Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/ad60e8-4609-4d43-89ff-e3c2f4d2ab3b/1/kTlQ3pGfBXNlBybM3mNy4SMzebA.roa
File: kTlQ3pGfBXNlBybM3mNy4SMzebA.roa (raw, json)
Hash identifier: BklFPI3JiWMYK3I8Er7AJuvydcqhOwMHMOtPBDcTkTw=
Subject key identifier: 91:39:50:DE:91:9F:05:73:65:07:26:CC:DE:63:72:E1:23:33:79:B0
Certificate issuer: /CN=627de978cdc2eb05c3f089061b0abe3c5f698aee
Certificate serial: 018B958F441CB79A71A7C92C9031CEC8339D
Authority key identifier: 62:7D:E9:78:CD:C2:EB:05:C3:F0:89:06:1B:0A:BE:3C:5F:69:8A:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yn3peM3C6wXD8IkGGwq-PF9piu4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/ad60e8-4609-4d43-89ff-e3c2f4d2ab3b/1/kTlQ3pGfBXNlBybM3mNy4SMzebA.roa
Signing time: Fri 03 Nov 2023 14:21:16 +0000
ROA not before: Fri 03 Nov 2023 14:21:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57043
IP address blocks: 193.162.29.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:95:8f:44:1c:b7:9a:71:a7:c9:2c:90:31:ce:c8:33:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=627de978cdc2eb05c3f089061b0abe3c5f698aee
Validity
Not Before: Nov 3 14:21:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=913950de919f0573650726ccde6372e1233379b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:42:98:b6:cf:d6:e7:8e:32:a8:42:83:6b:59:
84:e6:3e:c0:cf:98:7f:f2:60:16:ef:5a:3e:16:51:
06:17:40:54:18:62:1e:65:bb:99:00:2e:01:63:bb:
61:d0:5b:c1:fa:19:f6:f3:0b:c0:05:7a:d4:88:68:
1a:b3:80:a0:22:3a:4d:ee:01:99:93:93:1c:9b:c3:
2a:61:e0:8d:e5:49:7a:fc:f9:24:7c:7e:39:f6:6b:
89:28:67:9e:3d:90:38:40:dc:8e:a6:39:dc:a2:a5:
5f:38:5f:19:3b:58:41:f3:28:98:e1:10:5f:cc:4a:
0d:59:b3:73:28:b8:ac:dd:46:69:cb:b3:7d:d4:4f:
7b:5c:3f:fd:29:4e:2e:bc:29:a6:34:51:80:a7:b6:
ca:3a:5d:47:41:79:76:30:79:d8:35:08:e6:3c:3b:
a5:f6:fa:12:b2:bc:93:ab:03:5d:b8:29:a5:62:9b:
c4:aa:c6:b1:fd:c5:a3:5b:3a:eb:c3:0e:3d:ad:91:
4e:8d:2f:df:c4:d3:d8:cc:5d:a5:43:de:60:60:e2:
ec:2b:cf:94:31:9c:62:f4:21:8b:39:73:98:03:47:
ee:63:81:31:57:88:ad:43:9a:93:61:f0:86:48:66:
50:ec:17:cb:0c:25:49:1d:16:2b:30:f4:7e:35:17:
1d:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:39:50:DE:91:9F:05:73:65:07:26:CC:DE:63:72:E1:23:33:79:B0
X509v3 Authority Key Identifier:
keyid:62:7D:E9:78:CD:C2:EB:05:C3:F0:89:06:1B:0A:BE:3C:5F:69:8A:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yn3peM3C6wXD8IkGGwq-PF9piu4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/ad60e8-4609-4d43-89ff-e3c2f4d2ab3b/1/kTlQ3pGfBXNlBybM3mNy4SMzebA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/ad60e8-4609-4d43-89ff-e3c2f4d2ab3b/1/Yn3peM3C6wXD8IkGGwq-PF9piu4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.162.29.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:5c:f4:01:e8:6d:3b:76:ad:84:42:e7:e4:cd:4b:88:b3:1f:
8c:26:2c:20:9c:66:55:79:72:fe:c1:97:ae:ef:b4:dc:8d:5c:
61:85:e7:69:03:10:1b:a3:38:03:3c:bc:60:b2:02:5a:3c:08:
b0:14:17:09:c7:e4:27:17:9b:c9:80:b5:5b:5f:7a:63:a8:32:
0c:6d:06:8e:28:7e:50:67:40:6d:e9:fd:9b:c0:2f:ab:af:d9:
0f:11:25:38:28:18:b4:5c:22:fe:7e:88:2a:0d:3b:67:aa:9e:
79:31:06:46:3d:43:bd:16:4f:55:fd:59:19:d6:9b:13:52:a3:
47:86:61:c8:d5:23:04:77:32:5e:50:63:17:d1:61:3b:6c:b6:
29:07:86:5a:3f:17:49:c4:ef:18:b6:ec:9a:b1:82:ad:54:81:
5d:80:bf:ff:fb:0f:fa:7b:da:8a:7e:5a:fe:1f:ac:ea:2b:8a:
01:e3:1d:fa:ad:a9:7b:fe:13:7b:75:e0:8d:2d:8b:ac:11:4c:
6d:24:e3:9c:51:cb:a8:02:9f:2c:8c:1d:1e:40:43:3e:15:be:
e1:04:4f:0d:e7:7e:a8:05:b5:30:d0:72:7b:12:4a:e1:aa:07:
db:47:41:27:bc:88:45:67:94:7e:d4:b6:a5:aa:e8:5f:c6:61:
05:b7:7b:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:29:18 2025 by rpki-client