Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/23131b-c203-4f45-ad7b-0e94a889ffda/1/uEESQi7l-_ehLH0pzThM66MkbWg.roa
File: uEESQi7l-_ehLH0pzThM66MkbWg.roa (raw, json)
Hash identifier: QQVqcf4NePFucjmP8fO6ADYuwRH6+iAo5sGbHZlYwC0=
Subject key identifier: B8:41:12:42:2E:E5:FB:F7:A1:2C:7D:29:CD:38:4C:EB:A3:24:6D:68
Certificate issuer: /CN=9f1902889bdffef9a3b2acd5b273928e163fb1c2
Certificate serial: 01856DE6634075F6AA3538E114A3B5C420F1
Authority key identifier: 9F:19:02:88:9B:DF:FE:F9:A3:B2:AC:D5:B2:73:92:8E:16:3F:B1:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nxkCiJvf_vmjsqzVsnOSjhY_scI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/23131b-c203-4f45-ad7b-0e94a889ffda/1/uEESQi7l-_ehLH0pzThM66MkbWg.roa
Signing time: Sun 01 Jan 2023 15:14:53 +0000
ROA not before: Sun 01 Jan 2023 15:14:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44378
IP address blocks: 193.19.189.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:e6:63:40:75:f6:aa:35:38:e1:14:a3:b5:c4:20:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f1902889bdffef9a3b2acd5b273928e163fb1c2
Validity
Not Before: Jan 1 15:14:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b84112422ee5fbf7a12c7d29cd384ceba3246d68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:5c:8a:d8:f5:6d:1d:1b:14:9c:23:ee:2c:5e:
41:6e:7a:3d:a4:b2:2f:c3:c7:dc:25:71:d1:da:c3:
bc:26:2d:78:35:ad:e5:49:65:36:91:71:13:67:0d:
60:86:bd:f6:2e:ad:db:12:8f:b4:3d:e8:af:86:3d:
2d:1d:05:3d:78:88:02:c4:d1:60:87:df:bf:1f:48:
f9:dd:66:0c:a7:b7:cd:87:8e:4f:67:6c:4d:ff:5c:
2d:b6:25:35:6b:ef:19:19:17:fb:27:e0:c6:0f:94:
ec:4c:1a:ca:dd:f9:c2:32:a6:7f:eb:4e:76:10:f4:
17:39:6e:6b:ff:e3:cd:62:2b:7d:35:88:91:0d:e2:
22:00:f1:e0:89:5b:db:16:b0:1b:92:1c:07:9a:e7:
41:cf:c3:2d:11:1a:98:74:66:1b:f8:5c:64:a8:ff:
b3:20:89:28:a1:cd:06:50:12:b1:bd:0f:b2:9a:05:
e7:59:1c:a0:c8:a9:fb:77:e0:5b:34:cb:cf:92:3a:
c6:4b:24:e1:32:8b:2e:7f:15:c6:78:f1:bd:63:4a:
44:a2:23:91:06:89:4d:96:b6:22:55:cf:57:88:e1:
85:cc:b8:be:e3:10:37:df:f3:71:5f:cc:26:ab:4f:
96:7c:2c:52:aa:df:8b:65:b6:6c:04:6e:cd:cd:fb:
23:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:41:12:42:2E:E5:FB:F7:A1:2C:7D:29:CD:38:4C:EB:A3:24:6D:68
X509v3 Authority Key Identifier:
keyid:9F:19:02:88:9B:DF:FE:F9:A3:B2:AC:D5:B2:73:92:8E:16:3F:B1:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nxkCiJvf_vmjsqzVsnOSjhY_scI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/23131b-c203-4f45-ad7b-0e94a889ffda/1/uEESQi7l-_ehLH0pzThM66MkbWg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/23131b-c203-4f45-ad7b-0e94a889ffda/1/nxkCiJvf_vmjsqzVsnOSjhY_scI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.19.189.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:a9:77:7e:ea:f7:f8:a3:3d:ef:2b:0e:bd:d8:b4:4c:bb:e4:
cc:6e:93:29:99:4c:38:b8:5c:7a:a1:db:2a:dd:3f:d4:cf:37:
12:84:55:c8:a4:74:19:89:34:5a:a7:c3:7b:25:15:ef:60:56:
92:15:b2:66:64:4d:25:7e:3b:35:b3:57:40:79:59:fe:86:5f:
2b:f6:3a:ff:87:5b:e6:05:e0:5a:c3:8f:86:b0:e4:0c:2a:5c:
5c:9b:ea:6e:27:5b:b0:0e:d0:ff:1a:15:e1:10:f8:bd:15:e5:
23:9c:58:46:c8:1b:b3:a4:84:cd:1a:3f:3a:12:86:26:cc:59:
65:79:56:6f:6a:85:cd:81:06:9c:4e:4b:a6:4b:67:f5:71:fb:
ac:8b:85:41:d9:3c:81:03:26:aa:e0:75:5e:7c:c2:0d:a6:89:
e0:4b:f1:5d:86:66:cf:5e:3e:f1:37:15:21:6a:92:1a:ab:5a:
51:98:87:9d:c5:03:53:fa:93:ba:48:ed:89:a7:45:40:b7:08:
aa:cb:ac:6c:12:44:91:d3:b2:6c:3b:0e:aa:dd:f1:1c:b1:72:
9c:6f:3e:a0:88:9e:53:d4:76:6d:fd:55:9d:da:aa:ec:ac:c2:
e6:7e:54:84:0a:84:26:8b:34:83:8c:f6:89:07:9b:a4:e1:35:
8b:56:e3:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:26:33 2025 by rpki-client