Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/23ed9a-1ca5-45ea-9b8c-73533de099c3/1/fIrJlfIRav0EW79oJA30vTrclak.roa
File: fIrJlfIRav0EW79oJA30vTrclak.roa (raw, json)
Hash identifier: 7Lp6At7uKPSTlTQ2DyVszx4onZ3bUhBeDq7b22YElPg=
Subject key identifier: 7C:8A:C9:95:F2:11:6A:FD:04:5B:BF:68:24:0D:F4:BD:3A:DC:95:A9
Certificate issuer: /CN=597a01de87e011803f890ae17749020f995f140c
Certificate serial: 01937306905F45AEA7C515640FF79EDDE5F4
Authority key identifier: 59:7A:01:DE:87:E0:11:80:3F:89:0A:E1:77:49:02:0F:99:5F:14:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WXoB3ofgEYA_iQrhd0kCD5lfFAw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/23ed9a-1ca5-45ea-9b8c-73533de099c3/1/fIrJlfIRav0EW79oJA30vTrclak.roa
Signing time: Thu 28 Nov 2024 13:47:10 +0000
ROA not before: Thu 28 Nov 2024 13:47:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 396982
IP address blocks: 164.18.48.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:73:06:90:5f:45:ae:a7:c5:15:64:0f:f7:9e:dd:e5:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=597a01de87e011803f890ae17749020f995f140c
Validity
Not Before: Nov 28 13:47:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7c8ac995f2116afd045bbf68240df4bd3adc95a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:de:23:70:25:73:49:7a:5c:4b:f6:82:86:3b:
cd:22:81:25:85:3a:b7:63:57:e1:84:00:ec:63:dc:
03:ba:17:08:7e:0b:3e:0e:5c:70:b1:6d:2b:86:24:
65:95:a2:16:52:00:56:b4:f0:44:6a:af:53:de:ae:
fd:8a:73:9a:b3:d8:65:af:28:00:76:81:b8:33:a2:
f6:3f:3f:35:6c:6d:b4:39:27:90:d9:4f:a4:b4:ea:
fb:85:da:ee:7e:8e:b2:33:54:c5:86:48:fc:da:bc:
c4:24:9b:d8:44:94:1b:b6:c0:81:66:8d:df:84:ac:
a0:b2:e0:fa:d1:7f:02:7f:c0:62:50:a7:0b:7d:38:
17:ae:bc:a7:19:fb:80:4c:7f:7e:ce:06:2b:ea:24:
e0:cf:85:4d:9f:a8:35:36:bf:3b:e3:d7:67:0a:f4:
c0:fb:f0:68:87:44:19:90:12:ff:63:d3:37:8e:e8:
80:18:a5:87:e6:c2:f3:fa:b1:65:65:40:14:ff:79:
e8:bd:85:33:8c:7e:f1:bc:2d:da:0b:0b:50:04:cc:
ea:9a:f2:0e:e3:34:8d:a0:16:37:a9:bc:60:ba:d5:
d1:34:6f:63:bc:61:17:df:d5:e9:dd:1d:21:71:9f:
5d:21:76:ca:76:a5:6c:c0:9f:83:8f:3d:2a:cd:c5:
58:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:8A:C9:95:F2:11:6A:FD:04:5B:BF:68:24:0D:F4:BD:3A:DC:95:A9
X509v3 Authority Key Identifier:
keyid:59:7A:01:DE:87:E0:11:80:3F:89:0A:E1:77:49:02:0F:99:5F:14:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WXoB3ofgEYA_iQrhd0kCD5lfFAw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/23ed9a-1ca5-45ea-9b8c-73533de099c3/1/fIrJlfIRav0EW79oJA30vTrclak.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/23ed9a-1ca5-45ea-9b8c-73533de099c3/1/WXoB3ofgEYA_iQrhd0kCD5lfFAw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
164.18.48.0/24
Signature Algorithm: sha256WithRSAEncryption
41:b5:07:54:da:3f:16:2b:ec:4d:c8:62:7c:28:8c:2e:9e:26:
79:18:af:ee:64:ce:72:a0:1c:67:a4:95:9a:52:43:1f:2e:ee:
ca:88:99:5f:1e:ac:8b:e2:b3:02:86:15:d7:cd:81:36:fa:a2:
c3:6d:1f:24:65:cb:5d:fe:9c:e4:df:bc:14:5c:1d:c0:70:61:
ce:1a:31:ca:4b:f2:36:ef:65:8e:69:84:8b:31:3d:90:d0:13:
0a:61:04:d1:13:27:2e:2c:03:78:d6:4d:39:c5:a4:74:a3:ff:
57:80:e7:44:e0:72:b7:2e:6e:b0:76:ac:54:f7:77:4a:d2:39:
31:67:41:7b:56:8a:5b:e8:85:b8:37:1d:24:aa:39:5e:a1:93:
ce:9f:8b:7a:2f:69:3c:8f:5c:ed:ce:be:25:d1:a6:13:c0:c8:
d6:b5:ca:5e:a9:c5:ee:06:a3:0b:2b:f7:d6:db:a4:04:f1:b5:
35:15:e7:6b:25:15:65:0e:25:f2:9d:8a:25:02:d0:7f:02:fc:
fc:18:c1:8e:7c:f4:d0:6b:15:1c:bb:41:3c:fe:08:f8:bd:1d:
cc:62:5a:6c:b8:ad:2c:96:45:b7:ae:c7:7b:2a:88:d9:55:82:
4d:e8:89:a8:2b:ee:3f:db:83:8f:d1:80:2b:61:4f:1c:e5:e8:
52:0e:da:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:16:27 2025 by rpki-client