Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/32f8d3-7328-45f0-a007-402238638ea3/1/HTAcIbdkEbL8MoaAkUiDwZIJSbM.roa
File: HTAcIbdkEbL8MoaAkUiDwZIJSbM.roa (raw, json)
Hash identifier: B1gcTh+YM9iDKIUYVF7GRpf7304mihmDYMyHd7zBPUw=
Subject key identifier: 1D:30:1C:21:B7:64:11:B2:FC:32:86:80:91:48:83:C1:92:09:49:B3
Certificate issuer: /CN=5f1f213b8c792b7e013fa5041f5b89971e6f62d6
Certificate serial: 018CF417F7D213D23B0A99267250B26C0AE0
Authority key identifier: 5F:1F:21:3B:8C:79:2B:7E:01:3F:A5:04:1F:5B:89:97:1E:6F:62:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xx8hO4x5K34BP6UEH1uJlx5vYtY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/32f8d3-7328-45f0-a007-402238638ea3/1/HTAcIbdkEbL8MoaAkUiDwZIJSbM.roa
Signing time: Wed 10 Jan 2024 15:57:40 +0000
ROA not before: Wed 10 Jan 2024 15:57:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 193.8.236.0/23 maxlen: 23
193.8.237.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:f4:17:f7:d2:13:d2:3b:0a:99:26:72:50:b2:6c:0a:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f1f213b8c792b7e013fa5041f5b89971e6f62d6
Validity
Not Before: Jan 10 15:57:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1d301c21b76411b2fc328680914883c1920949b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e3:f5:24:a3:81:57:21:60:70:b2:3d:6d:85:
5e:65:85:12:a3:9b:88:93:7a:bf:0b:09:86:d6:e8:
13:2e:c1:08:a2:75:bb:4b:10:7e:7e:25:b7:4e:35:
0f:3f:c2:8a:60:47:69:e0:96:26:88:aa:ba:48:36:
c6:39:73:a0:d6:1a:49:64:e4:d7:87:42:5d:bb:24:
36:64:23:75:44:f4:57:71:2b:a2:a9:5c:8a:62:aa:
d6:a5:52:c8:75:8f:73:e3:4f:2f:95:e1:b8:40:87:
72:12:bd:03:f1:01:44:d9:26:e8:c7:09:ca:9b:ba:
e5:1f:61:aa:a1:8b:ab:78:f8:82:9d:c0:85:df:da:
b7:5a:a4:6d:c9:5f:db:02:7c:a7:0e:10:08:cb:ed:
4a:13:06:24:de:59:14:69:5b:b2:c1:23:b3:48:ff:
87:ab:5c:1e:39:60:14:75:9d:a1:26:cc:71:36:ea:
10:81:c1:e3:e2:84:26:c7:79:38:90:28:53:8f:63:
ec:9d:28:33:58:a3:66:5f:0c:d0:15:3a:06:23:6f:
6b:a9:be:af:1b:0a:d0:aa:d7:0e:e9:9b:bb:e4:57:
38:69:7a:43:69:5c:45:a7:ea:3f:7d:60:20:bd:95:
20:8b:5e:31:5d:67:28:fc:9e:77:c4:50:cf:6c:c5:
15:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:30:1C:21:B7:64:11:B2:FC:32:86:80:91:48:83:C1:92:09:49:B3
X509v3 Authority Key Identifier:
keyid:5F:1F:21:3B:8C:79:2B:7E:01:3F:A5:04:1F:5B:89:97:1E:6F:62:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xx8hO4x5K34BP6UEH1uJlx5vYtY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/32f8d3-7328-45f0-a007-402238638ea3/1/HTAcIbdkEbL8MoaAkUiDwZIJSbM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/32f8d3-7328-45f0-a007-402238638ea3/1/Xx8hO4x5K34BP6UEH1uJlx5vYtY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.8.236.0/23
Signature Algorithm: sha256WithRSAEncryption
8a:c8:81:9e:81:fd:64:ff:0b:0a:e7:f2:42:b8:26:14:09:14:
4c:85:fe:ac:e0:75:fb:06:31:16:47:f3:6c:36:f1:89:ab:95:
3d:8a:05:8a:94:af:0e:d8:44:7b:4a:16:ec:70:e0:55:64:de:
0b:b2:f4:4e:4b:56:f1:5c:1a:17:57:2c:a3:29:2c:ab:ab:9d:
5b:9a:64:3c:d4:dd:93:11:e0:7c:01:5a:51:e4:11:3d:72:4a:
e4:b5:94:99:80:0f:86:49:12:93:27:f8:e5:e3:2e:88:12:2d:
6e:cf:87:a6:a4:89:7a:fd:30:e2:b3:5e:1a:8d:2c:33:e3:e1:
83:d9:ce:11:99:cb:40:d3:be:c3:5e:47:9a:c0:3c:53:97:fb:
60:87:f3:0d:b1:d0:d0:d5:19:1d:be:bf:fa:af:90:19:3f:b8:
56:23:ee:d9:9f:03:42:27:66:69:63:ce:a3:d5:a0:d4:85:40:
46:01:d1:54:b5:0b:99:f7:09:99:e2:a8:1d:52:40:5e:8c:9b:
59:c2:a0:23:c4:a3:c5:df:ff:a2:91:98:6b:14:1a:f9:9c:c1:
60:53:73:da:79:3c:fd:9b:80:88:b0:7e:f2:14:5d:39:1b:b3:
c7:a3:c1:d3:e8:8f:33:92:6a:21:a1:40:3d:c4:6f:95:89:34:
5e:e4:d2:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:40:00 2025 by rpki-client