Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/_EShF3PxGOJE5SZRfQySmvZg1kg.roa
File: _EShF3PxGOJE5SZRfQySmvZg1kg.roa (raw, json)
Hash identifier: Fv1ecycEXgD6srZq4/0n/myzWwH/n6NbHepwG+mEp58=
Subject key identifier: FC:44:A1:17:73:F1:18:E2:44:E5:26:51:7D:0C:92:9A:F6:60:D6:48
Certificate issuer: /CN=76670236cd0e038684a33194bde7d4b95adc66f7
Certificate serial: 01942522095AC299A30A3D1F37202DAD0928
Authority key identifier: 76:67:02:36:CD:0E:03:86:84:A3:31:94:BD:E7:D4:B9:5A:DC:66:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dmcCNs0OA4aEozGUvefUuVrcZvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/_EShF3PxGOJE5SZRfQySmvZg1kg.roa
Signing time: Thu 02 Jan 2025 03:49:35 +0000
ROA not before: Thu 02 Jan 2025 03:49:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 45027
IP address blocks: 193.109.217.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:09:5a:c2:99:a3:0a:3d:1f:37:20:2d:ad:09:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76670236cd0e038684a33194bde7d4b95adc66f7
Validity
Not Before: Jan 2 03:49:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fc44a11773f118e244e526517d0c929af660d648
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:81:7a:fb:04:e8:71:31:29:62:5e:92:8c:a9:
4e:0e:3a:01:e0:43:c8:e7:f2:bd:5d:b1:e2:ff:d9:
b5:da:6e:23:79:b8:2d:12:21:3e:46:b8:a1:b7:78:
fb:53:47:c1:6d:73:b3:32:2a:e5:fe:43:12:cc:df:
24:e0:45:a2:6f:d8:73:f9:a3:61:e5:2a:47:9b:2a:
13:2f:78:84:95:28:77:b4:3a:71:c8:76:13:25:d6:
e1:d2:c4:83:d4:d7:98:a7:19:bd:f3:69:82:e8:1d:
53:93:3a:ac:42:49:0c:99:d2:92:8a:0d:f7:ae:56:
e6:19:15:da:0f:19:69:1c:dd:ae:11:73:55:7a:a2:
12:82:3c:c0:9d:7d:d4:01:9e:ef:b6:dd:f2:ae:15:
96:bd:52:44:6e:ed:f7:71:28:0b:e7:a8:f5:ad:8f:
a4:9b:6f:8d:04:4f:64:01:56:12:bc:6e:8d:81:be:
7f:11:93:db:8b:63:84:33:0a:14:f0:81:96:69:30:
7d:9d:7d:5d:4d:71:80:23:a1:6c:d6:45:6d:6a:f9:
81:2b:60:42:5d:43:ab:89:45:3e:f6:76:52:fb:f0:
6e:96:c7:86:38:8d:5b:65:d6:89:74:8a:55:e4:1b:
03:d5:ae:43:a9:8f:5a:e0:8f:15:11:d2:5a:2b:44:
d9:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:44:A1:17:73:F1:18:E2:44:E5:26:51:7D:0C:92:9A:F6:60:D6:48
X509v3 Authority Key Identifier:
keyid:76:67:02:36:CD:0E:03:86:84:A3:31:94:BD:E7:D4:B9:5A:DC:66:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dmcCNs0OA4aEozGUvefUuVrcZvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/_EShF3PxGOJE5SZRfQySmvZg1kg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.109.217.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:7d:9c:c9:f9:06:91:c5:2e:c8:ca:e5:10:9a:98:1f:2d:c0:
c9:36:0b:5a:e9:0f:13:4d:27:93:69:94:ba:c6:90:fa:b1:8b:
3f:ab:6d:45:e8:f3:93:49:b6:e4:ad:ad:d9:15:d9:ad:65:1b:
c5:ca:07:f0:6c:27:69:e3:48:7a:f4:42:79:e8:79:4b:9f:79:
d5:18:13:78:b6:7e:0b:16:a5:3e:f0:14:de:b0:72:d3:61:cf:
4d:65:09:c9:ca:3b:b7:5b:04:36:af:fe:7f:7e:4f:b0:b6:8e:
da:f7:40:d7:5c:ba:7b:50:5a:70:f3:09:7a:c9:de:a9:11:e0:
b0:39:7a:84:56:a8:32:97:c9:24:55:a0:fb:99:e3:72:79:a8:
32:c8:78:cf:70:d3:69:13:39:60:c6:5a:55:30:73:9d:d1:30:
3a:3e:26:b1:53:75:90:06:cb:55:90:cb:c4:dd:54:af:87:4f:
40:76:46:3f:7d:66:63:7f:c8:0f:06:27:1a:51:ed:e9:9d:2c:
f0:49:7e:73:d4:3e:e2:ad:d7:55:ac:ed:11:9b:34:35:08:69:
52:a6:2f:77:d4:0a:fe:14:3f:e5:73:d5:d9:3c:22:81:b9:a2:
ac:59:74:dd:7b:66:e1:80:c4:c3:85:b3:71:1d:65:d1:3b:d6:
c2:66:43:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:40:15 2025 by rpki-client