Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/6a2946-f0a4-4e85-930e-d4edf16e0978/1/Crf41pfcZmNKuDt4hymlQTfYG2U.roa
File: Crf41pfcZmNKuDt4hymlQTfYG2U.roa (raw, json)
Hash identifier: c4qxY3jolPv2UXEdOnJwnhLS1Znb3vlJyUzlD0LFsHY=
Subject key identifier: 0A:B7:F8:D6:97:DC:66:63:4A:B8:3B:78:87:29:A5:41:37:D8:1B:65
Certificate issuer: /CN=1bdba013655b9bb0caa285d75c142c1ee30f8854
Certificate serial: 019426D935320D2CE937D0B25DA165B36523
Authority key identifier: 1B:DB:A0:13:65:5B:9B:B0:CA:A2:85:D7:5C:14:2C:1E:E3:0F:88:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/6a2946-f0a4-4e85-930e-d4edf16e0978/1/Crf41pfcZmNKuDt4hymlQTfYG2U.roa
Signing time: Thu 02 Jan 2025 11:49:16 +0000
ROA not before: Thu 02 Jan 2025 11:49:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51580
IP address blocks: 193.176.238.0/24 maxlen: 24
193.176.246.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:35:32:0d:2c:e9:37:d0:b2:5d:a1:65:b3:65:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bdba013655b9bb0caa285d75c142c1ee30f8854
Validity
Not Before: Jan 2 11:49:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0ab7f8d697dc66634ab83b788729a54137d81b65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:7e:83:c1:9f:da:15:f5:b9:f5:a0:03:0b:5a:
6b:3f:d3:8b:05:f4:15:14:9f:01:bc:47:31:d0:41:
b3:56:93:b2:63:fc:ff:4a:aa:41:d4:b1:1a:05:08:
83:0d:f6:48:71:44:c6:fc:41:15:d4:24:02:d3:ec:
6c:31:ac:53:3b:fb:77:72:91:69:23:8d:ae:4e:b9:
24:ca:8e:0a:a4:3f:94:d0:84:55:40:2b:33:70:f2:
7b:31:f0:56:bd:55:2b:76:a1:a9:d7:ee:d8:dd:26:
b5:e7:d4:5a:60:94:54:c7:ae:a1:87:ce:17:2d:19:
a1:d2:68:aa:c6:71:b8:83:73:8b:f5:fe:51:26:62:
07:eb:e7:07:f0:a7:0d:74:f5:3b:29:3f:b7:4a:fc:
a8:53:de:0d:e5:12:00:10:04:54:14:1d:ac:cd:9b:
4f:56:6c:d9:fc:8d:33:39:19:cf:3c:cf:d8:9b:eb:
0f:3b:c4:93:3b:a1:11:bd:ee:81:4a:d4:c6:bf:f7:
b2:a0:8d:ac:42:3e:25:a0:a8:62:c5:74:dc:8e:b1:
60:87:03:af:78:c0:e5:14:5d:98:22:12:d8:77:6c:
ca:0b:1d:78:30:1f:e8:24:7a:31:a5:d2:3a:15:87:
ad:eb:0e:5c:af:f3:b5:cf:b1:4b:51:40:07:a2:75:
2a:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:B7:F8:D6:97:DC:66:63:4A:B8:3B:78:87:29:A5:41:37:D8:1B:65
X509v3 Authority Key Identifier:
keyid:1B:DB:A0:13:65:5B:9B:B0:CA:A2:85:D7:5C:14:2C:1E:E3:0F:88:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/6a2946-f0a4-4e85-930e-d4edf16e0978/1/Crf41pfcZmNKuDt4hymlQTfYG2U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/6a2946-f0a4-4e85-930e-d4edf16e0978/1/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.176.238.0/24
193.176.246.0/24
Signature Algorithm: sha256WithRSAEncryption
af:b8:83:ac:3d:70:46:2a:0b:83:85:0c:b2:96:1d:b4:cf:d7:
d3:d1:bf:8d:c9:cf:57:c5:56:27:30:07:bd:93:7b:17:5d:4c:
43:5f:a3:59:7d:d8:76:e9:a9:1d:21:f0:b8:c9:dc:dc:40:d6:
26:92:d4:4f:eb:35:6c:e8:4f:e4:de:c7:06:2a:47:cc:d7:07:
fa:00:a2:47:76:fe:fa:0e:a9:1f:60:85:2f:0b:25:d5:ee:56:
c8:74:0f:38:1d:80:f5:b0:3b:0e:52:ab:92:f7:f7:e3:7c:c6:
51:b6:27:7c:e4:25:85:82:df:f8:08:12:c2:e4:62:82:36:01:
7b:67:04:04:46:d2:7f:ab:59:8d:5f:c6:8d:fb:67:66:a7:99:
d4:06:6c:86:4e:26:aa:58:2c:5f:68:cd:91:b3:77:f7:a0:96:
b9:06:32:a8:c2:4c:f2:a0:2e:89:f4:c2:f4:7b:ae:01:ab:58:
08:b9:a5:be:6f:61:f1:ed:ca:58:41:e4:85:12:57:56:f1:35:
34:9b:1e:2f:b0:0d:28:7b:23:40:f0:a6:3c:68:1c:40:e6:d9:
7e:dc:c3:91:30:af:df:5a:a2:22:b0:7d:b6:4c:e9:ba:bd:a3:
11:7c:4d:87:34:b2:f4:a3:19:1b:fa:46:ac:aa:7a:85:e5:63:
c3:a1:2f:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:29:34 2025 by rpki-client