Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/4b48f3-8808-473d-a7e6-186b286854be/1/uSUsTJke_ZRP9yPpeFo1-jAUNIQ.roa
File: uSUsTJke_ZRP9yPpeFo1-jAUNIQ.roa (raw, json)
Hash identifier: OEP1HUMxEbFafXpXy7vXxgmM/FC0eBdFuEBTZi5LD+Y=
Subject key identifier: B9:25:2C:4C:99:1E:FD:94:4F:F7:23:E9:78:5A:35:FA:30:14:34:84
Certificate issuer: /CN=a4d38041ae4e73157724aa9f3ee04305e5f12834
Certificate serial: 05BD4EEC
Authority key identifier: A4:D3:80:41:AE:4E:73:15:77:24:AA:9F:3E:E0:43:05:E5:F1:28:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pNOAQa5OcxV3JKqfPuBDBeXxKDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/4b48f3-8808-473d-a7e6-186b286854be/1/uSUsTJke_ZRP9yPpeFo1-jAUNIQ.roa
Signing time: Sat 01 Jan 2022 14:05:22 +0000
ROA not before: Sat 01 Jan 2022 14:05:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62382
IP address blocks: 193.143.96.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96292588 (0x5bd4eec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4d38041ae4e73157724aa9f3ee04305e5f12834
Validity
Not Before: Jan 1 14:05:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b9252c4c991efd944ff723e9785a35fa30143484
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a0:50:e6:c2:85:a6:24:4c:54:42:53:b6:9e:
3c:a5:e5:dc:a4:16:c4:76:be:64:d6:f8:5b:a5:b6:
84:3a:88:ac:b4:a9:74:2e:19:89:d8:0b:de:ba:aa:
86:d4:45:fe:fb:31:e7:69:4b:6d:e9:48:cb:18:08:
ee:0a:fb:1d:71:79:cc:a6:05:ac:7a:73:22:8f:52:
63:51:ba:e1:98:cc:20:f8:47:6e:e0:5c:e4:55:09:
3f:b7:df:74:69:50:47:dd:9b:82:ca:ca:c2:ce:67:
7e:62:bb:e4:15:46:3f:26:dc:4b:bd:ee:48:8d:11:
48:4b:65:43:e3:fa:62:3c:e3:de:89:95:79:85:b7:
74:72:1f:ff:0f:a0:36:a3:29:aa:48:59:5c:25:63:
65:4b:f1:db:f9:27:87:be:f4:df:20:8c:c9:4c:7d:
34:2e:f8:87:96:b0:1e:89:22:ac:ad:2c:fb:ba:58:
23:7c:47:a3:b0:29:36:e2:40:38:5e:3c:e6:eb:4d:
fe:6d:d7:62:ef:21:eb:2b:c1:4e:60:68:62:37:65:
7d:ea:ef:b7:b8:15:69:a3:8f:7e:83:66:0e:b8:ee:
65:db:30:15:e8:01:ac:ec:b1:b7:3b:d2:81:2d:62:
e9:e8:f2:cb:9a:66:3f:d9:06:50:3c:d9:3a:f4:78:
98:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:25:2C:4C:99:1E:FD:94:4F:F7:23:E9:78:5A:35:FA:30:14:34:84
X509v3 Authority Key Identifier:
keyid:A4:D3:80:41:AE:4E:73:15:77:24:AA:9F:3E:E0:43:05:E5:F1:28:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pNOAQa5OcxV3JKqfPuBDBeXxKDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/4b48f3-8808-473d-a7e6-186b286854be/1/uSUsTJke_ZRP9yPpeFo1-jAUNIQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/4b48f3-8808-473d-a7e6-186b286854be/1/pNOAQa5OcxV3JKqfPuBDBeXxKDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.143.96.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:37:42:18:7e:f1:21:a7:af:4b:4d:95:08:1c:b6:7d:4d:11:
8c:54:b3:77:27:b5:ba:ce:3d:52:f6:6d:12:10:88:aa:29:3a:
c4:b8:c9:62:73:ec:6d:4e:31:c1:24:2b:09:f3:85:3a:73:85:
88:9a:be:b3:92:0b:49:23:4d:f4:1c:0b:c3:1f:cb:10:99:20:
9d:0b:63:0a:51:90:22:f1:8c:56:ed:b6:e0:97:7c:92:ac:83:
59:b8:bd:15:96:2e:92:4b:46:08:66:b1:8a:a7:6e:6e:ed:ee:
b3:f3:be:14:0d:93:d2:8c:98:a4:4d:b9:ff:7f:8c:86:51:2d:
8b:d1:f7:21:24:22:6f:ce:8a:6f:6c:eb:d3:e7:c1:09:df:1c:
3b:09:07:2f:b5:98:37:e9:ce:72:9e:7b:e7:42:d0:f6:4b:b0:
d1:58:b1:48:33:63:dd:e8:b5:93:04:1e:9f:65:80:a5:55:a8:
d6:af:a8:63:38:98:c4:c8:2e:14:6c:a2:a3:cc:2d:7f:1f:34:
a5:e9:d6:89:b7:2e:7f:2d:e7:9e:f2:c4:62:37:e6:93:71:6d:
8f:f9:e7:5d:3c:62:2a:d3:d6:6b:84:07:92:bc:a8:29:9c:15:
e6:d0:c2:c7:20:53:62:c7:dc:cb:20:b4:3a:37:19:a5:30:5e:
a8:1b:30:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:36:43 2025 by rpki-client