Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/661285-7965-4fa4-baab-74c1405c3475/1/_B7qhSnCxfn7CerNmWLFyrIUzIo.roa
File: _B7qhSnCxfn7CerNmWLFyrIUzIo.roa (raw, json)
Hash identifier: SylKEkKlUGkISQweMYeNKNB3Kfx1l1zxuoZbI4A8/rE=
Subject key identifier: FC:1E:EA:85:29:C2:C5:F9:FB:09:EA:CD:99:62:C5:CA:B2:14:CC:8A
Certificate issuer: /CN=63faac29b90534f91a9fb0eb6318f0019451c6ee
Certificate serial: 0194228E31230482B5FB9392AE5531DDC77E
Authority key identifier: 63:FA:AC:29:B9:05:34:F9:1A:9F:B0:EB:63:18:F0:01:94:51:C6:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y_qsKbkFNPkan7DrYxjwAZRRxu4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/661285-7965-4fa4-baab-74c1405c3475/1/_B7qhSnCxfn7CerNmWLFyrIUzIo.roa
Signing time: Wed 01 Jan 2025 15:48:51 +0000
ROA not before: Wed 01 Jan 2025 15:48:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8758
IP address blocks: 193.73.211.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:31:23:04:82:b5:fb:93:92:ae:55:31:dd:c7:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63faac29b90534f91a9fb0eb6318f0019451c6ee
Validity
Not Before: Jan 1 15:48:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fc1eea8529c2c5f9fb09eacd9962c5cab214cc8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:9c:87:5b:26:9d:39:ae:5d:a3:e2:bb:2e:13:
a4:f1:15:b7:83:5f:1d:5f:7a:80:0d:16:e9:1c:d1:
55:39:5b:0c:e3:a9:13:fc:e1:8e:ef:ae:c5:82:fd:
1d:cd:ae:14:4e:87:34:35:b3:34:96:23:10:74:cf:
2c:26:a5:4a:92:1b:ee:0a:df:5d:32:09:d1:c8:ae:
19:52:0f:8f:47:57:a9:7c:c5:53:75:1a:aa:6a:c2:
25:c2:49:35:c1:5c:35:bb:8e:4e:19:21:0d:70:66:
35:f7:2a:8e:89:4b:36:b2:6b:ad:dc:dc:dc:27:26:
21:a5:ee:ef:0b:0a:da:02:6e:3a:0c:d9:1c:05:6d:
02:b0:ac:f9:f0:5f:f7:a1:c7:bf:15:5d:5d:85:f4:
09:51:c7:80:62:13:a9:c5:1d:5c:db:f8:c0:78:ce:
64:11:ac:4b:cb:dd:af:c5:99:e8:93:00:0a:e7:bc:
20:88:5f:0b:16:43:ba:40:24:15:12:fd:0e:89:60:
75:d8:ca:07:fd:fc:56:02:e5:34:d5:5e:90:85:0a:
a1:4b:3d:5b:a0:ad:41:72:5b:79:3f:f5:66:ad:8c:
2e:b6:b8:49:ce:dd:75:1e:9b:87:4b:5a:c3:e6:39:
17:cd:8a:14:b4:9f:6a:b6:d0:22:70:73:8b:56:f6:
4c:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:1E:EA:85:29:C2:C5:F9:FB:09:EA:CD:99:62:C5:CA:B2:14:CC:8A
X509v3 Authority Key Identifier:
keyid:63:FA:AC:29:B9:05:34:F9:1A:9F:B0:EB:63:18:F0:01:94:51:C6:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y_qsKbkFNPkan7DrYxjwAZRRxu4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/661285-7965-4fa4-baab-74c1405c3475/1/_B7qhSnCxfn7CerNmWLFyrIUzIo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/661285-7965-4fa4-baab-74c1405c3475/1/Y_qsKbkFNPkan7DrYxjwAZRRxu4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.73.211.0/24
Signature Algorithm: sha256WithRSAEncryption
89:a1:05:91:9a:a5:c2:c6:8a:ca:0b:7f:5c:a6:05:48:5c:b7:
82:a9:05:e3:63:9d:1a:fd:51:cb:f2:18:3a:79:87:1b:f2:ac:
31:6b:7b:33:51:bc:3f:bb:3a:f8:6e:b4:6f:f4:1c:c6:12:0a:
4b:b9:4f:d2:3d:fe:3b:c7:2c:84:f7:8f:f7:0e:9b:c4:bb:92:
35:c9:91:05:78:b6:58:ae:59:5b:65:a9:ff:9f:ac:7c:a1:f3:
a2:0e:09:ef:c6:02:dc:b6:5c:92:3d:92:40:1b:19:ef:15:d7:
e9:74:e2:e2:05:a9:68:b2:37:93:5a:b5:38:7b:62:e6:e7:1e:
74:41:1f:fc:6f:37:ee:1d:6c:b9:e9:70:3f:ef:4d:84:38:3c:
cb:62:cd:ff:18:e6:8f:63:e0:13:f5:c1:17:98:36:bf:1b:a4:
ff:4e:4d:e1:90:bb:de:9a:84:e6:6c:1a:3e:c6:83:57:b4:40:
7a:cf:fb:c7:06:79:26:1c:63:9d:e5:8d:46:35:d4:42:a6:d3:
57:3f:90:d5:b1:17:6d:86:1a:ca:97:ac:b8:1c:b6:0e:da:d6:
55:4a:a0:0d:22:c2:5a:e5:da:a0:c4:51:3e:67:f1:60:e5:8e:
56:ed:37:c7:76:d5:a2:55:ce:68:3b:98:83:72:0d:ba:a5:33:
c9:27:f5:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:51:25 2025 by rpki-client