Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/9a7a61-bbea-423f-8d57-4d80bb85ffe0/1/AN2Uqc6zBuPtkclXzUZU16TX-iU.roa
File: AN2Uqc6zBuPtkclXzUZU16TX-iU.roa (raw, json)
Hash identifier: RgCItiOeOOJDRGaWadrSWzkXPwOdHk0wx6X8JpQXON8=
Subject key identifier: 00:DD:94:A9:CE:B3:06:E3:ED:91:C9:57:CD:46:54:D7:A4:D7:FA:25
Certificate issuer: /CN=4725e461a868fcb30f740b9d838c8b425f8a229f
Certificate serial: 018CC86F5913C9B55805B499706A3BFBEEC1
Authority key identifier: 47:25:E4:61:A8:68:FC:B3:0F:74:0B:9D:83:8C:8B:42:5F:8A:22:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RyXkYaho_LMPdAudg4yLQl-KIp8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/9a7a61-bbea-423f-8d57-4d80bb85ffe0/1/AN2Uqc6zBuPtkclXzUZU16TX-iU.roa
Signing time: Tue 02 Jan 2024 04:29:49 +0000
ROA not before: Tue 02 Jan 2024 04:29:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49505
IP address blocks: 193.202.113.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:59:13:c9:b5:58:05:b4:99:70:6a:3b:fb:ee:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4725e461a868fcb30f740b9d838c8b425f8a229f
Validity
Not Before: Jan 2 04:29:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=00dd94a9ceb306e3ed91c957cd4654d7a4d7fa25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:0e:5b:66:73:bf:b6:6b:05:1d:b5:56:d6:86:
e9:75:8b:36:be:ce:31:b8:83:49:ba:ac:18:66:63:
b9:db:3f:a2:4f:2a:c4:4d:02:0e:20:6f:e3:fa:3d:
a3:7b:21:02:3c:ef:af:8e:9f:16:c6:6d:d7:1f:ad:
b6:be:2a:85:c8:97:53:63:80:45:4c:31:75:2a:8e:
b0:1c:39:1d:e5:c8:b7:38:af:55:1e:25:60:e4:07:
46:4f:63:82:e8:91:b9:b5:aa:22:31:e7:36:2a:28:
ec:c6:ee:f5:a3:62:11:b5:cc:a4:fe:da:3f:20:8c:
a6:f5:48:20:96:97:b9:e5:f9:cb:15:31:60:11:e6:
ac:f2:ab:8b:bd:6d:67:4d:87:1f:28:dd:49:35:0b:
1d:ca:e7:73:b6:17:b1:a4:8e:3e:fe:60:a7:0a:e6:
e5:0c:d1:67:e1:01:ae:2e:5f:8f:db:d1:65:13:7d:
1f:31:fe:e8:fd:42:0a:40:36:b0:16:f8:6b:21:59:
6b:c7:56:4b:bc:aa:bc:0f:d2:d9:b1:82:6f:1e:0f:
30:9a:b6:f4:f2:b8:14:9e:02:63:3e:63:7c:79:b2:
21:3a:7e:14:33:14:32:3e:c9:40:9a:0d:0c:eb:71:
82:a1:88:88:24:d8:ac:9f:b0:9a:61:a7:87:85:1d:
40:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:DD:94:A9:CE:B3:06:E3:ED:91:C9:57:CD:46:54:D7:A4:D7:FA:25
X509v3 Authority Key Identifier:
keyid:47:25:E4:61:A8:68:FC:B3:0F:74:0B:9D:83:8C:8B:42:5F:8A:22:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RyXkYaho_LMPdAudg4yLQl-KIp8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/9a7a61-bbea-423f-8d57-4d80bb85ffe0/1/AN2Uqc6zBuPtkclXzUZU16TX-iU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/9a7a61-bbea-423f-8d57-4d80bb85ffe0/1/RyXkYaho_LMPdAudg4yLQl-KIp8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.202.113.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:6f:41:79:96:ba:e6:b9:a6:80:7b:7c:fd:21:3b:64:1a:2a:
9d:ae:89:1a:72:d6:f7:c3:04:64:3d:d2:a9:1a:2e:7a:b4:5d:
d5:6f:73:cf:ac:3a:16:ff:51:8d:ed:06:c5:46:25:22:69:d5:
3e:23:e1:7c:ee:d1:69:d2:76:a7:5c:39:f8:e5:5e:16:88:2f:
87:8e:bd:d8:15:a6:7c:f3:1d:12:a3:65:a7:3e:43:28:69:01:
b7:b9:cb:cb:3e:44:94:0a:e0:1f:57:d5:21:18:21:d9:53:8b:
b0:83:b2:79:bc:92:b3:09:b8:09:d8:b2:0e:76:dd:f1:e5:ae:
de:f8:68:d3:ed:dd:a2:b9:f3:0d:7e:8b:62:d0:7f:90:10:f1:
d5:ef:53:06:54:42:6a:59:d3:e6:da:5f:cb:68:32:6d:14:3c:
a3:85:64:f1:8c:32:42:dd:93:82:f7:93:04:fd:ef:90:91:e6:
97:5e:05:df:3a:b7:f5:4e:51:ac:a0:73:e4:bc:58:0f:0d:11:
6b:eb:80:d0:9a:bc:8f:0d:ba:07:dd:9c:fd:62:b2:da:04:20:
91:5a:81:81:f0:eb:67:ba:37:d9:7f:42:a9:1e:6f:30:94:b3:
37:78:4f:85:7a:1e:0b:70:57:df:d6:e3:6c:04:51:2d:e6:e8:
b2:2c:91:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:28:23 2025 by rpki-client