Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/dc352b-1b3b-45a1-adcc-22750cfa6ebf/1/OG3QeeF5cg1KpD2vUQ3ZJy7n9Bk.roa
File: OG3QeeF5cg1KpD2vUQ3ZJy7n9Bk.roa (raw, json)
Hash identifier: NOsUSodipslYsIpk9oaQwLP0ys9ZrPTqJao3pUKS/aM=
Subject key identifier: 38:6D:D0:79:E1:79:72:0D:4A:A4:3D:AF:51:0D:D9:27:2E:E7:F4:19
Certificate issuer: /CN=1757277f02ce151d8d86bebf75dad90d9c2d6ff9
Certificate serial: 0187B36F33CAE9B4A9AE5C51DCB162553EC4
Authority key identifier: 17:57:27:7F:02:CE:15:1D:8D:86:BE:BF:75:DA:D9:0D:9C:2D:6F:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F1cnfwLOFR2Nhr6_ddrZDZwtb_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/dc352b-1b3b-45a1-adcc-22750cfa6ebf/1/OG3QeeF5cg1KpD2vUQ3ZJy7n9Bk.roa
Signing time: Mon 24 Apr 2023 13:23:42 +0000
ROA not before: Mon 24 Apr 2023 13:23:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39453
IP address blocks: 193.16.104.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:b3:6f:33:ca:e9:b4:a9:ae:5c:51:dc:b1:62:55:3e:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1757277f02ce151d8d86bebf75dad90d9c2d6ff9
Validity
Not Before: Apr 24 13:23:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=386dd079e179720d4aa43daf510dd9272ee7f419
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:99:17:83:d9:96:bc:f0:16:b2:5b:df:1e:3b:
86:69:67:e9:40:74:75:a0:4a:40:e7:9f:1d:2c:84:
25:53:9d:da:45:9f:a7:eb:9c:cd:21:ad:f4:81:2f:
12:70:aa:33:49:59:c4:0f:3d:00:8d:16:d7:81:fd:
48:2a:00:f9:ae:90:ed:b9:06:4b:61:ab:69:6e:ef:
ce:f1:a8:84:78:3c:0c:c4:49:97:b2:28:e8:1b:f8:
e7:81:a6:a2:11:d2:70:dd:88:f5:a3:46:12:25:11:
44:d2:3a:2e:01:72:dc:32:a6:48:60:84:d1:87:f4:
c7:88:87:61:7f:38:0f:54:36:e4:7a:29:38:b0:7c:
98:73:b3:a2:0c:61:c3:7c:cd:98:d6:92:40:6f:1b:
7c:8f:cb:e1:5a:58:ba:17:dc:a6:39:02:e6:0f:ae:
a7:8c:b6:2a:5e:c3:9f:cc:32:26:5d:c8:e0:aa:dd:
38:72:ca:09:8d:99:19:d8:f1:86:7a:94:ab:6d:d9:
07:10:3c:09:7d:e7:dd:be:d3:d0:c8:9d:b1:31:4c:
4b:bd:d5:cd:30:b9:88:ee:63:bf:8f:3f:ff:e1:1c:
65:78:81:89:76:73:4e:50:f2:02:bd:eb:5b:80:ea:
0f:2c:08:58:9f:b6:f2:a4:47:48:ae:57:a6:7c:e3:
41:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:6D:D0:79:E1:79:72:0D:4A:A4:3D:AF:51:0D:D9:27:2E:E7:F4:19
X509v3 Authority Key Identifier:
keyid:17:57:27:7F:02:CE:15:1D:8D:86:BE:BF:75:DA:D9:0D:9C:2D:6F:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F1cnfwLOFR2Nhr6_ddrZDZwtb_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/dc352b-1b3b-45a1-adcc-22750cfa6ebf/1/OG3QeeF5cg1KpD2vUQ3ZJy7n9Bk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/dc352b-1b3b-45a1-adcc-22750cfa6ebf/1/F1cnfwLOFR2Nhr6_ddrZDZwtb_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.16.104.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:ee:fe:37:7d:b2:40:d6:b6:cb:2b:50:20:fa:a4:7a:b2:34:
fa:48:d8:ee:a3:52:5d:52:c4:93:cd:34:ff:aa:06:e3:b8:08:
22:80:15:a4:63:05:6b:f6:df:7e:7a:d8:3b:9a:86:98:ca:a8:
dc:9c:02:8e:7d:2e:04:23:08:32:44:9d:20:37:4c:ef:a2:5e:
23:27:3e:ac:0c:db:27:be:3d:4f:b4:3c:75:1b:2c:e1:fd:99:
7a:5e:1d:a0:d5:77:72:0b:88:d2:52:44:dc:b0:13:c2:6c:5b:
09:be:9f:15:61:e2:fc:f4:11:1b:90:83:16:59:a5:32:c1:19:
81:f4:26:a2:13:91:b5:ab:4f:1f:ba:f6:90:29:85:b4:eb:55:
b1:ce:05:e0:11:1f:7f:14:8d:21:31:cc:6c:9b:b7:4e:55:a7:
b7:e7:2b:68:67:dc:bb:35:c2:c7:99:45:4d:93:55:24:aa:00:
15:2d:82:e0:85:b8:4a:3a:0e:0a:02:bc:ad:dd:52:29:41:13:
f7:55:b2:91:f8:09:83:cc:2d:53:4e:96:05:4f:16:a4:21:79:
9c:5f:f3:05:cf:64:7a:9b:56:b6:c9:c2:59:5d:fd:ac:33:18:
d5:63:52:09:6c:c6:1e:1b:52:0c:52:20:d5:3d:be:66:54:90:
6d:14:b4:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:30:55 2025 by rpki-client