Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/c2829f-b3ed-44d3-a5cf-0c1f69b7aee7/1/_RMv1Q7O2CnoWhcrAcn90ZX5USk.roa
File: _RMv1Q7O2CnoWhcrAcn90ZX5USk.roa (raw, json)
Hash identifier: I2FYErDanPUJADaKO92Q6jyRK2EK15cN4Qdxt/bs9vQ=
Subject key identifier: FD:13:2F:D5:0E:CE:D8:29:E8:5A:17:2B:01:C9:FD:D1:95:F9:51:29
Certificate issuer: /CN=a071571c8e10b419d7a3bf36e1085ffd5cd78a98
Certificate serial: 0194266C3A715689BBB0E5EEB0D38AD1EFE6
Authority key identifier: A0:71:57:1C:8E:10:B4:19:D7:A3:BF:36:E1:08:5F:FD:5C:D7:8A:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oHFXHI4QtBnXo7824Qhf_VzXipg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/c2829f-b3ed-44d3-a5cf-0c1f69b7aee7/1/_RMv1Q7O2CnoWhcrAcn90ZX5USk.roa
Signing time: Thu 02 Jan 2025 09:50:14 +0000
ROA not before: Thu 02 Jan 2025 09:50:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31564
IP address blocks: 193.17.73.0/24 maxlen: 24
195.178.112.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:3a:71:56:89:bb:b0:e5:ee:b0:d3:8a:d1:ef:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a071571c8e10b419d7a3bf36e1085ffd5cd78a98
Validity
Not Before: Jan 2 09:50:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fd132fd50eced829e85a172b01c9fdd195f95129
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:03:c1:82:8e:8c:40:20:80:37:d6:29:bd:42:
ce:78:0a:8d:31:50:f2:b8:4d:29:9d:7c:14:1b:ec:
5e:7d:07:47:17:38:30:65:c3:eb:06:1e:b6:3a:99:
17:dd:17:67:8b:4a:88:9f:d7:82:e1:57:b7:fc:22:
b8:50:8b:c5:79:7e:41:f4:66:df:1d:18:7c:4f:d9:
9d:c3:ac:35:8b:d6:c6:0f:28:59:62:84:54:d4:20:
4c:07:19:25:da:98:53:b7:7a:3f:d5:7f:ac:4f:60:
97:2e:bc:79:b6:f2:6d:d1:37:8e:e5:75:fa:7c:40:
02:43:02:af:d7:9f:82:8f:8d:36:ba:c9:af:66:f2:
8b:8c:ab:44:96:cb:3f:f7:0d:03:8f:7e:34:4f:47:
b6:55:55:a4:b6:69:91:c0:ae:c4:33:8b:a9:ad:33:
05:de:ec:54:2d:c9:9e:13:c6:f4:c2:e0:40:f5:e5:
1d:65:cc:1d:20:89:c1:38:f8:1a:bd:bd:b4:38:06:
ac:3f:fd:59:d8:01:d8:28:87:6e:1a:78:9e:81:a6:
c9:f9:cc:d0:e2:d7:0c:46:a7:f9:3b:20:42:60:c6:
42:c3:01:e8:24:0d:55:56:8b:36:f8:ad:d8:a2:be:
b8:9a:e0:1a:ef:6e:aa:fe:41:75:5d:0b:1d:06:12:
0f:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:13:2F:D5:0E:CE:D8:29:E8:5A:17:2B:01:C9:FD:D1:95:F9:51:29
X509v3 Authority Key Identifier:
keyid:A0:71:57:1C:8E:10:B4:19:D7:A3:BF:36:E1:08:5F:FD:5C:D7:8A:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oHFXHI4QtBnXo7824Qhf_VzXipg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/c2829f-b3ed-44d3-a5cf-0c1f69b7aee7/1/_RMv1Q7O2CnoWhcrAcn90ZX5USk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/c2829f-b3ed-44d3-a5cf-0c1f69b7aee7/1/oHFXHI4QtBnXo7824Qhf_VzXipg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.17.73.0/24
195.178.112.0/23
Signature Algorithm: sha256WithRSAEncryption
05:8a:29:c8:27:7e:c6:fd:66:23:57:34:b8:d7:b6:40:d7:75:
26:0c:7c:b6:7f:2c:6e:38:68:bd:0f:4a:24:f4:ee:4e:7d:7c:
8e:68:be:f1:fa:8f:1f:02:0c:20:be:5a:7b:f3:0b:33:d2:a5:
e9:ee:ab:2c:08:44:ea:a3:69:ec:b6:04:37:bf:8b:7a:50:47:
e0:0c:cb:8f:c1:18:54:22:9f:52:09:63:ed:1e:dd:c3:00:c1:
4d:46:c6:4f:dc:3d:fb:fe:a9:79:04:7d:cf:ef:b0:5c:e2:96:
ec:1e:96:42:f7:be:89:d3:b9:a3:76:75:dc:9f:66:da:f1:c3:
d1:ea:0d:ce:46:13:0a:ca:cf:b4:59:2e:92:64:7d:b3:3f:10:
ac:7b:0a:f0:a0:8b:9a:79:ac:cf:e5:70:c1:1e:06:cc:59:b7:
85:fa:ca:c2:58:59:d7:0f:e6:49:ef:99:d3:f2:c5:e2:00:eb:
a9:17:b2:a9:61:e0:d6:68:3f:d2:19:b7:82:f3:08:ae:44:aa:
85:8a:7c:22:3a:4e:50:25:12:22:e8:12:c1:32:af:c7:65:f1:
e5:8a:61:46:b4:b8:b1:38:aa:b9:1b:6c:d3:be:93:80:a1:bf:
f7:18:a9:52:39:f5:ef:2f:3e:f1:40:4b:cd:71:4a:b1:f7:b0:
ec:91:6d:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:32:23 2025 by rpki-client