Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/919d75-885e-4be4-9d8f-d285ca9cbe16/1/2b4EjFpbEwEHO9r6cp5A4WWDqYM.roa
File: 2b4EjFpbEwEHO9r6cp5A4WWDqYM.roa (raw, json)
Hash identifier: X5IAEz8IX7zn42MtyRF09JFblGEvp5GvYsw/zI++Bn4=
Subject key identifier: D9:BE:04:8C:5A:5B:13:01:07:3B:DA:FA:72:9E:40:E1:65:83:A9:83
Certificate issuer: /CN=1bf38b6d12023ef8700a9102f94ada3361e73e03
Certificate serial: 0186CA558A8F275084F11653C601F4C375A2
Authority key identifier: 1B:F3:8B:6D:12:02:3E:F8:70:0A:91:02:F9:4A:DA:33:61:E7:3E:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G_OLbRICPvhwCpEC-UraM2HnPgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/919d75-885e-4be4-9d8f-d285ca9cbe16/1/2b4EjFpbEwEHO9r6cp5A4WWDqYM.roa
Signing time: Fri 10 Mar 2023 07:04:08 +0000
ROA not before: Fri 10 Mar 2023 07:04:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 193.163.85.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:ca:55:8a:8f:27:50:84:f1:16:53:c6:01:f4:c3:75:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bf38b6d12023ef8700a9102f94ada3361e73e03
Validity
Not Before: Mar 10 07:04:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d9be048c5a5b1301073bdafa729e40e16583a983
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:e3:c5:2d:e7:40:f5:81:04:9a:60:ca:4c:a3:
76:f1:c2:99:16:80:2d:59:db:05:4c:3e:2c:09:00:
ca:0c:bd:1c:da:2a:7c:6d:f6:07:c8:de:39:0c:7a:
b5:64:2d:76:d4:d3:6e:68:80:a9:a1:ce:72:18:7e:
14:15:1f:2d:27:00:0e:37:db:d3:8d:4d:8f:81:e2:
44:c0:61:19:20:cb:b6:03:33:c6:33:39:f2:d3:57:
f2:af:88:9f:64:58:61:33:df:f6:ab:9a:00:4b:ff:
4a:74:e9:72:11:18:56:e5:6e:48:ae:ab:79:24:ba:
20:4c:4a:d2:d8:25:ea:93:93:16:c7:16:d2:f7:c9:
64:06:76:d8:37:0d:e6:33:5a:f9:45:4a:b8:32:8e:
90:01:04:5c:19:e7:46:e9:15:b0:a4:f4:94:24:ed:
88:94:61:f8:97:3b:5d:aa:a3:17:eb:b4:53:53:8c:
7d:33:59:eb:92:c8:00:4f:81:f0:b9:53:b0:eb:3e:
3a:e2:7d:9e:bf:bc:cb:80:75:8b:01:75:a5:27:72:
87:ff:6c:17:82:7c:ad:2e:5d:64:15:b4:e1:52:22:
a9:f1:89:1f:65:8c:d6:e0:35:c6:fb:d0:6a:c4:56:
e5:62:d4:45:0a:c6:5a:fb:04:71:7c:94:07:24:9f:
60:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:BE:04:8C:5A:5B:13:01:07:3B:DA:FA:72:9E:40:E1:65:83:A9:83
X509v3 Authority Key Identifier:
keyid:1B:F3:8B:6D:12:02:3E:F8:70:0A:91:02:F9:4A:DA:33:61:E7:3E:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G_OLbRICPvhwCpEC-UraM2HnPgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/919d75-885e-4be4-9d8f-d285ca9cbe16/1/2b4EjFpbEwEHO9r6cp5A4WWDqYM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/919d75-885e-4be4-9d8f-d285ca9cbe16/1/G_OLbRICPvhwCpEC-UraM2HnPgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.163.85.0/24
Signature Algorithm: sha256WithRSAEncryption
28:84:f5:6e:81:1c:03:c1:b4:98:db:74:ff:e1:6b:29:7a:f9:
72:90:31:db:f3:09:50:8a:15:83:4b:30:a2:ad:df:01:bc:ae:
a6:b0:53:70:77:9e:9d:3c:2d:72:a1:9a:24:c9:3d:f2:97:c5:
de:b0:80:63:d8:fe:8b:fd:a4:10:d7:92:ec:bc:da:76:4a:6c:
44:be:97:20:d4:dc:db:a7:67:ec:67:d3:5a:3d:38:bf:c7:c9:
3e:7a:32:2a:39:b2:e8:12:5f:c1:fc:99:23:be:cf:31:5b:ea:
14:d8:f6:8a:4a:e6:7d:08:e5:27:32:ef:00:62:53:c8:2c:6f:
1f:5d:da:fb:7a:c7:e9:2e:3e:d7:1b:5d:ee:0f:93:29:52:fc:
8c:7a:b2:f9:e6:ef:53:31:be:1f:47:ae:0f:c1:9a:d0:95:24:
12:d3:c0:51:b2:63:10:0b:1b:4b:df:7e:e3:db:b1:99:4e:62:
c5:c7:6c:0d:f9:ff:75:57:b3:0e:47:ba:7f:ad:44:85:42:6e:
d7:b0:1e:74:90:5e:8d:06:f3:78:9b:50:42:0e:57:4a:54:a2:
dd:ef:ee:b4:dc:ca:61:ec:d4:17:60:ce:a1:62:aa:cf:29:fa:
9c:c9:85:53:67:9e:7e:a9:44:3a:21:e2:62:98:9d:64:d7:11:
0c:78:51:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:17:15 2025 by rpki-client