Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/c2720f-106d-476f-80af-06188cf7a3c2/1/_XeT2qhA7bow6qDulQ5oRK5xK48.roa
File: _XeT2qhA7bow6qDulQ5oRK5xK48.roa (raw, json)
Hash identifier: 2pX4tHxvV+EK7wF0A5pktjNB+1n7ia4bBZ0zIKfRx0Q=
Subject key identifier: FD:77:93:DA:A8:40:ED:BA:30:EA:A0:EE:95:0E:68:44:AE:71:2B:8F
Certificate issuer: /CN=0b23ac20bc1e4585c4fd4cc8e7bc976331b85c6e
Certificate serial: 034C8524
Authority key identifier: 0B:23:AC:20:BC:1E:45:85:C4:FD:4C:C8:E7:BC:97:63:31:B8:5C:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CyOsILweRYXE_UzI57yXYzG4XG4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/c2720f-106d-476f-80af-06188cf7a3c2/1/_XeT2qhA7bow6qDulQ5oRK5xK48.roa
Signing time: Thu 05 May 2022 09:56:43 +0000
ROA not before: Thu 05 May 2022 09:56:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49646
IP address blocks: 193.169.156.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 55346468 (0x34c8524)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b23ac20bc1e4585c4fd4cc8e7bc976331b85c6e
Validity
Not Before: May 5 09:56:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fd7793daa840edba30eaa0ee950e6844ae712b8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:f1:d8:53:1c:6f:e7:49:94:6e:84:34:3f:23:
9e:79:ac:29:63:23:13:e5:b1:bd:2f:f0:e2:5e:d0:
2c:97:f3:2a:46:4f:62:3c:a9:07:9e:d1:05:46:ae:
20:cc:83:df:c8:ae:ad:eb:66:5e:5a:86:e4:b6:18:
4e:e4:4e:ad:6f:53:28:e8:dc:f5:41:fa:7f:9b:53:
af:f6:75:06:97:6e:91:52:7f:4b:9b:1c:f3:7e:7d:
18:53:0c:e1:b6:4b:d3:84:43:5f:0b:80:19:03:3a:
af:23:26:2a:36:d4:ff:c8:d3:79:9b:d2:48:92:e8:
c0:23:7b:fb:b1:5e:6e:94:fa:47:0e:04:2b:27:5c:
c9:97:99:47:56:20:b7:7f:71:2f:c5:14:ee:71:e1:
47:30:d5:c8:84:0c:1c:ea:c5:3e:ab:8d:f0:ef:1a:
05:83:47:95:14:fb:63:d3:08:12:f6:75:c6:ba:39:
58:5e:66:5e:02:ec:56:15:08:68:c7:e7:30:25:d2:
7e:a7:9c:fa:29:da:6a:49:93:d3:4d:77:fc:7c:c7:
4d:b7:d3:4d:9c:4c:c3:ca:3c:a6:58:4b:13:81:3d:
5d:76:85:9f:07:e2:e7:2a:e8:01:b8:f2:b7:78:df:
89:a3:1f:31:51:04:83:34:25:75:da:fd:3b:63:9e:
ea:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:77:93:DA:A8:40:ED:BA:30:EA:A0:EE:95:0E:68:44:AE:71:2B:8F
X509v3 Authority Key Identifier:
keyid:0B:23:AC:20:BC:1E:45:85:C4:FD:4C:C8:E7:BC:97:63:31:B8:5C:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CyOsILweRYXE_UzI57yXYzG4XG4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/c2720f-106d-476f-80af-06188cf7a3c2/1/_XeT2qhA7bow6qDulQ5oRK5xK48.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/c2720f-106d-476f-80af-06188cf7a3c2/1/CyOsILweRYXE_UzI57yXYzG4XG4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.169.156.0/23
Signature Algorithm: sha256WithRSAEncryption
8e:8b:c2:32:e8:2e:4b:8b:c4:33:2a:2e:74:bc:94:6f:26:ad:
c6:6f:19:76:d1:78:07:38:9e:dc:ce:80:4c:c4:5e:74:65:e4:
bb:52:20:80:1b:8d:6e:bf:10:18:6f:fe:af:45:9e:89:84:cf:
81:00:85:6a:d9:43:66:60:47:09:51:f5:9b:4d:5e:ff:72:c9:
b2:5b:a0:4a:c8:4e:b4:13:e7:9e:1d:60:d1:fd:d8:a0:aa:c9:
c7:d2:e9:2f:89:da:94:11:82:df:12:8a:0f:c2:3f:0d:94:25:
e4:9d:b0:4c:85:ea:7d:8b:fd:62:dd:b8:ae:ed:f2:ec:57:01:
7f:5f:19:93:0b:f5:e6:eb:0f:cb:4d:1a:e5:2c:f6:e3:ee:19:
14:0d:1e:bd:20:64:a8:2b:72:82:d8:42:46:b7:c0:26:61:f2:
38:b9:8d:0c:91:3b:bb:f0:8c:19:65:fd:38:e3:90:ee:44:c9:
4f:20:c2:e4:c8:ab:db:8a:d3:77:e5:8e:ce:9e:e0:b7:90:d5:
4f:d8:0a:58:40:de:1e:d9:db:a9:f2:f3:6d:5c:b7:32:46:be:
07:ab:7c:8b:79:aa:2f:76:6e:b6:af:59:53:1e:e7:dc:db:15:
bb:50:52:eb:d8:94:8f:65:57:ef:58:e9:7d:6b:3d:40:4b:1a:
8e:fc:51:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:20:11 2025 by rpki-client