Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/a_2JlHapZMlboNI9wqRgfC0M4lo.roa
File: a_2JlHapZMlboNI9wqRgfC0M4lo.roa (raw, json)
Hash identifier: SanYtU1BzqMJG3ZGm+9Lv9geTdcLywavMwKq8VmacMg=
Subject key identifier: 6B:FD:89:94:76:A9:64:C9:5B:A0:D2:3D:C2:A4:60:7C:2D:0C:E2:5A
Certificate issuer: /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Certificate serial: 0188B398EB4EE740EF395B68AD1D6E494955
Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/a_2JlHapZMlboNI9wqRgfC0M4lo.roa
Signing time: Tue 13 Jun 2023 07:12:03 +0000
ROA not before: Tue 13 Jun 2023 07:12:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7018
IP address blocks: 193.176.96.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:b3:98:eb:4e:e7:40:ef:39:5b:68:ad:1d:6e:49:49:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Validity
Not Before: Jun 13 07:12:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6bfd899476a964c95ba0d23dc2a4607c2d0ce25a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:2c:2e:80:85:99:e7:3b:38:26:eb:3d:22:53:
44:c8:c6:5a:00:52:9d:79:03:ff:c1:77:cb:45:d3:
80:92:27:3b:d7:ef:a5:61:21:cb:1f:8e:2d:f6:a3:
99:3d:0a:e7:db:32:5f:eb:68:57:11:7d:a3:28:3f:
48:7e:ee:ce:9f:50:14:ec:1e:e0:81:4c:1d:82:58:
66:b6:2c:63:d7:9d:82:74:8d:1c:ee:c6:04:ee:12:
12:24:d6:8a:da:21:55:37:42:e5:10:0d:c8:e0:8c:
f6:68:44:b4:ba:e9:78:f4:69:ce:0a:66:92:7a:34:
60:5e:db:0e:01:cf:31:ea:b4:d1:93:c5:19:83:33:
7f:50:2a:8a:4a:2d:fd:15:c5:c3:39:7c:b3:d8:ff:
f9:16:fd:11:8b:84:e4:15:a9:c1:f0:18:8e:44:e2:
63:35:b7:7d:17:43:d9:9f:b8:ae:cc:ed:43:f4:bb:
4d:5e:a3:76:f3:4a:a0:1f:65:6b:c5:19:42:6a:82:
51:ff:a6:81:55:db:4c:a9:e7:69:90:7b:96:d3:2b:
f8:65:af:63:45:5c:10:d8:7b:a9:14:fe:8b:bf:a6:
a8:80:0f:de:28:88:27:74:f4:af:71:a6:9b:22:95:
3b:f2:ec:ee:e5:8a:9f:46:51:48:c0:d3:9e:7e:13:
ca:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:FD:89:94:76:A9:64:C9:5B:A0:D2:3D:C2:A4:60:7C:2D:0C:E2:5A
X509v3 Authority Key Identifier:
keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/a_2JlHapZMlboNI9wqRgfC0M4lo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.176.96.0/24
Signature Algorithm: sha256WithRSAEncryption
03:74:51:4b:85:65:a1:e1:99:68:5b:4d:9e:6b:9b:07:31:82:
95:e6:1a:1e:c8:6c:8f:4f:63:0e:fb:7b:72:19:a1:df:68:f7:
80:7d:a3:0f:8d:a3:25:ec:34:e7:49:34:4e:d0:48:42:69:1c:
ba:8a:49:d4:21:83:73:a6:d2:cd:3c:c4:28:0f:c5:db:62:c7:
62:9c:2d:56:73:78:60:d8:80:64:62:c9:95:ac:54:4e:f7:db:
32:79:1a:92:e0:4d:8a:40:1a:f7:93:20:14:c4:4c:f4:80:a4:
9e:56:2c:2c:1c:4e:58:cc:e2:b3:e1:e5:b7:b7:ef:8f:d6:1c:
49:37:0d:6f:89:46:29:51:8c:d1:3f:44:51:fb:e4:c4:43:c3:
ba:c7:ed:de:a3:a1:f2:44:e0:ae:cd:27:96:f9:a6:3c:7d:a1:
8e:3d:0a:1b:d7:fb:09:e6:a9:b8:f7:24:29:f0:71:07:b6:c4:
be:53:8c:b5:74:6a:0d:89:38:5c:da:af:c4:6b:a8:11:d1:bf:
07:2f:e0:56:e5:60:ce:1b:79:32:a4:fd:60:80:65:81:d8:9a:
33:47:65:b7:4d:ee:6c:cd:7b:8a:c8:2d:d9:b3:4c:de:62:18:
9e:03:37:25:99:80:ee:ef:50:79:38:cb:5d:69:d7:66:80:36:
cc:c4:bf:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:26:06 2025 by rpki-client