Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/016246-376c-4725-80ae-75bd946a7355/1/ttl4gF5H4xVOsldpEtY--5SUL-g.roa
File: ttl4gF5H4xVOsldpEtY--5SUL-g.roa (raw, json)
Hash identifier: SbdB5263yFvJJDlQfuHRPnaHcrA2J/RblHkI32JVk8A=
Subject key identifier: B6:D9:78:80:5E:47:E3:15:4E:B2:57:69:12:D6:3E:FB:94:94:2F:E8
Certificate issuer: /CN=460d3149fc50ca9797f50fde9e02a083134c5019
Certificate serial: 019424B37EEFEAB26FD88A735363B2B8E1F0
Authority key identifier: 46:0D:31:49:FC:50:CA:97:97:F5:0F:DE:9E:02:A0:83:13:4C:50:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rg0xSfxQypeX9Q_engKggxNMUBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/016246-376c-4725-80ae-75bd946a7355/1/ttl4gF5H4xVOsldpEtY--5SUL-g.roa
Signing time: Thu 02 Jan 2025 01:48:50 +0000
ROA not before: Thu 02 Jan 2025 01:48:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206858
IP address blocks: 193.228.143.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:7e:ef:ea:b2:6f:d8:8a:73:53:63:b2:b8:e1:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=460d3149fc50ca9797f50fde9e02a083134c5019
Validity
Not Before: Jan 2 01:48:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b6d978805e47e3154eb2576912d63efb94942fe8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:3e:f7:75:c8:1e:4a:6e:71:91:a2:a5:da:8c:
a1:bc:d0:1b:23:90:05:b8:31:0e:7c:95:5b:da:83:
c9:39:6d:e4:a9:cf:12:05:7a:d5:37:dc:47:63:d5:
9f:71:4b:e2:60:a3:83:bb:77:72:c6:2b:55:52:67:
48:bc:76:b4:80:26:89:17:17:b0:2d:e7:4a:fd:2a:
71:84:bd:6a:0c:3d:31:a1:83:9a:8f:f6:a2:cb:5a:
14:0d:68:0f:c8:1a:cd:d8:65:5b:ce:d9:fd:51:f7:
4d:46:e0:08:7e:43:90:37:d1:8a:78:40:e0:12:ea:
e0:b4:08:31:67:c4:8e:a2:df:d9:6d:8c:a0:38:b6:
1c:2c:dc:15:8d:0b:35:a8:40:99:ac:58:35:09:6b:
b9:9b:2c:98:2f:15:8b:94:c7:78:9b:03:ef:4e:d8:
7b:2b:1a:cb:a2:4f:37:60:46:60:d9:64:bf:9f:6a:
3b:ad:dc:6b:1a:4b:59:7c:1e:24:7d:5b:e7:c8:24:
0d:9a:4e:69:bf:78:ef:46:13:af:b7:90:86:24:f1:
38:dd:05:d1:34:2a:2b:60:89:bb:87:e6:f8:95:a9:
4c:c4:fd:60:9d:28:bb:4b:65:25:92:75:20:4d:f7:
81:18:b7:ff:43:d5:f6:2e:11:7b:3b:c3:01:98:78:
7b:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:D9:78:80:5E:47:E3:15:4E:B2:57:69:12:D6:3E:FB:94:94:2F:E8
X509v3 Authority Key Identifier:
keyid:46:0D:31:49:FC:50:CA:97:97:F5:0F:DE:9E:02:A0:83:13:4C:50:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rg0xSfxQypeX9Q_engKggxNMUBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/016246-376c-4725-80ae-75bd946a7355/1/ttl4gF5H4xVOsldpEtY--5SUL-g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/016246-376c-4725-80ae-75bd946a7355/1/Rg0xSfxQypeX9Q_engKggxNMUBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.228.143.0/24
Signature Algorithm: sha256WithRSAEncryption
60:2a:8f:2a:40:99:a7:00:ab:3b:15:6d:ac:b6:45:c8:18:65:
8f:56:f2:c6:f9:4c:ed:06:8e:31:41:5a:9f:24:6b:e0:c3:ee:
08:f3:d3:16:7f:c1:59:9e:1f:af:11:1b:d6:ce:53:0b:19:0b:
1d:db:30:a2:6c:67:4e:06:a5:3d:3e:15:8b:10:b4:5f:bc:26:
e8:c3:98:0a:11:a4:ee:f3:04:24:28:d4:09:1c:ec:85:28:48:
d9:26:3e:73:0f:8c:a0:d6:88:0f:7b:8b:26:c5:c2:44:3f:a8:
1a:80:34:9e:34:ee:b0:36:b4:ab:a1:fd:3e:39:c8:ab:77:40:
3c:d5:13:5b:c1:a8:70:fc:01:12:0c:72:f0:8b:20:7c:62:25:
94:6d:5c:94:fd:83:60:b6:a9:22:85:15:83:c7:64:49:bf:a2:
ea:89:cd:0b:0b:65:9f:da:ea:a1:c7:0c:43:fa:b2:59:a1:5d:
57:01:c8:57:8f:a9:d2:82:13:04:77:bd:90:f3:82:7a:fd:d2:
ef:94:ef:c5:9a:52:e3:5f:bb:44:43:6b:e2:75:83:e7:d8:e8:
06:2b:20:ec:01:98:21:ed:16:31:ae:97:c8:ad:c7:53:14:4c:
f5:0e:12:35:18:70:b0:d5:01:65:21:f7:9f:b1:7a:fc:ea:da:
41:1b:b6:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:31:37 2025 by rpki-client