Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/SPGlTW3VO5Qo2qyeU6cExDLlp5Y.roa
File: SPGlTW3VO5Qo2qyeU6cExDLlp5Y.roa (raw, json)
Hash identifier: 93o73kIT80/nqxHuHZe0xDd/MRranr3quDyqlAkXIGw=
Subject key identifier: 48:F1:A5:4D:6D:D5:3B:94:28:DA:AC:9E:53:A7:04:C4:32:E5:A7:96
Certificate issuer: /CN=0d4ee193b301665b56f6780f225fd44d144093af
Certificate serial: 018CCA2B03E9DB5453F5F4CEF26695F6821F
Authority key identifier: 0D:4E:E1:93:B3:01:66:5B:56:F6:78:0F:22:5F:D4:4D:14:40:93:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DU7hk7MBZltW9ngPIl_UTRRAk68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/SPGlTW3VO5Qo2qyeU6cExDLlp5Y.roa
Signing time: Tue 02 Jan 2024 12:34:25 +0000
ROA not before: Tue 02 Jan 2024 12:34:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35038
IP address blocks: 194.117.24.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2b:03:e9:db:54:53:f5:f4:ce:f2:66:95:f6:82:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d4ee193b301665b56f6780f225fd44d144093af
Validity
Not Before: Jan 2 12:34:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=48f1a54d6dd53b9428daac9e53a704c432e5a796
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d0:7c:96:be:4e:83:2b:81:95:a8:d1:d9:cc:
8f:5c:b2:79:ce:9a:f3:de:e7:e2:eb:ae:f2:f6:d3:
57:24:75:16:7d:7e:64:7c:df:60:80:70:e0:01:5f:
e6:bb:d2:44:21:43:e3:0b:74:aa:04:41:47:43:2a:
ee:10:95:95:ec:8e:a7:9d:a6:e8:e9:45:54:8c:60:
17:55:7d:ba:cb:60:19:2d:87:bd:5e:28:a2:4c:b4:
85:05:42:e7:90:ca:12:09:bd:b9:c7:5b:eb:c4:39:
89:0b:23:3f:ab:c6:08:e2:c4:0b:e2:f4:75:11:36:
88:72:97:9c:7f:9b:4c:50:fe:e6:bb:aa:cb:ca:61:
68:92:82:ec:ce:2f:f7:bd:ac:a5:67:7d:04:78:c4:
50:c9:a1:02:d3:d8:9e:a3:10:bd:6b:1e:85:09:f9:
e9:06:66:74:83:f3:d6:62:37:8b:8a:4f:6f:af:e5:
17:fc:ee:d6:d1:ed:fb:80:13:58:e4:ef:92:3f:57:
78:5f:66:2a:6d:30:aa:c6:b1:01:1c:0c:dc:26:6e:
eb:ab:dc:76:82:aa:88:e2:7a:9e:d4:8e:d9:6b:ec:
75:06:11:63:5c:c3:b0:3e:37:b3:0c:3a:4e:30:50:
43:0a:0c:df:4d:35:22:5a:7c:b2:eb:bc:e5:76:64:
49:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:F1:A5:4D:6D:D5:3B:94:28:DA:AC:9E:53:A7:04:C4:32:E5:A7:96
X509v3 Authority Key Identifier:
keyid:0D:4E:E1:93:B3:01:66:5B:56:F6:78:0F:22:5F:D4:4D:14:40:93:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DU7hk7MBZltW9ngPIl_UTRRAk68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/SPGlTW3VO5Qo2qyeU6cExDLlp5Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/DU7hk7MBZltW9ngPIl_UTRRAk68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.117.24.0/21
Signature Algorithm: sha256WithRSAEncryption
b3:e6:5e:c9:e4:6d:54:55:2d:f2:7e:1b:ba:1c:56:a4:b0:1f:
5c:bc:60:a2:c1:6a:fe:16:4a:c6:20:62:cd:a0:2a:2c:7e:31:
65:3b:39:01:5f:56:13:e3:f6:2b:8d:f3:1b:9e:a0:ef:d3:8f:
8a:bd:35:17:bc:3d:e5:9a:cf:dc:73:c9:73:f2:95:e0:0c:54:
2a:2e:2e:ab:db:b2:01:81:85:f0:21:d4:64:ce:c2:29:b5:fd:
a2:b5:e3:a8:06:05:9a:b9:45:39:8c:b4:65:e6:96:e2:81:fa:
04:6e:4e:98:ff:a9:cc:d1:ac:33:f5:1b:7c:bb:f4:c9:24:24:
21:45:4e:fc:19:36:cc:46:c6:f7:68:e9:80:f5:52:2d:8d:34:
2b:ce:ef:e6:63:e8:75:35:3f:05:59:e4:ac:7f:5e:ef:7c:7e:
76:e6:c5:9f:ef:f7:b1:30:1d:c4:bc:f2:78:dd:91:7d:29:9d:
bb:3a:8a:ed:ed:47:5f:ad:b7:53:60:c2:b2:fe:24:77:cf:89:
f3:f8:7d:23:b7:11:9f:1c:da:7c:c2:de:69:a2:7e:8a:ba:3c:
26:7e:81:16:20:0f:16:c6:2b:3f:d2:d1:35:1d:24:d5:16:f0:
6d:0f:d3:a1:c3:6c:8c:26:f3:bf:5f:b7:a5:00:ba:69:fc:2b:
4a:dc:18:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:55:33 2025 by rpki-client