Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/s4FA7AEgQCVG-cGj_eQM8zr9VJQ.roa
File: s4FA7AEgQCVG-cGj_eQM8zr9VJQ.roa (raw, json)
Hash identifier: wkGb8c/dtNNoGrOQlfDSgO1k8r4qVWReHci/Y6Fqyjs=
Subject key identifier: B3:81:40:EC:01:20:40:25:46:F9:C1:A3:FD:E4:0C:F3:3A:FD:54:94
Certificate issuer: /CN=390b67368c91b85e84888c5ed2e824d1390810bb
Certificate serial: 018720DA8DB307F124B3C42B2F876516406C
Authority key identifier: 39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/s4FA7AEgQCVG-cGj_eQM8zr9VJQ.roa
Signing time: Mon 27 Mar 2023 02:16:46 +0000
ROA not before: Mon 27 Mar 2023 02:16:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60707
IP address blocks: 193.109.194.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:20:da:8d:b3:07:f1:24:b3:c4:2b:2f:87:65:16:40:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=390b67368c91b85e84888c5ed2e824d1390810bb
Validity
Not Before: Mar 27 02:16:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b38140ec0120402546f9c1a3fde40cf33afd5494
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f8:fa:8c:fc:45:32:60:b5:82:dd:48:49:bd:
22:db:9e:55:90:cb:43:8e:5e:c9:32:84:75:29:68:
b9:7b:a2:4b:05:bb:c1:f6:3f:f7:12:b3:50:0f:3f:
42:e8:b3:cc:1b:2f:d4:6b:08:c9:29:4f:77:57:c1:
53:7c:d0:00:dd:16:38:d0:0d:25:10:db:55:73:7b:
76:e3:e4:9d:7b:82:75:5a:78:48:a7:ad:b5:93:7f:
35:20:10:9e:7e:cf:3c:11:95:5a:c1:09:fa:c7:cb:
c7:79:bc:e2:2e:0b:8b:4a:fe:9d:6c:11:1e:2d:c0:
61:5a:b8:85:9e:50:09:35:08:35:a7:34:0f:78:f9:
a4:75:2a:1e:f0:9d:fb:8c:63:f9:5b:5c:22:86:f4:
2f:77:44:28:82:06:c6:c4:43:a1:b1:3f:ff:2a:a7:
51:02:82:73:31:63:ce:77:13:17:82:31:6d:e0:ed:
be:6d:b1:4d:09:98:7f:86:c5:aa:60:c9:9e:1e:e4:
ce:9c:4f:36:4e:29:ee:19:6c:c3:46:e0:76:eb:6e:
dc:34:25:04:4a:db:c1:0f:17:65:c0:7c:cd:3d:c1:
fe:eb:f7:d9:35:f4:73:43:73:08:c8:8f:f3:d2:2b:
b8:6c:48:05:b8:2a:04:10:16:17:6c:0c:bd:c4:04:
ed:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:81:40:EC:01:20:40:25:46:F9:C1:A3:FD:E4:0C:F3:3A:FD:54:94
X509v3 Authority Key Identifier:
keyid:39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/s4FA7AEgQCVG-cGj_eQM8zr9VJQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/OQtnNoyRuF6EiIxe0ugk0TkIELs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.109.194.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:4c:48:be:d7:21:46:13:e6:a4:eb:42:7e:d8:52:99:d4:89:
f9:02:23:31:d1:de:93:40:9a:50:a3:98:e9:49:f1:dc:1c:08:
8e:ea:f4:73:20:21:4f:e8:ba:7c:19:32:fb:5a:db:35:eb:e3:
08:00:bc:ca:58:cf:bd:69:c0:32:8d:40:c2:98:94:a2:86:ce:
cd:c8:58:d9:9d:d5:34:e0:c5:70:22:ea:5c:45:c5:3f:b7:1a:
2b:57:bf:bb:cc:7d:f5:9c:08:d2:55:ca:49:d5:b7:d8:f7:32:
b8:c7:bc:d4:fa:2c:5d:c4:56:54:33:0d:d6:75:73:d0:20:52:
59:1d:de:42:2b:94:1b:04:8a:a5:0c:c1:04:90:d0:75:84:89:
17:fd:75:f2:ee:1a:84:1b:03:47:51:0b:ff:74:83:9b:61:c3:
82:18:51:79:2e:59:38:4c:f9:c4:39:e4:fe:4c:97:af:68:85:
ff:f3:a0:4a:15:99:f9:35:d5:1d:c7:c5:b1:51:5e:d9:79:3c:
6b:cc:43:5e:b2:3e:6d:5f:7c:76:56:a1:82:af:2c:33:ea:e5:
14:94:54:6b:df:0d:92:d3:9c:87:bd:83:ca:8b:28:f7:5f:95:
e8:d1:28:69:39:6a:82:76:47:58:56:a0:fe:b9:9b:d3:d1:77:
f9:96:58:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:16:24 2025 by rpki-client