Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/11dc71-8170-45b5-8c5b-4d73730f7d32/1/vobE3yEGfIGL1cB1AJTldnCRmXE.roa
File: vobE3yEGfIGL1cB1AJTldnCRmXE.roa (raw, json)
Hash identifier: wMXrPRBz6jhuzSeDkQhA2W+belZhJmWY3V+ZCFJ8/9Y=
Subject key identifier: BE:86:C4:DF:21:06:7C:81:8B:D5:C0:75:00:94:E5:76:70:91:99:71
Certificate issuer: /CN=21698c1cdc66dc285d0f807629c46261a88b2de7
Certificate serial: 019422FBCEF67B46FC42C7CAA8E730BE0A56
Authority key identifier: 21:69:8C:1C:DC:66:DC:28:5D:0F:80:76:29:C4:62:61:A8:8B:2D:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IWmMHNxm3ChdD4B2KcRiYaiLLec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/11dc71-8170-45b5-8c5b-4d73730f7d32/1/vobE3yEGfIGL1cB1AJTldnCRmXE.roa
Signing time: Wed 01 Jan 2025 17:48:35 +0000
ROA not before: Wed 01 Jan 2025 17:48:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41584
IP address blocks: 193.164.80.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:ce:f6:7b:46:fc:42:c7:ca:a8:e7:30:be:0a:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21698c1cdc66dc285d0f807629c46261a88b2de7
Validity
Not Before: Jan 1 17:48:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=be86c4df21067c818bd5c0750094e57670919971
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:fb:4c:21:33:0c:3f:e5:1e:08:4b:25:97:23:
2c:5f:c1:04:87:89:e1:82:32:23:97:14:f5:71:85:
bb:5f:87:a0:1d:95:0c:4e:8d:ff:44:79:2b:c2:3a:
9e:1d:6e:30:b8:62:6c:e4:31:41:53:96:6c:97:25:
91:1f:6d:36:93:9c:fd:13:55:e1:0f:50:e6:a3:fb:
3c:be:6c:be:52:18:5c:ff:e6:32:29:0a:a4:13:f0:
0c:89:21:e7:2b:dd:de:65:ca:cc:88:b3:80:4e:9e:
d5:9f:e2:71:a0:f1:9f:9b:2c:d8:a9:13:48:8d:e1:
4a:83:1c:86:5b:8d:41:19:21:7e:e4:2a:92:fc:7b:
c7:bd:f4:17:bc:95:7c:f9:fe:2c:e7:da:d7:96:fe:
5c:91:7c:a0:8a:0c:d7:48:af:5a:ac:87:0f:44:61:
ef:8f:d2:8b:bf:e7:19:31:60:c6:aa:14:4c:f1:00:
7a:0e:71:6b:9e:9a:eb:e5:63:90:b7:4f:1a:8d:ec:
b8:72:88:12:bb:58:03:3d:43:3e:c4:5c:f6:4c:89:
49:fe:27:04:47:96:41:f7:5b:c2:bb:e2:03:e2:b2:
3c:bf:87:4c:c5:35:1d:d9:65:60:0d:69:e5:48:ed:
7c:56:d7:e8:f7:3c:24:d8:01:f1:17:7f:42:16:5d:
54:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:86:C4:DF:21:06:7C:81:8B:D5:C0:75:00:94:E5:76:70:91:99:71
X509v3 Authority Key Identifier:
keyid:21:69:8C:1C:DC:66:DC:28:5D:0F:80:76:29:C4:62:61:A8:8B:2D:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IWmMHNxm3ChdD4B2KcRiYaiLLec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/11dc71-8170-45b5-8c5b-4d73730f7d32/1/vobE3yEGfIGL1cB1AJTldnCRmXE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/11dc71-8170-45b5-8c5b-4d73730f7d32/1/IWmMHNxm3ChdD4B2KcRiYaiLLec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.164.80.0/23
Signature Algorithm: sha256WithRSAEncryption
6d:e5:16:75:c1:a8:5f:1e:ab:1d:1d:fa:ba:78:c6:84:27:e6:
c4:ce:ed:91:00:02:2c:d5:22:8d:70:42:f3:ef:a2:20:e7:60:
ea:1b:99:91:bd:12:0c:37:b4:e4:e0:d9:e1:f1:04:94:f5:7f:
34:cd:27:2d:f8:ad:4e:ad:9d:04:35:2a:b4:67:30:ea:da:37:
09:59:c0:a0:95:de:1d:1b:59:92:36:d3:82:ba:18:9f:1a:9b:
35:32:dc:e2:8c:24:d0:8b:00:7c:5d:40:db:5d:aa:87:18:dd:
ef:d3:e0:1e:00:33:8e:e9:1b:e1:fb:93:c3:8f:0b:ad:71:63:
72:c6:dc:39:e6:a4:28:e7:23:6e:25:a0:e0:78:66:a1:48:96:
80:a3:dd:a2:1e:8a:1e:07:42:cb:94:db:01:5d:1f:2c:39:76:
5d:8b:83:a5:b6:05:f6:06:a1:fe:b7:6f:50:12:20:1e:f9:08:
ec:fb:85:43:0c:ae:61:b7:fb:05:f6:2f:06:61:a9:9f:1a:da:
85:eb:c4:e7:f1:93:15:7a:92:3f:39:33:59:7e:4f:4c:10:6a:
8b:77:46:d4:5a:0d:75:72:e2:05:79:07:33:6e:7c:f0:10:2e:
ff:8f:46:d8:51:c5:80:f9:7f:b5:66:86:e7:c6:25:2a:fc:d6:
c4:19:f4:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:46:10 2025 by rpki-client