Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/155bdc-b574-47f9-b348-93cf64f88990/1/o-nYlXPYTvbWycHnP4jG4hys78s.roa
File: o-nYlXPYTvbWycHnP4jG4hys78s.roa (raw, json)
Hash identifier: +9u5uc7wAwLvJQwWxklCfmQHya0NysgfSBmasNGP6Yk=
Subject key identifier: A3:E9:D8:95:73:D8:4E:F6:D6:C9:C1:E7:3F:88:C6:E2:1C:AC:EF:CB
Certificate issuer: /CN=a4abaf1d37f0a141a814ca02fc01e3d9621c73d9
Certificate serial: 01942067D2EA0FB908E2E7C396171FFEDB40
Authority key identifier: A4:AB:AF:1D:37:F0:A1:41:A8:14:CA:02:FC:01:E3:D9:62:1C:73:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pKuvHTfwoUGoFMoC_AHj2WIcc9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/155bdc-b574-47f9-b348-93cf64f88990/1/o-nYlXPYTvbWycHnP4jG4hys78s.roa
Signing time: Wed 01 Jan 2025 05:47:42 +0000
ROA not before: Wed 01 Jan 2025 05:47:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60781
IP address blocks: 193.43.92.0/24 maxlen: 24
193.242.108.0/24 maxlen: 24
195.242.98.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:d2:ea:0f:b9:08:e2:e7:c3:96:17:1f:fe:db:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4abaf1d37f0a141a814ca02fc01e3d9621c73d9
Validity
Not Before: Jan 1 05:47:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a3e9d89573d84ef6d6c9c1e73f88c6e21cacefcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:6b:bd:ea:59:7a:ec:83:c2:70:bf:49:71:2a:
29:06:de:5e:0c:b9:6e:c5:9d:22:9e:71:63:b5:cb:
a3:cc:ab:c9:5b:91:f5:1b:64:e1:a8:32:3a:90:54:
4a:a1:b3:5b:de:1c:5a:bf:36:c8:82:ea:68:ea:1a:
68:91:b1:28:e8:43:23:e6:d3:25:0c:5b:9c:76:a6:
a7:35:c0:1f:e4:e9:92:1a:cc:f5:0f:a8:d7:85:ac:
ae:f0:d6:19:64:7d:d3:b4:84:07:16:a8:ba:44:eb:
7e:14:f4:48:78:51:d4:d4:80:b2:79:72:3f:f8:88:
b1:05:e4:75:2e:4b:ba:58:e7:91:5f:83:18:b1:ce:
be:d1:a6:69:5e:a3:85:ca:5d:20:5c:2d:db:f8:de:
1a:09:a7:83:84:bb:72:fc:dd:03:3c:04:c1:36:b5:
a6:77:a1:1d:75:d9:52:42:a6:80:dc:7f:6c:d5:f2:
a7:e2:be:3d:7e:09:ee:95:ce:72:69:37:10:36:94:
18:91:7f:d0:38:6b:f3:b8:13:b2:9f:ac:43:03:95:
de:d8:ca:cd:f1:90:e5:f4:03:85:00:96:26:08:86:
2f:2e:24:fd:f1:f5:81:7c:39:e7:05:25:1d:38:e2:
44:50:e8:61:a6:48:cb:fc:a6:9b:52:fc:08:8e:38:
08:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:E9:D8:95:73:D8:4E:F6:D6:C9:C1:E7:3F:88:C6:E2:1C:AC:EF:CB
X509v3 Authority Key Identifier:
keyid:A4:AB:AF:1D:37:F0:A1:41:A8:14:CA:02:FC:01:E3:D9:62:1C:73:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pKuvHTfwoUGoFMoC_AHj2WIcc9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/155bdc-b574-47f9-b348-93cf64f88990/1/o-nYlXPYTvbWycHnP4jG4hys78s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/155bdc-b574-47f9-b348-93cf64f88990/1/pKuvHTfwoUGoFMoC_AHj2WIcc9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.43.92.0/24
193.242.108.0/24
195.242.98.0/23
Signature Algorithm: sha256WithRSAEncryption
13:0c:d3:31:69:d3:3f:eb:03:6e:6a:90:ad:72:43:c6:f4:cf:
b0:f6:96:6a:6f:dd:8c:09:7d:98:3e:4e:c8:61:2f:46:9e:aa:
7d:f6:92:31:ef:8c:fe:d6:a0:e8:8f:79:b5:32:4e:b7:8a:5e:
f4:1a:d0:57:ef:81:31:5a:86:19:f4:b0:02:10:44:83:34:b2:
fc:e9:aa:2f:b9:6b:9d:f5:0e:fd:f7:04:83:ba:b4:b7:b5:1a:
91:d1:17:a5:bd:93:af:fd:02:da:78:ae:44:da:d3:b3:0a:be:
2b:b3:4f:2a:b0:9f:5d:0b:c4:33:79:cf:2a:4a:c8:e7:ce:e5:
28:f6:1c:f2:6c:c2:62:12:1a:9b:3e:76:e1:00:14:11:35:d3:
23:11:5a:3f:f3:0b:22:54:06:99:96:2c:2f:8e:1f:c5:92:d2:
9f:fc:a4:cb:7d:4c:2b:ca:6a:71:8c:94:93:de:a2:5f:1a:65:
c1:89:23:30:49:c6:64:62:2c:3e:3b:2f:96:e4:a2:04:64:2e:
23:04:45:72:c2:8f:6b:d4:10:54:d6:08:98:f1:d3:8b:9c:e2:
2c:e9:19:b1:ff:3e:bc:a2:cc:ab:eb:64:8c:d6:60:97:36:10:
02:27:1a:37:7e:84:2d:5d:52:a5:79:d2:c5:d6:47:48:72:ea:
33:df:8c:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:34:15 2025 by rpki-client