Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/9b7377-d465-46b9-a563-8468e49f00ed/1/_uIcjPbTo2tZZuPbQQgAGU6uFaU.roa
File: _uIcjPbTo2tZZuPbQQgAGU6uFaU.roa (raw, json)
Hash identifier: mFbVT5EqFo/vqgifNq4fzGvwXcCU4t6Rafq12c4CSak=
Subject key identifier: FE:E2:1C:8C:F6:D3:A3:6B:59:66:E3:DB:41:08:00:19:4E:AE:15:A5
Certificate issuer: /CN=aa57a68f08a2e30ba7d73d44c9a6e2400fd0a3b1
Certificate serial: 019421446E2C9E72E3CD59D64B4EAB68AA31
Authority key identifier: AA:57:A6:8F:08:A2:E3:0B:A7:D7:3D:44:C9:A6:E2:40:0F:D0:A3:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qlemjwii4wun1z1EyabiQA_Qo7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/9b7377-d465-46b9-a563-8468e49f00ed/1/_uIcjPbTo2tZZuPbQQgAGU6uFaU.roa
Signing time: Wed 01 Jan 2025 09:48:40 +0000
ROA not before: Wed 01 Jan 2025 09:48:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15096
IP address blocks: 193.72.216.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:6e:2c:9e:72:e3:cd:59:d6:4b:4e:ab:68:aa:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa57a68f08a2e30ba7d73d44c9a6e2400fd0a3b1
Validity
Not Before: Jan 1 09:48:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fee21c8cf6d3a36b5966e3db410800194eae15a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:b6:1e:5e:36:08:be:c7:56:a1:ad:33:61:18:
07:88:d0:a6:e4:1d:24:f9:f9:b8:ab:82:9c:21:03:
bd:8b:53:8b:ad:c4:48:e3:18:4d:27:b0:05:8c:f6:
92:6b:42:e8:b9:b9:3a:2a:a8:69:c1:7e:1d:87:ad:
6e:53:70:dd:57:c9:ac:d9:07:2f:81:6b:8a:89:2a:
22:d0:08:11:21:fb:7c:95:cc:97:59:24:58:1b:15:
fd:0b:17:2c:5c:b0:53:6d:03:97:d7:31:27:e6:4b:
8f:37:04:48:00:97:e6:48:bd:f2:44:c3:a3:92:1a:
11:a3:f5:e1:d3:8e:7f:98:20:44:fe:2d:b0:93:50:
df:4d:a7:64:d6:b7:3d:38:a9:26:a0:73:d1:cf:10:
d2:b0:65:df:99:44:4a:df:67:c9:68:4c:ac:65:30:
04:9b:10:47:3f:ac:67:78:da:90:ac:27:a1:3f:e9:
94:81:75:0f:f2:78:6c:a2:6d:e8:3b:f1:2a:e6:38:
57:25:3b:88:fd:0d:08:6a:c3:b5:6f:62:10:ab:b3:
49:50:ee:25:92:10:b5:0d:13:7c:fc:7a:04:76:bb:
43:c9:f5:9e:44:d6:c2:eb:d7:1e:af:5f:7f:23:5d:
1b:1f:bc:ba:5d:33:d3:5a:05:fe:a9:a3:21:af:12:
f8:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:E2:1C:8C:F6:D3:A3:6B:59:66:E3:DB:41:08:00:19:4E:AE:15:A5
X509v3 Authority Key Identifier:
keyid:AA:57:A6:8F:08:A2:E3:0B:A7:D7:3D:44:C9:A6:E2:40:0F:D0:A3:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qlemjwii4wun1z1EyabiQA_Qo7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/9b7377-d465-46b9-a563-8468e49f00ed/1/_uIcjPbTo2tZZuPbQQgAGU6uFaU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/9b7377-d465-46b9-a563-8468e49f00ed/1/qlemjwii4wun1z1EyabiQA_Qo7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.72.216.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:84:07:06:59:23:60:62:23:a3:5c:6a:e9:9b:e3:be:73:5f:
3d:17:05:97:bc:dd:d0:79:b1:ef:7a:3e:86:ab:bc:e3:44:1e:
f0:52:6c:3c:3b:e1:9a:28:e6:50:22:63:43:6d:b5:8e:88:6e:
47:43:4b:b0:82:b2:b4:cc:44:f2:83:77:d6:c1:e4:73:ca:1c:
4e:11:6d:f6:e0:5d:dd:56:bf:73:43:c9:9f:4b:94:3c:e8:81:
6f:8b:f0:d4:d1:b0:1e:e5:59:3f:99:e6:b7:45:90:90:36:22:
b1:c9:22:0b:59:93:a4:a8:cf:63:21:4c:56:90:3f:08:41:57:
7e:46:c0:67:41:07:fb:3f:83:6f:75:24:8b:dc:c1:64:b3:6f:
f7:b0:99:9c:6b:c6:be:b1:2c:f3:50:05:d6:cb:c8:6c:e5:87:
c7:6e:c6:b8:f6:2d:3e:d9:9f:2b:d7:a4:7a:27:7b:d5:7d:cc:
db:bf:1c:d8:5b:fa:23:b9:69:c5:52:35:f4:aa:97:05:ec:be:
51:ab:26:5c:4c:b7:7a:5c:d2:5c:2a:61:fe:01:1e:1d:3c:0a:
84:1f:e2:46:94:86:b2:a1:c8:3a:34:cd:0f:91:49:20:ed:ce:
cb:1d:0c:38:c8:37:c2:96:44:06:0f:06:1e:a7:bb:7c:e2:bc:
ab:9d:31:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:41:37 2025 by rpki-client