Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/e3826d-5ada-4e43-9084-1ba695faef25/1/_X3QJBDIf66qVGFoZlUUopCCy_U.roa
File: _X3QJBDIf66qVGFoZlUUopCCy_U.roa (raw, json)
Hash identifier: idCZLEU489ZGPMhbTfcsTr+V8n3vzurLtL/iWzQSxDg=
Subject key identifier: FD:7D:D0:24:10:C8:7F:AE:AA:54:61:68:66:55:14:A2:90:82:CB:F5
Certificate issuer: /CN=b39ecd24f321988deb7c19dca052a4e3c49b60ea
Certificate serial: 018977C688D3AB2D27CE06263FF3E6ADF8C9
Authority key identifier: B3:9E:CD:24:F3:21:98:8D:EB:7C:19:DC:A0:52:A4:E3:C4:9B:60:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s57NJPMhmI3rfBncoFKk48SbYOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/e3826d-5ada-4e43-9084-1ba695faef25/1/_X3QJBDIf66qVGFoZlUUopCCy_U.roa
Signing time: Fri 21 Jul 2023 09:27:27 +0000
ROA not before: Fri 21 Jul 2023 09:27:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48435
IP address blocks: 195.42.112.0/23 maxlen: 23
193.169.78.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:77:c6:88:d3:ab:2d:27:ce:06:26:3f:f3:e6:ad:f8:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b39ecd24f321988deb7c19dca052a4e3c49b60ea
Validity
Not Before: Jul 21 09:27:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fd7dd02410c87faeaa546168665514a29082cbf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:5d:54:d5:b3:f2:b3:d8:c8:97:f5:a1:65:ed:
df:dd:ad:05:18:a9:af:93:22:22:1e:6b:ee:da:44:
99:3a:a4:48:9e:3a:51:c3:e1:99:10:e4:82:67:a6:
d0:80:60:7d:31:e3:e5:5f:21:3a:78:7d:14:b2:04:
3d:cb:f4:bf:9d:3b:26:b1:f1:59:d3:a4:c4:ad:94:
75:46:76:68:9c:52:02:4c:ae:fc:53:cf:04:a0:3a:
22:1c:c5:85:66:65:84:5e:ca:1c:00:0a:3c:45:2d:
0c:99:c2:77:ca:4f:e9:3f:3d:00:e6:bc:43:e9:7d:
46:96:02:81:9e:62:90:28:4c:8b:c5:5d:8c:99:85:
3d:26:3e:46:51:1b:f0:ee:e9:03:33:14:cf:a6:18:
89:17:42:52:02:23:fe:19:3d:4c:d0:7a:fe:70:0d:
a3:7e:a9:4d:69:35:9f:3c:53:fe:14:11:96:f6:7a:
93:2a:0c:8c:e4:c3:48:97:a1:6c:57:7e:c7:51:c0:
60:8c:2f:a1:77:3e:1f:1a:e7:d1:0b:2f:64:5c:f1:
a3:07:34:e9:22:be:55:59:01:d4:d5:2f:8c:f5:3b:
2f:65:a1:ea:b1:ea:17:da:82:ab:7f:8d:f4:cb:a8:
ee:2e:c7:1b:13:5e:9e:b5:bf:f2:9b:97:73:c2:40:
f3:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:7D:D0:24:10:C8:7F:AE:AA:54:61:68:66:55:14:A2:90:82:CB:F5
X509v3 Authority Key Identifier:
keyid:B3:9E:CD:24:F3:21:98:8D:EB:7C:19:DC:A0:52:A4:E3:C4:9B:60:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s57NJPMhmI3rfBncoFKk48SbYOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e3826d-5ada-4e43-9084-1ba695faef25/1/_X3QJBDIf66qVGFoZlUUopCCy_U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e3826d-5ada-4e43-9084-1ba695faef25/1/s57NJPMhmI3rfBncoFKk48SbYOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.169.78.0/23
195.42.112.0/23
Signature Algorithm: sha256WithRSAEncryption
77:05:07:3e:a1:b8:70:7d:6f:55:33:95:5d:0c:ed:33:33:bb:
06:8b:68:c1:93:b9:f4:a1:db:82:3c:11:43:0b:23:b2:cd:1b:
ed:31:07:fd:f2:b5:ab:c7:bd:9b:96:3e:0d:fc:d9:a7:e2:4f:
86:a3:ba:9e:71:36:2f:5e:03:14:01:e2:37:f2:49:41:89:9f:
d5:1b:41:69:a1:9f:1d:24:12:c8:95:06:c4:76:26:f5:20:4e:
26:f2:07:bc:d6:77:1f:07:66:58:b6:a5:92:a5:11:44:fa:2e:
12:3e:5a:f8:b4:b4:39:0f:e2:e2:dc:0c:31:44:1c:57:42:27:
eb:d8:fa:82:90:8e:2e:6b:8b:12:8a:b2:8b:45:9a:eb:55:fe:
e3:5b:99:18:d5:4a:f1:bd:c1:e1:80:92:d0:18:80:38:30:82:
bb:01:54:8a:51:92:fc:20:84:9e:a4:00:0f:10:ae:57:c4:bb:
26:d0:8b:97:c0:2f:32:6b:07:89:eb:e7:8c:ee:4c:c3:26:85:
4b:12:29:4a:55:67:1e:94:9f:d5:8a:48:f0:50:3c:6a:07:f4:
bf:9c:6b:08:64:00:41:76:91:de:34:6e:eb:08:b6:58:31:b0:
2b:64:54:58:16:a8:bc:2c:c8:d7:f7:d4:a2:29:ae:e5:c8:cc:
a3:2e:6d:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:15:43 2025 by rpki-client