Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/cLC48jhfXIUpsgI02sg7hDiekXI.roa
File: cLC48jhfXIUpsgI02sg7hDiekXI.roa (raw, json)
Hash identifier: +FOfg/acMi8m5XgOVOFVKuSThXP6ZAcFHXAx8cZFfUw=
Subject key identifier: 70:B0:B8:F2:38:5F:5C:85:29:B2:02:34:DA:C8:3B:84:38:9E:91:72
Certificate issuer: /CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1
Certificate serial: 0193F05D33BF411CF1506950DC442F1CE1F0
Authority key identifier: F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/cLC48jhfXIUpsgI02sg7hDiekXI.roa
Signing time: Sun 22 Dec 2024 21:54:20 +0000
ROA not before: Sun 22 Dec 2024 21:54:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 193.160.8.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:f0:5d:33:bf:41:1c:f1:50:69:50:dc:44:2f:1c:e1:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1
Validity
Not Before: Dec 22 21:54:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=70b0b8f2385f5c8529b20234dac83b84389e9172
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:36:1f:35:20:8b:06:0a:87:d3:38:1f:76:28:
91:22:b0:a1:97:5c:5f:4f:72:5b:60:ef:a3:65:7b:
16:ac:33:f9:11:88:7f:2a:f5:bf:c2:ad:37:eb:91:
d8:5f:ee:4c:53:01:1a:92:5d:d9:c1:0c:ff:aa:2a:
ab:3d:28:5c:ca:bf:0c:f9:b4:0c:59:0c:db:4a:69:
5d:49:46:4d:8a:ac:c4:33:ed:4a:33:f5:c3:ae:5e:
60:e4:7a:f2:88:25:35:50:d8:76:ab:ea:cd:85:fb:
d3:04:91:aa:ee:ac:10:24:be:02:ef:2a:6e:d3:08:
ab:b9:a2:ae:df:79:b0:ba:47:00:64:de:1a:d6:55:
62:e4:92:60:a9:19:7d:92:4a:81:00:3b:49:be:06:
dc:be:42:5c:04:f2:ac:b4:9f:43:13:aa:c7:0f:07:
b7:02:2d:81:8e:b4:e9:ce:20:6b:26:78:9b:6f:35:
5d:0b:78:1f:a5:13:0f:97:c6:16:2b:6e:72:f2:3d:
47:4a:4a:27:29:7c:a4:23:99:fc:0c:64:10:81:f3:
cf:13:9c:3c:13:2a:4a:90:8b:0d:af:9d:18:91:45:
cb:b9:75:b7:db:92:22:6c:59:4a:29:05:7e:9b:fb:
52:d5:0e:9e:99:5e:41:67:ba:10:13:46:fa:cb:f1:
39:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:B0:B8:F2:38:5F:5C:85:29:B2:02:34:DA:C8:3B:84:38:9E:91:72
X509v3 Authority Key Identifier:
keyid:F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/cLC48jhfXIUpsgI02sg7hDiekXI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.160.8.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:9b:7d:d0:21:82:6b:b0:e4:59:b8:f9:0b:91:b3:7c:d7:36:
19:a9:12:f2:dd:03:9f:a5:d0:c9:ab:df:75:f8:71:bb:9c:d8:
f2:62:2a:89:3a:0e:4a:81:7e:c7:65:ce:6a:0e:07:58:98:4d:
65:82:d3:38:e3:93:f6:e7:23:8a:0e:1a:1e:b9:84:e7:68:e8:
cf:34:23:27:1b:ed:fa:33:6d:51:d4:36:a4:9c:7a:21:ae:39:
b2:35:33:ba:d1:58:ba:c0:b2:0e:48:48:e5:e3:7f:5b:30:d3:
77:6f:45:23:74:89:c3:7d:45:37:73:a5:67:5b:b4:0d:43:a9:
d3:56:ae:80:7d:1d:59:6b:62:c0:09:4f:83:34:4c:cd:98:49:
c6:90:bb:88:34:71:11:57:53:f7:aa:34:0e:8f:12:eb:33:26:
b4:c3:ed:09:37:d2:5d:18:16:7b:b3:6f:d0:77:75:13:97:42:
b2:9b:b7:8f:87:b9:39:43:dc:98:ae:68:96:6e:db:48:ee:3c:
13:99:3e:c3:42:e2:8e:bf:34:c0:72:7f:d3:38:62:50:38:d4:
25:8b:68:f4:b5:66:d3:a8:8f:f1:56:13:30:61:f6:ac:0c:48:
b9:e1:41:31:d2:77:dc:c1:ca:64:06:16:bf:4d:d3:86:67:80:
6a:63:1c:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:04:34 2025 by rpki-client