F:19:02:88:9B:DF:FE:F9:A3:B2:AC:D5:B2:73:92:8E:16:3F:B1:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nxkCiJvf_vmjsqzVsnOSjhY_scI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/23131b-c203-4f45-ad7b-0e94a889ffda/1/SZO83E3TAxcs2pZyFNZQgC1grSw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/23131b-c203-4f45-ad7b-0e94a889ffda/1/nxkCiJvf_vmjsqzVsnOSjhY_scI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.19.189.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:98:9d:af:53:b0:d1:f0:16:30:08:5b:9f:ae:c1:83:55:69:
ee:43:7a:35:18:9c:cf:31:63:fd:e2:bc:bc:e5:13:5a:64:30:
b1:c8:6c:b5:53:33:bb:ff:00:97:d5:b6:4f:f4:ac:39:d2:32:
fc:19:57:36:14:78:0a:70:93:fc:1c:f8:a5:c0:81:20:83:79:
fd:2d:79:1a:d0:4a:a4:08:94:07:69:f1:e7:00:c6:78:cd:aa:
4d:b8:0f:dc:3e:b3:d8:d3:ff:e0:25:60:29:32:07:ea:96:9a:
5a:bb:ad:a0:5e:d5:42:7d:1c:87:3f:37:56:ac:fc:7b:79:cc:
7f:d3:2d:02:36:2d:ee:d7:08:f3:06:67:5f:80:1d:fd:22:f4:
fd:d5:2c:17:f0:0a:0f:d7:dd:7c:51:64:de:1c:63:fe:0a:c4:
3c:e3:f3:0a:01:76:18:5b:b2:c4:25:d1:d2:7e:7f:91:62:c8:
a5:aa:30:39:0d:be:2b:a6:b2:e9:dc:57:73:de:81:94:20:fe:
ff:70:20:d4:17:c8:ff:76:55:ca:ef:94:bb:22:f0:4e:e2:1c:
73:0c:38:6b:5e:42:70:b4:61:db:ce:59:6b:41:a0:e9:c7:79:
f4:5c:d4:3a:8a:9f:ca:69:3a:49:a1:73:29:96:3f:45:88:d4:
23:d1:fa:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:45:48 2025 by rpki-client