Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/fa278b-1246-48e3-9a05-509611b59c4a/1/3iKY-BxWMlIz7X-7MO8ZJz6SZeo.roa
File: 3iKY-BxWMlIz7X-7MO8ZJz6SZeo.roa (raw, json)
Hash identifier: bDaEhkx0IrcXcsMAYGk349+gsWxbJRLfUHs0JPlkH6c=
Subject key identifier: DE:22:98:F8:1C:56:32:52:33:ED:7F:BB:30:EF:19:27:3E:92:65:EA
Certificate issuer: /CN=4ee0b21c89a302be9dc03870c098f23280304b0f
Certificate serial: 03685060
Authority key identifier: 4E:E0:B2:1C:89:A3:02:BE:9D:C0:38:70:C0:98:F2:32:80:30:4B:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TuCyHImjAr6dwDhwwJjyMoAwSw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/fa278b-1246-48e3-9a05-509611b59c4a/1/3iKY-BxWMlIz7X-7MO8ZJz6SZeo.roa
Signing time: Sat 01 Jan 2022 06:03:16 +0000
ROA not before: Sat 01 Jan 2022 06:03:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 197882
IP address blocks: 193.47.189.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57167968 (0x3685060)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ee0b21c89a302be9dc03870c098f23280304b0f
Validity
Not Before: Jan 1 06:03:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=de2298f81c56325233ed7fbb30ef19273e9265ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:96:e4:8d:f3:fe:0b:55:d0:e0:92:ef:78:bb:
e6:5a:1e:de:cd:86:ca:d0:31:85:3b:84:19:37:11:
0e:e7:bf:56:9e:7e:3a:05:f9:13:d6:8d:d9:c5:9a:
71:42:4b:01:6a:43:eb:a0:20:a8:5e:71:b5:49:b2:
6e:a1:63:60:7a:d0:0a:03:68:8a:93:24:f8:ae:17:
02:dc:7e:c7:47:93:e9:d7:63:11:8f:8f:6b:4a:3b:
75:14:fb:37:b8:29:f4:14:10:14:25:1e:0d:04:f4:
7d:a7:bf:34:b8:4c:7a:fb:f3:85:63:0c:e0:94:df:
77:e7:6e:ba:22:ae:5e:6b:ff:32:2d:3c:24:9f:26:
0f:32:f0:9b:04:4a:be:d1:d2:2b:30:5e:fd:5f:cf:
71:f2:57:86:24:94:c1:b9:03:17:8c:63:78:91:84:
22:16:42:a1:4a:0b:55:46:9a:42:d8:56:21:05:68:
19:25:4e:49:07:8f:f9:01:18:50:b6:85:a4:bc:ec:
49:fe:61:d0:fc:fe:74:d1:a4:38:cf:c7:59:1c:15:
25:fe:96:f7:8b:1d:f3:df:67:a5:62:50:db:2a:0d:
b0:56:5a:22:9b:69:f5:9c:32:b8:de:06:99:30:64:
2f:18:ea:69:68:70:48:ad:5e:02:67:4d:22:82:f2:
89:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:22:98:F8:1C:56:32:52:33:ED:7F:BB:30:EF:19:27:3E:92:65:EA
X509v3 Authority Key Identifier:
keyid:4E:E0:B2:1C:89:A3:02:BE:9D:C0:38:70:C0:98:F2:32:80:30:4B:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TuCyHImjAr6dwDhwwJjyMoAwSw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/fa278b-1246-48e3-9a05-509611b59c4a/1/3iKY-BxWMlIz7X-7MO8ZJz6SZeo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/fa278b-1246-48e3-9a05-509611b59c4a/1/TuCyHImjAr6dwDhwwJjyMoAwSw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.47.189.0/24
Signature Algorithm: sha256WithRSAEncryption
71:2b:c8:56:be:7c:e6:78:c1:fc:d2:c0:9d:22:a9:1e:4e:4f:
d1:de:02:d7:9c:db:69:87:3f:85:6a:36:9d:6c:ed:3b:b5:22:
ea:2c:21:26:da:33:22:92:db:05:37:ef:dc:5e:d3:e8:07:1e:
15:5c:19:81:83:f0:4c:99:e9:dd:a1:2b:0c:c5:be:29:d6:5d:
eb:05:bb:12:68:2b:44:48:79:69:ed:ff:88:98:ca:a5:8d:9d:
79:f0:90:ce:5b:1b:e9:5c:54:c7:ee:b9:74:b4:01:41:ed:5b:
aa:a3:4b:d9:b7:a5:05:9e:d3:e8:73:ca:a5:d0:b6:10:c8:a5:
9d:f0:64:3f:f1:8d:90:46:1e:bf:ba:e9:d5:43:77:8e:40:41:
6b:a4:90:f9:36:3a:b9:e2:e9:ed:b4:2d:d0:ba:e6:36:93:6c:
0d:ac:96:4e:a2:8b:7c:1d:d3:77:cb:8e:1e:65:dd:29:a7:22:
ed:de:44:ff:a7:5f:63:e5:af:14:d6:e2:ae:d8:98:06:05:43:
79:3e:0a:3d:9d:55:3c:b0:5c:61:5e:0d:5d:1b:a2:56:54:df:
27:9c:a6:7b:8d:1b:e0:fd:d7:33:21:67:f8:da:7b:b0:46:96:
1e:b2:82:c4:55:b3:2a:58:4b:3a:f9:96:12:7a:cf:cc:01:5f:
49:a2:55:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:31:15 2025 by rpki-client