Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/d226bb-7210-4c92-9312-33b36224d6d7/1/n04ktMoTG_3nJKmbINXZVu8Jhho.roa
File: n04ktMoTG_3nJKmbINXZVu8Jhho.roa (raw, json)
Hash identifier: qKonu/S1NUJZisxpPjA7MJvTNwzq50Svv1ZSntGSOHU=
Subject key identifier: 9F:4E:24:B4:CA:13:1B:FD:E7:24:A9:9B:20:D5:D9:56:EF:09:86:1A
Certificate issuer: /CN=951c8b406e8299a7294dd7224570fc32b629dc6b
Certificate serial: 01856F66C331E30ADA0F62809016CA4297C4
Authority key identifier: 95:1C:8B:40:6E:82:99:A7:29:4D:D7:22:45:70:FC:32:B6:29:DC:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lRyLQG6CmacpTdciRXD8MrYp3Gs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/d226bb-7210-4c92-9312-33b36224d6d7/1/n04ktMoTG_3nJKmbINXZVu8Jhho.roa
Signing time: Sun 01 Jan 2023 22:14:43 +0000
ROA not before: Sun 01 Jan 2023 22:14:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29802
IP address blocks: 193.56.117.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:66:c3:31:e3:0a:da:0f:62:80:90:16:ca:42:97:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=951c8b406e8299a7294dd7224570fc32b629dc6b
Validity
Not Before: Jan 1 22:14:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9f4e24b4ca131bfde724a99b20d5d956ef09861a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:93:cb:3d:be:25:94:f6:91:26:fa:e2:77:f4:
6c:c5:44:a2:4b:28:14:ed:10:1e:66:a9:17:33:78:
15:6c:c3:2f:1a:71:0c:5d:b2:a5:a1:98:41:02:f7:
34:b8:6b:c9:63:ce:1e:b1:ec:6b:39:d1:6d:47:91:
5a:47:e0:fd:db:e8:03:66:65:ae:41:24:98:6d:24:
40:fb:83:0a:13:63:b1:5b:a9:e2:c8:88:d6:7c:5e:
c9:c6:ec:87:41:7a:f6:45:41:7e:72:1d:07:ef:7f:
a2:6c:62:8b:82:91:c6:e8:d9:59:d5:e2:48:11:55:
a9:1d:3e:49:8f:54:70:0d:8d:0b:c4:ac:d0:fa:b8:
36:f8:68:3c:4c:10:9f:ad:75:ab:fa:17:1a:3f:ef:
66:86:f8:17:20:32:36:4f:64:d4:74:30:5e:76:1c:
85:97:95:ec:f1:86:dd:69:9d:1f:ad:ce:97:e4:bb:
c9:e6:73:af:a3:bd:48:9f:81:76:d6:7d:fc:df:db:
fd:81:27:02:db:b8:47:16:60:c6:66:82:c7:04:9c:
1c:b3:47:3f:c4:9d:95:5a:d3:d0:f7:e5:23:35:2a:
67:f2:bd:d0:c1:3a:68:9e:59:07:1d:2d:1a:4e:50:
25:21:55:48:33:53:f9:f0:e1:77:6c:4a:b1:8b:76:
b6:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:4E:24:B4:CA:13:1B:FD:E7:24:A9:9B:20:D5:D9:56:EF:09:86:1A
X509v3 Authority Key Identifier:
keyid:95:1C:8B:40:6E:82:99:A7:29:4D:D7:22:45:70:FC:32:B6:29:DC:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lRyLQG6CmacpTdciRXD8MrYp3Gs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/d226bb-7210-4c92-9312-33b36224d6d7/1/n04ktMoTG_3nJKmbINXZVu8Jhho.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/d226bb-7210-4c92-9312-33b36224d6d7/1/lRyLQG6CmacpTdciRXD8MrYp3Gs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.56.117.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:b4:d3:95:0c:a8:03:19:b7:36:22:66:d7:bd:e4:d3:70:47:
b2:26:6f:f4:38:ea:62:9a:1a:bb:5f:22:10:33:e6:5c:26:5b:
b6:1e:e9:0b:19:73:04:a9:46:f0:64:04:16:32:76:c4:a7:07:
0c:44:b2:e8:51:39:e1:8a:b4:55:bf:d6:d9:9e:a1:13:b9:81:
bc:1f:c4:03:66:1e:9c:c2:4e:aa:f2:db:3a:7f:69:e0:58:94:
79:58:84:c4:c1:1a:42:86:21:bd:22:b7:26:87:b0:08:4a:d8:
a4:58:51:3b:e4:10:9e:de:26:59:cd:fd:f3:02:f5:18:23:d7:
08:7c:21:bd:13:fc:d8:b2:d7:3a:52:c2:48:72:c1:7d:88:3e:
c9:39:63:42:eb:4f:03:fe:a2:38:67:79:fc:c0:85:72:d0:da:
2f:51:00:dd:8c:90:d5:54:ed:07:c0:d7:92:cb:9d:37:4a:6c:
22:fc:73:e1:1d:84:0a:ee:c5:e3:a1:cc:2c:31:09:03:51:83:
4c:60:e3:47:14:f4:ca:5e:c9:6c:ad:36:de:28:bb:b9:6a:9e:
23:b0:4e:ca:7f:4e:86:5e:ea:69:11:8f:4a:af:5e:be:33:43:
2f:f3:dd:8b:a1:b0:3f:01:0d:fd:23:e6:09:b3:e8:22:11:da:
45:0c:64:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 04:20:11 2025 by rpki-client