Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/ad60e8-4609-4d43-89ff-e3c2f4d2ab3b/1/kAB7sMtlYkuJxdLOpS5RCYmgKT8.roa
File: kAB7sMtlYkuJxdLOpS5RCYmgKT8.roa (raw, json)
Hash identifier: kMTi2PcbqgESuWWRy9me5S9an5ZVYEsNH3lcZPwXvIw=
Subject key identifier: 90:00:7B:B0:CB:65:62:4B:89:C5:D2:CE:A5:2E:51:09:89:A0:29:3F
Certificate issuer: /CN=627de978cdc2eb05c3f089061b0abe3c5f698aee
Certificate serial: 01863ADE8623612B7B9FF8361D4A955F0066
Authority key identifier: 62:7D:E9:78:CD:C2:EB:05:C3:F0:89:06:1B:0A:BE:3C:5F:69:8A:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yn3peM3C6wXD8IkGGwq-PF9piu4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/ad60e8-4609-4d43-89ff-e3c2f4d2ab3b/1/kAB7sMtlYkuJxdLOpS5RCYmgKT8.roa
Signing time: Fri 10 Feb 2023 10:28:27 +0000
ROA not before: Fri 10 Feb 2023 10:28:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15731
IP address blocks: 193.162.29.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:3a:de:86:23:61:2b:7b:9f:f8:36:1d:4a:95:5f:00:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=627de978cdc2eb05c3f089061b0abe3c5f698aee
Validity
Not Before: Feb 10 10:28:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=90007bb0cb65624b89c5d2cea52e510989a0293f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:bb:b2:5b:4b:83:e7:09:e6:ae:de:82:69:aa:
f0:c0:f2:60:78:6f:34:14:4c:44:01:8b:be:2b:82:
41:b3:1d:00:eb:f8:46:fd:35:c6:8e:74:52:e4:ec:
8b:ef:f4:9f:3e:85:ba:a1:ce:53:26:6a:f1:11:dc:
ef:82:d2:9f:00:a6:dc:25:c6:a7:ef:23:82:7d:54:
67:1d:24:f5:05:5c:61:b3:a4:80:9f:a6:45:41:84:
3a:92:9e:03:c0:a8:a0:9a:ec:90:cf:b3:93:5f:ac:
af:05:4e:d5:12:d0:c6:14:ef:4e:57:94:72:61:a6:
08:7b:a8:10:72:d0:ff:19:66:fb:b0:81:6d:67:05:
1c:b3:2a:b1:f4:55:7b:08:a9:35:52:32:54:08:84:
e3:5e:1c:bb:e1:df:15:23:15:0b:3e:a7:a5:c9:cd:
9b:3c:2a:f7:10:7c:35:eb:0e:6d:cd:18:f4:63:71:
b8:80:e9:18:53:77:90:fd:20:ac:a8:7c:93:15:8b:
99:8f:49:06:a0:fa:b3:b3:99:0c:a1:3c:c7:56:ab:
27:86:02:9c:49:6e:ba:a3:7e:f6:e9:76:79:f4:6b:
af:c8:62:7a:88:7f:ca:68:2e:a3:09:a5:9f:b9:6c:
74:f7:60:0f:32:fd:b3:16:22:6f:df:89:f8:d1:99:
38:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:00:7B:B0:CB:65:62:4B:89:C5:D2:CE:A5:2E:51:09:89:A0:29:3F
X509v3 Authority Key Identifier:
keyid:62:7D:E9:78:CD:C2:EB:05:C3:F0:89:06:1B:0A:BE:3C:5F:69:8A:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yn3peM3C6wXD8IkGGwq-PF9piu4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/ad60e8-4609-4d43-89ff-e3c2f4d2ab3b/1/kAB7sMtlYkuJxdLOpS5RCYmgKT8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/ad60e8-4609-4d43-89ff-e3c2f4d2ab3b/1/Yn3peM3C6wXD8IkGGwq-PF9piu4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.162.29.0/24
Signature Algorithm: sha256WithRSAEncryption
38:2b:27:5e:78:af:75:e9:c5:62:a7:b1:a7:b6:78:f1:47:63:
5c:35:82:7b:e8:9c:83:0d:b7:61:bb:42:c6:23:84:dc:0e:bb:
cc:34:64:9d:63:38:ad:9a:41:dd:4a:ac:10:3b:d9:0a:58:27:
67:b1:44:1e:26:d1:78:0a:e4:bb:46:1a:10:a4:49:90:9e:fb:
34:96:4b:d3:a6:39:3e:be:38:40:90:34:ca:dd:6e:25:bd:77:
d5:dc:f1:57:3a:3d:3b:f9:16:40:b7:8f:47:d9:a2:d8:1e:ca:
b3:47:73:0c:93:d1:d3:10:b5:53:98:9b:e5:87:72:c5:a8:e3:
9d:16:17:5c:f8:d0:1e:21:1f:35:58:d1:5f:87:65:23:0f:a9:
ea:88:20:a3:e7:88:b2:15:b0:2d:1c:5b:a7:0e:fa:5c:a7:15:
ee:1e:c0:66:5d:05:3a:30:6d:46:27:aa:0e:0f:5f:5d:65:77:
a9:57:03:a4:2a:86:85:8d:6d:84:ab:83:ae:f7:72:4a:f6:23:
b0:20:35:8e:ca:f9:ad:f9:ca:e1:5a:dd:9a:24:33:73:65:10:
66:80:1f:19:a6:28:77:36:6e:73:fd:15:4a:cb:76:8e:9a:7e:
88:ef:11:d8:bd:01:e7:20:dc:58:59:69:de:d9:f0:f2:79:6a:
93:6b:67:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 10:00:43 2025 by rpki-client