Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/9a7a61-bbea-423f-8d57-4d80bb85ffe0/1/jWmVHxwK9MuN25pj81xss8dwYjA.roa
File: jWmVHxwK9MuN25pj81xss8dwYjA.roa (raw, json)
Hash identifier: X+b5BjUpg3LaMF36/lBEIes3Ds7SVhJ3cRp36HyV+Uk=
Subject key identifier: 8D:69:95:1F:1C:0A:F4:CB:8D:DB:9A:63:F3:5C:6C:B3:C7:70:62:30
Certificate issuer: /CN=4725e461a868fcb30f740b9d838c8b425f8a229f
Certificate serial: 018983F7919F76FD5D150A7AD1D6230F422F
Authority key identifier: 47:25:E4:61:A8:68:FC:B3:0F:74:0B:9D:83:8C:8B:42:5F:8A:22:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RyXkYaho_LMPdAudg4yLQl-KIp8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/9a7a61-bbea-423f-8d57-4d80bb85ffe0/1/jWmVHxwK9MuN25pj81xss8dwYjA.roa
Signing time: Sun 23 Jul 2023 18:16:27 +0000
ROA not before: Sun 23 Jul 2023 18:16:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49505
IP address blocks: 193.202.113.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:83:f7:91:9f:76:fd:5d:15:0a:7a:d1:d6:23:0f:42:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4725e461a868fcb30f740b9d838c8b425f8a229f
Validity
Not Before: Jul 23 18:16:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8d69951f1c0af4cb8ddb9a63f35c6cb3c7706230
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f4:3a:0c:f3:e9:53:a5:7e:99:ef:64:60:15:
ea:63:e1:64:82:c2:84:af:d6:59:dd:8e:0c:c6:b1:
04:14:62:a5:53:a0:a5:72:4d:3f:f9:b4:60:35:01:
5b:6d:bb:1d:94:5f:84:48:93:b9:1d:2b:f8:d8:ea:
ab:17:57:65:6d:89:68:b7:11:ad:59:d3:82:70:39:
68:d6:47:75:dc:02:e5:79:ce:54:66:b0:de:09:7c:
a5:09:96:f1:1e:0d:a7:da:92:cb:a0:18:90:41:04:
bf:c8:55:14:76:93:0e:14:6d:95:23:ea:d4:1a:df:
b6:df:00:ba:01:1f:e7:6b:b9:e4:02:90:a8:71:81:
68:79:99:8e:b0:70:10:46:dd:8c:f7:4f:8a:d1:48:
b9:8a:a5:5d:5b:18:e1:7a:f2:2e:fe:af:ef:9c:14:
05:4a:01:8b:7c:29:f8:4d:e9:7c:08:fe:ff:a0:34:
27:29:cc:19:25:d6:02:19:1e:ac:65:ab:7c:51:7d:
02:a0:6f:2f:25:a6:bf:8b:a4:8e:cf:42:e8:17:33:
02:1e:c2:2a:b5:57:0a:76:32:1f:d2:39:79:70:8e:
15:a3:03:4f:cd:31:45:28:e7:2b:b7:0e:55:25:60:
20:c6:85:0a:61:61:ab:b0:a8:4e:9a:65:16:23:d7:
40:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:69:95:1F:1C:0A:F4:CB:8D:DB:9A:63:F3:5C:6C:B3:C7:70:62:30
X509v3 Authority Key Identifier:
keyid:47:25:E4:61:A8:68:FC:B3:0F:74:0B:9D:83:8C:8B:42:5F:8A:22:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RyXkYaho_LMPdAudg4yLQl-KIp8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/9a7a61-bbea-423f-8d57-4d80bb85ffe0/1/jWmVHxwK9MuN25pj81xss8dwYjA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/9a7a61-bbea-423f-8d57-4d80bb85ffe0/1/RyXkYaho_LMPdAudg4yLQl-KIp8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.202.113.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:c9:f7:f4:60:16:93:3e:b3:74:e2:4c:58:40:85:27:42:cb:
bf:90:a0:90:bf:32:16:c3:36:c5:29:5f:00:e7:0b:a6:bf:a0:
81:85:86:01:0d:a3:da:42:56:e7:d7:f3:fc:9d:09:56:fa:a6:
c2:76:bc:4f:3a:65:91:3b:f2:3f:41:bb:c2:8d:cf:64:ba:04:
69:c0:7d:9c:d7:a2:f6:c7:bb:27:cf:69:bc:dc:f2:31:da:6f:
c7:49:f8:11:32:cd:e3:17:7e:19:3f:ee:8d:f2:d6:01:24:3f:
31:50:8a:62:db:69:01:1f:52:57:a5:e0:e7:a8:bb:ee:d2:e4:
d2:09:b9:3e:15:12:d5:d3:fd:4d:da:aa:b0:5a:9f:4c:52:cb:
44:cb:5d:f3:d1:d0:8d:b2:01:c2:39:4b:2c:f0:4f:d5:bf:ab:
6c:a6:df:31:a8:70:39:f0:51:98:00:1d:9f:fe:b1:25:0b:f9:
dc:31:a4:85:07:78:c5:b5:c8:df:36:7b:2a:df:2a:40:fc:7d:
2e:ad:f0:0c:2d:86:0a:72:36:7f:41:28:51:8b:91:55:4f:6c:
09:81:be:4c:dc:e3:a1:63:bb:2c:48:55:59:4b:19:cf:22:df:
b1:15:70:76:31:4b:03:93:ed:ff:af:c2:c9:00:ed:84:56:74:
2d:11:ad:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:15:02 2025 by rpki-client