Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/4e3aa7-4602-48ca-98a5-a21c071b3c32/1/klRjYJ4HwcNMSIIh5lNDMCNGLL0.roa
File: klRjYJ4HwcNMSIIh5lNDMCNGLL0.roa (raw, json)
Hash identifier: y5X5y4OxhTZVAvChh3M4j6cJ5ZP6Eu8wLxuXlrLmpQ4=
Subject key identifier: 92:54:63:60:9E:07:C1:C3:4C:48:82:21:E6:53:43:30:23:46:2C:BD
Certificate issuer: /CN=6846330d9a4f9649a9eab8bb8252f81e0f53d893
Certificate serial: 0BA3C542
Authority key identifier: 68:46:33:0D:9A:4F:96:49:A9:EA:B8:BB:82:52:F8:1E:0F:53:D8:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aEYzDZpPlkmp6ri7glL4Hg9T2JM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/4e3aa7-4602-48ca-98a5-a21c071b3c32/1/klRjYJ4HwcNMSIIh5lNDMCNGLL0.roa
Signing time: Sat 01 Jan 2022 00:57:00 +0000
ROA not before: Sat 01 Jan 2022 00:57:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8481
IP address blocks: 193.31.7.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 195282242 (0xba3c542)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6846330d9a4f9649a9eab8bb8252f81e0f53d893
Validity
Not Before: Jan 1 00:57:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=925463609e07c1c34c488221e653433023462cbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:23:ff:44:25:54:d6:5b:e6:b2:0b:e8:38:ca:
1e:bb:b1:cc:82:97:90:b3:a2:99:ae:74:4c:f6:39:
89:c1:84:e2:79:47:89:db:33:f4:ce:e8:5f:67:79:
5f:c9:eb:ae:5b:95:75:ba:cd:95:2e:ab:ef:05:76:
2c:f4:de:39:e6:21:1c:73:db:b4:18:3c:2d:61:f8:
89:b5:cb:24:33:4f:62:b4:ea:9e:36:fa:49:1f:43:
fb:c3:e7:0a:c5:26:1f:57:29:af:35:7b:79:2d:97:
c0:88:6e:22:28:51:0c:09:5e:01:9d:c8:f5:0f:31:
10:5d:6a:7c:46:19:f7:df:71:d3:0d:6a:cb:8c:90:
a4:bd:a8:73:fa:94:b3:5b:21:d7:cf:03:27:39:c4:
04:3d:a5:99:dc:27:0d:0c:e5:78:45:11:5e:39:16:
66:60:d3:51:1d:c4:22:ac:59:9a:ec:dc:fb:3d:55:
fc:36:a3:12:3e:06:1b:98:fb:61:63:e7:45:76:a0:
18:ce:e8:6e:92:50:a7:f4:f2:d1:77:bd:97:6b:d4:
34:0c:85:e8:6e:c0:a8:96:39:99:79:22:b0:22:1c:
e4:af:4b:cf:4d:80:8e:0b:d7:2f:c8:61:24:c7:e9:
4d:18:83:c3:49:eb:05:73:cb:bc:47:3a:6c:47:18:
f7:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:54:63:60:9E:07:C1:C3:4C:48:82:21:E6:53:43:30:23:46:2C:BD
X509v3 Authority Key Identifier:
keyid:68:46:33:0D:9A:4F:96:49:A9:EA:B8:BB:82:52:F8:1E:0F:53:D8:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aEYzDZpPlkmp6ri7glL4Hg9T2JM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/4e3aa7-4602-48ca-98a5-a21c071b3c32/1/klRjYJ4HwcNMSIIh5lNDMCNGLL0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/4e3aa7-4602-48ca-98a5-a21c071b3c32/1/aEYzDZpPlkmp6ri7glL4Hg9T2JM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.31.7.0/24
Signature Algorithm: sha256WithRSAEncryption
69:ff:fc:68:30:9c:6c:e5:4b:2b:7e:dd:83:c3:09:1e:95:0e:
f1:0c:48:9e:ce:a0:e8:31:e4:2d:40:19:fd:0c:7d:f9:65:5c:
08:aa:29:c8:c7:5a:95:78:b3:a4:c1:79:b5:5f:58:45:c8:8b:
43:e8:cb:a7:ce:50:79:05:da:f5:87:49:88:85:71:52:ef:66:
5e:1e:b8:f1:80:55:9c:f2:97:9c:13:cf:d9:b4:81:7d:70:7a:
6b:40:c7:6e:f3:98:2a:8f:2f:7c:15:b6:a0:3e:f6:10:a0:a4:
0a:40:17:46:0b:eb:9a:db:96:e4:b3:6b:2e:34:b1:50:85:ed:
59:47:17:5f:54:34:34:9b:1d:31:d5:7e:0f:93:1f:f0:45:10:
22:9e:3e:f0:45:13:8e:8f:8b:9d:03:36:c0:30:cc:ac:78:ad:
1f:b8:44:3c:45:35:c4:b3:26:38:b7:43:0b:39:77:5c:1c:9e:
4f:9a:62:15:5f:52:26:bc:84:34:52:a9:7c:c6:94:e9:85:17:
df:8a:9a:c4:67:2c:7a:e4:12:ff:81:65:d1:23:b0:3d:c7:e2:
e1:e4:0c:f8:c7:27:7c:8f:f9:be:61:d2:f3:bd:5e:d4:cf:06:
ad:90:f6:78:83:87:98:2d:03:f3:4b:6e:3a:18:39:c5:29:9e:
bb:b7:69:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:05:35 2025 by rpki-client