Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/c46d1e-987d-4f65-b11b-2e2cd6435106/1/SIndVbkKUXy4BUQozeoniwpZDAY.roa
File: SIndVbkKUXy4BUQozeoniwpZDAY.roa (raw, json)
Hash identifier: w+S8wcJNHWfC84514ZDYZ2EFFwmdH9ulSWKDE7QHbmQ=
Subject key identifier: 48:89:DD:55:B9:0A:51:7C:B8:05:44:28:CD:EA:27:8B:0A:59:0C:06
Certificate issuer: /CN=ba97c15456eb600403ecfbb16c20e08160944f8f
Certificate serial: 0194258FAC9F9E8A1D9966D082ED46DFD705
Authority key identifier: BA:97:C1:54:56:EB:60:04:03:EC:FB:B1:6C:20:E0:81:60:94:4F:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/upfBVFbrYAQD7PuxbCDggWCUT48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/c46d1e-987d-4f65-b11b-2e2cd6435106/1/SIndVbkKUXy4BUQozeoniwpZDAY.roa
Signing time: Thu 02 Jan 2025 05:49:20 +0000
ROA not before: Thu 02 Jan 2025 05:49:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9171
IP address blocks: 193.47.142.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:ac:9f:9e:8a:1d:99:66:d0:82:ed:46:df:d7:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba97c15456eb600403ecfbb16c20e08160944f8f
Validity
Not Before: Jan 2 05:49:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4889dd55b90a517cb8054428cdea278b0a590c06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:44:f1:32:6e:f3:64:ad:94:04:3c:04:9f:e4:
b2:03:8d:ff:e0:a0:77:4f:00:9c:80:5d:6f:98:da:
4a:86:23:92:69:fb:39:fa:90:48:b1:50:59:cd:aa:
31:7a:3f:45:4a:1c:14:87:f6:3c:9b:bc:3c:b5:7b:
d2:1e:34:7b:73:6b:d5:88:59:30:fa:8b:0c:36:1a:
81:11:f6:56:45:d7:83:00:f8:80:a4:44:bf:e4:03:
20:a1:97:9d:31:6e:2f:bc:e6:23:c4:89:92:20:e7:
ff:8a:0a:33:9d:4b:f8:22:fd:98:c2:a4:db:25:56:
d9:38:2d:f4:45:ed:d1:c5:ea:7d:fe:67:c2:5f:32:
6b:89:9b:d3:d4:bb:aa:db:8f:da:4a:c3:2f:c5:e5:
77:28:a3:82:14:4e:a0:57:ea:18:ee:9e:2a:8b:60:
45:14:8f:8b:00:80:ee:bb:53:08:b3:81:59:7f:48:
8d:74:7b:1d:a0:ed:10:3a:3d:21:ba:2e:a9:e8:9f:
76:39:d1:f0:57:2a:a1:f4:37:79:16:10:b1:ec:d5:
e7:7c:67:ab:77:99:d2:e2:b4:1b:ba:a3:92:89:56:
49:ba:90:d2:dc:66:ec:e4:2c:46:e3:66:29:07:27:
84:bd:f9:1d:bd:8b:06:80:8c:32:ae:85:99:35:31:
28:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:89:DD:55:B9:0A:51:7C:B8:05:44:28:CD:EA:27:8B:0A:59:0C:06
X509v3 Authority Key Identifier:
keyid:BA:97:C1:54:56:EB:60:04:03:EC:FB:B1:6C:20:E0:81:60:94:4F:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/upfBVFbrYAQD7PuxbCDggWCUT48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/c46d1e-987d-4f65-b11b-2e2cd6435106/1/SIndVbkKUXy4BUQozeoniwpZDAY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/c46d1e-987d-4f65-b11b-2e2cd6435106/1/upfBVFbrYAQD7PuxbCDggWCUT48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.47.142.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:b6:71:bf:d5:47:61:0d:d9:44:85:18:a1:dd:ba:31:b4:1c:
07:e5:7e:21:0b:96:f5:28:e8:2b:8a:96:51:e3:3a:e9:e9:0b:
b8:b6:5e:a9:44:bd:18:58:fd:b6:e2:7b:c7:11:4a:f4:fc:e2:
b6:81:05:c3:92:3a:d6:52:92:b1:1a:1e:21:45:8d:fe:a0:8c:
fa:a3:15:1e:a5:5a:e9:93:af:93:37:0a:a3:c5:9c:b7:58:08:
3e:e5:93:82:8a:bb:d4:7d:ef:cb:60:f4:c1:8c:cc:49:ea:4e:
17:76:17:cb:71:23:09:8b:b4:d7:c0:46:bf:30:17:bf:d9:aa:
3e:80:f1:fc:b7:6f:79:ce:c8:43:eb:51:a8:ea:11:4a:04:ef:
a5:56:23:2e:e0:6d:bc:de:71:f9:9c:5f:fc:79:81:57:29:d3:
65:84:e2:7a:6a:98:fa:91:39:15:09:40:32:f0:cc:e3:b6:86:
89:8e:52:1b:6f:71:b1:b4:6b:a6:2f:44:d8:57:1e:0c:1e:90:
3b:13:f7:4e:2a:70:ad:1f:90:be:89:02:08:45:0d:d7:42:8f:
7f:a0:2b:54:f3:ad:d5:f5:67:b7:e9:3b:88:e0:bb:4f:9b:4e:
fd:80:1e:31:22:a4:9d:0f:04:00:46:e8:cd:c7:db:47:a3:22:
68:e8:38:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:54:53 2025 by rpki-client