Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/923TY6ZsAOpY03THdr1zIOab6yU.roa
File: 923TY6ZsAOpY03THdr1zIOab6yU.roa (raw, json)
Hash identifier: Bmt5WhSUlgYvbH8tLaEDsG/Vw6D6lnnQAcnIIxiRA2w=
Subject key identifier: F7:6D:D3:63:A6:6C:00:EA:58:D3:74:C7:76:BD:73:20:E6:9B:EB:25
Certificate issuer: /CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1
Certificate serial: 0193F05D34359260D81D06A0548AE13F8533
Authority key identifier: F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/923TY6ZsAOpY03THdr1zIOab6yU.roa
Signing time: Sun 22 Dec 2024 21:54:20 +0000
ROA not before: Sun 22 Dec 2024 21:54:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213714
IP address blocks: 193.160.21.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:f0:5d:34:35:92:60:d8:1d:06:a0:54:8a:e1:3f:85:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1
Validity
Not Before: Dec 22 21:54:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f76dd363a66c00ea58d374c776bd7320e69beb25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e6:c6:13:3a:9e:e5:69:18:3d:43:f1:96:2d:
83:5e:fe:8c:03:7a:e8:2d:bd:6d:4f:15:05:0c:27:
7f:ac:ee:9d:37:6a:e4:b5:ec:d3:db:09:01:67:64:
bb:7e:62:32:96:49:6d:0a:b2:70:74:cd:d3:74:9e:
bb:99:ab:a8:08:77:a4:80:f0:a3:95:36:9a:f1:d9:
0c:50:37:ed:17:4a:49:39:0f:b5:83:91:31:c5:12:
e9:57:d5:03:12:e2:4b:7c:61:1a:22:ed:d5:2e:c5:
59:99:f2:86:64:2a:47:fc:31:c4:c5:71:b9:28:51:
5a:f6:c0:6f:50:7e:0b:ef:73:b7:7b:31:39:c1:62:
78:08:cf:69:12:8d:be:b5:c6:cf:6e:b9:84:d0:aa:
2c:07:cf:0e:5b:ca:3b:6b:81:56:ef:51:94:ec:ed:
cf:88:28:0f:c0:4b:ba:09:ee:b7:1e:cd:4a:75:4d:
a6:45:aa:89:39:f6:31:fd:69:c0:a4:d1:d8:e7:d4:
ba:64:07:f4:fc:42:24:dd:2b:74:4e:10:f2:98:ba:
d9:4c:3d:81:46:12:b9:00:ad:45:15:9d:19:ee:cf:
5e:73:17:3f:69:bf:ee:2d:0d:09:af:c5:1e:9d:b5:
b7:79:35:ef:5c:e8:34:0c:24:f5:9b:0c:be:56:29:
ed:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:6D:D3:63:A6:6C:00:EA:58:D3:74:C7:76:BD:73:20:E6:9B:EB:25
X509v3 Authority Key Identifier:
keyid:F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/923TY6ZsAOpY03THdr1zIOab6yU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.160.21.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:85:6a:86:2e:f2:07:d3:26:6b:00:61:41:ed:b8:d0:e7:ab:
52:42:c9:97:25:e3:59:7d:bc:67:1e:88:7a:9e:2e:12:c0:54:
2f:d0:02:4d:db:55:8f:a6:0d:81:f3:1e:4a:1b:89:78:78:5a:
70:c1:18:83:6a:56:bb:3e:f0:a3:23:49:e5:78:a5:95:88:ce:
2c:de:e5:3a:11:27:91:b2:d6:3c:bf:27:32:1d:6e:d1:a5:69:
9b:8d:92:c1:52:de:f7:6a:68:36:ac:a8:9b:ce:05:f5:eb:d9:
72:b7:e1:c0:7d:7f:b7:c6:cb:6b:7a:cd:f6:33:3b:57:8d:20:
a0:39:c6:ff:d1:c5:ca:75:01:91:db:d4:d7:b0:6c:02:d0:fc:
58:53:a7:2f:eb:ea:e4:c3:cf:0c:c8:88:0c:d1:ac:a1:ad:a6:
5f:df:41:b3:0c:6b:8f:3a:52:23:5c:7d:09:0b:60:f9:e3:b4:
56:1f:0c:24:2c:de:61:77:c1:49:a4:98:26:db:b3:96:a2:90:
5f:90:64:e2:b4:d2:df:86:6a:5a:8d:ae:20:7d:2b:1c:6f:71:
f4:79:c8:e7:51:0c:9f:24:f1:d9:17:23:88:d1:68:fb:82:84:
d4:0b:d6:75:c5:36:66:fc:fd:dc:86:d3:eb:34:db:75:43:f1:
a5:d7:4c:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:28:24 2025 by rpki-client