Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/9a6655-1d2c-45cb-ada1-f46b46d53800/1/F_iiYpuJZsPXyVk42h-DOsF_bWI.roa
File: F_iiYpuJZsPXyVk42h-DOsF_bWI.roa (raw, json)
Hash identifier: dpN0U4f3O8Pd8GkBmRoC06G+AozmpMzmGpJELa79vM4=
Subject key identifier: 17:F8:A2:62:9B:89:66:C3:D7:C9:59:38:DA:1F:83:3A:C1:7F:6D:62
Certificate issuer: /CN=0765f6f5f7936db8351a0a393cf069a518e57445
Certificate serial: 0194228E3A9B0793D127AB4938F0300BD8A8
Authority key identifier: 07:65:F6:F5:F7:93:6D:B8:35:1A:0A:39:3C:F0:69:A5:18:E5:74:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B2X29feTbbg1Ggo5PPBppRjldEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/9a6655-1d2c-45cb-ada1-f46b46d53800/1/F_iiYpuJZsPXyVk42h-DOsF_bWI.roa
Signing time: Wed 01 Jan 2025 15:48:53 +0000
ROA not before: Wed 01 Jan 2025 15:48:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39700
IP address blocks: 193.33.180.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:3a:9b:07:93:d1:27:ab:49:38:f0:30:0b:d8:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0765f6f5f7936db8351a0a393cf069a518e57445
Validity
Not Before: Jan 1 15:48:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=17f8a2629b8966c3d7c95938da1f833ac17f6d62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:9e:20:62:09:cc:50:42:6e:35:d4:7f:43:43:
59:fd:df:b5:e8:fa:76:17:46:a1:7f:69:3f:8e:c0:
f1:2c:ba:7b:9b:bc:02:a3:f2:08:28:9e:8c:82:c9:
a0:a7:52:1f:90:98:13:78:09:e0:ac:4d:7e:3f:8e:
93:fb:13:e2:ba:35:18:0f:12:2c:66:f9:57:91:72:
52:13:b0:c2:a2:4d:b0:cc:3a:fb:ee:8c:79:f3:9f:
d8:5a:b0:e7:ef:d9:b4:12:9e:a9:88:93:8d:1c:2e:
a1:9f:ce:af:3d:4b:a6:51:48:99:35:2a:1a:ae:9a:
34:bd:28:76:e2:e8:5c:65:e6:9a:ca:a2:65:1b:c8:
07:bf:f7:85:42:28:38:db:b9:34:0b:18:af:e9:33:
48:48:85:13:b2:5c:cc:35:70:6c:2b:de:06:90:39:
57:f4:86:f1:0c:e6:75:71:36:95:83:b8:5e:4d:8a:
81:0a:5c:24:47:05:68:f9:4f:7f:58:ef:d5:c0:6b:
cb:85:b0:cc:90:ac:cf:1a:80:b3:fb:7e:e6:cb:bd:
c3:0a:ee:d5:09:23:77:00:1b:a4:8c:1e:5d:2b:49:
27:04:a0:33:05:de:de:8d:8a:2d:16:88:77:3d:e1:
16:03:a0:69:d8:64:95:c1:56:72:8f:98:12:07:4f:
ff:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:F8:A2:62:9B:89:66:C3:D7:C9:59:38:DA:1F:83:3A:C1:7F:6D:62
X509v3 Authority Key Identifier:
keyid:07:65:F6:F5:F7:93:6D:B8:35:1A:0A:39:3C:F0:69:A5:18:E5:74:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B2X29feTbbg1Ggo5PPBppRjldEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/9a6655-1d2c-45cb-ada1-f46b46d53800/1/F_iiYpuJZsPXyVk42h-DOsF_bWI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/9a6655-1d2c-45cb-ada1-f46b46d53800/1/B2X29feTbbg1Ggo5PPBppRjldEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.33.180.0/23
Signature Algorithm: sha256WithRSAEncryption
21:39:fd:45:39:ff:4d:9f:bd:41:06:d5:a7:a8:11:09:39:e7:
07:fd:74:c0:72:e0:a0:56:bd:9d:64:44:af:65:d7:6a:e8:33:
2d:e0:9c:d8:a1:ba:06:72:a2:1e:2f:97:92:62:1a:77:8d:f0:
df:31:29:93:a5:7d:09:ed:48:52:48:f8:ab:35:96:e4:15:76:
f2:3a:08:96:e3:6d:5e:71:1b:e2:e6:5f:e5:a2:40:43:0a:45:
95:16:b7:40:ef:76:56:31:85:34:9f:df:fd:a6:22:26:32:bf:
6b:1f:d0:55:1c:38:38:35:0e:e5:aa:d5:5e:44:cb:a0:48:7b:
f4:3b:e9:e4:e7:3d:6a:cd:2e:e8:81:38:96:e8:1d:94:1e:e3:
3d:66:7e:b8:3c:0c:f3:1d:ff:2d:97:49:bd:90:cd:eb:be:cb:
7b:2e:84:6f:02:6c:5e:9a:e5:be:e4:c6:e9:97:91:e2:02:81:
13:9b:3a:4f:c1:36:72:be:31:b0:4d:68:53:e0:84:a0:3f:20:
70:28:e5:fc:3f:3e:3b:9b:9f:fe:ad:4c:86:26:05:f0:45:38:
9e:d5:47:9c:7b:55:eb:91:c1:34:13:c2:ac:e5:80:bf:7d:3e:
09:fa:07:12:b1:e4:79:ac:33:c7:06:a8:50:da:a4:f8:7c:3f:
67:4a:f1:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:52:10 2025 by rpki-client