Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/c01f5b-6d28-441d-8c15-1fcdac6f0183/1/AZP8uNMEimaz0T_eFJatWM4ioFw.roa
File: AZP8uNMEimaz0T_eFJatWM4ioFw.roa (raw, json)
Hash identifier: 23KWMGiU8JH5/+9xV3SFo7bOQvc91tPWQuwp2uIoE+Q=
Subject key identifier: 01:93:FC:B8:D3:04:8A:66:B3:D1:3F:DE:14:96:AD:58:CE:22:A0:5C
Certificate issuer: /CN=b32f015f6a2345345cb3daf230c25c8fae02305a
Certificate serial: 01899726761124C7BDDFBDAF3B190160A161
Authority key identifier: B3:2F:01:5F:6A:23:45:34:5C:B3:DA:F2:30:C2:5C:8F:AE:02:30:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sy8BX2ojRTRcs9ryMMJcj64CMFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/c01f5b-6d28-441d-8c15-1fcdac6f0183/1/AZP8uNMEimaz0T_eFJatWM4ioFw.roa
Signing time: Thu 27 Jul 2023 11:40:27 +0000
ROA not before: Thu 27 Jul 2023 11:40:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8717
IP address blocks: 195.177.248.0/23 maxlen: 24
193.22.103.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:97:26:76:11:24:c7:bd:df:bd:af:3b:19:01:60:a1:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b32f015f6a2345345cb3daf230c25c8fae02305a
Validity
Not Before: Jul 27 11:40:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0193fcb8d3048a66b3d13fde1496ad58ce22a05c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:b2:70:d7:af:0e:dd:4d:eb:bb:c6:7b:70:84:
dd:e6:b1:d3:99:4a:34:6f:90:3b:66:b5:b0:5c:96:
20:2d:13:eb:3e:30:02:38:4d:6c:7a:44:52:4d:aa:
9e:f6:79:61:12:5e:3d:cc:3a:af:ae:f1:20:2c:ad:
b9:29:6b:ca:90:d5:44:fe:c1:a0:bc:4f:56:18:ea:
6b:91:d3:27:4f:82:57:18:68:ca:64:79:6e:d3:44:
04:13:d0:05:06:7d:66:9c:d0:ac:b5:b4:56:10:85:
78:6a:11:38:b7:7c:cf:0c:64:b6:4e:89:e5:71:dd:
17:36:eb:69:8e:98:db:7a:76:f7:f8:26:15:03:e7:
43:5c:61:a3:36:56:84:31:89:64:b7:d0:c1:43:92:
40:a8:01:51:5b:7c:31:09:2a:5b:ba:bc:7f:46:df:
70:3b:c4:9b:c5:62:e2:17:01:3b:6e:90:13:13:0e:
25:dc:5c:01:6e:14:a1:72:0e:16:9a:8c:b8:b7:a3:
ad:49:e2:15:89:5b:a5:6f:17:96:98:58:98:1e:7b:
b2:e7:94:03:ef:06:df:d8:f0:79:43:9a:f7:70:9a:
89:1b:b9:22:d4:2d:3c:46:77:f7:bc:5c:e3:7c:30:
29:0c:aa:0c:36:d4:74:b3:e9:38:d0:2b:18:63:ff:
03:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:93:FC:B8:D3:04:8A:66:B3:D1:3F:DE:14:96:AD:58:CE:22:A0:5C
X509v3 Authority Key Identifier:
keyid:B3:2F:01:5F:6A:23:45:34:5C:B3:DA:F2:30:C2:5C:8F:AE:02:30:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sy8BX2ojRTRcs9ryMMJcj64CMFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/c01f5b-6d28-441d-8c15-1fcdac6f0183/1/AZP8uNMEimaz0T_eFJatWM4ioFw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/c01f5b-6d28-441d-8c15-1fcdac6f0183/1/sy8BX2ojRTRcs9ryMMJcj64CMFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.22.103.0/24
195.177.248.0/23
Signature Algorithm: sha256WithRSAEncryption
6c:ea:bb:5d:6c:1e:8e:15:02:0b:a6:f3:bf:a3:9e:f2:fd:db:
fd:85:fc:7e:03:30:62:94:4a:2e:fa:c3:07:81:1a:5c:14:6f:
92:a4:b1:61:92:ed:f3:2f:a5:58:61:d1:e9:85:ca:1e:de:3d:
87:7a:0d:f9:3f:8d:e3:a5:7c:ae:c1:92:f2:1d:5b:a9:f7:25:
e2:03:e6:77:ed:97:b4:9d:93:b1:47:0b:b6:7f:c2:19:b8:72:
15:e1:f2:8e:4d:6d:7a:a5:a4:c5:14:9b:b4:47:f7:86:8e:9d:
e8:61:b0:69:4b:0c:32:f1:28:9d:c7:4a:cd:ac:da:f1:d3:72:
2c:78:fd:5f:47:ae:c0:72:b8:22:a1:c3:f0:ec:0f:ac:e7:11:
12:cc:2b:45:88:bb:f6:ac:92:e8:25:9b:09:ba:ef:ef:c3:37:
be:3e:35:17:8e:b0:51:db:ec:cc:8b:10:09:fd:8f:14:18:ec:
e9:db:9d:dd:5f:dc:50:39:30:30:4f:33:2a:93:4a:cb:9e:2e:
0a:0e:8e:9e:81:d0:fe:49:6a:14:6e:b0:7b:cb:77:07:b0:0d:
11:d5:b7:dc:33:04:ac:ad:8f:44:96:a8:5d:c2:34:90:3a:5a:
b6:51:f0:51:0c:90:6b:b0:01:77:89:f5:24:12:41:13:b7:ff:
de:1c:a6:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 20:05:13 2025 by rpki-client