Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/939b98-1508-4740-8dbf-24109edf6450/1/U_0Qm9bmlfNCn0QcnMuKjqVhpok.roa
File: U_0Qm9bmlfNCn0QcnMuKjqVhpok.roa (raw, json)
Hash identifier: rS2TodhOY6krb9NSbdEkyp8dkG2jF6/EwmhOAvSbJFk=
Subject key identifier: 53:FD:10:9B:D6:E6:95:F3:42:9F:44:1C:9C:CB:8A:8E:A5:61:A6:89
Certificate issuer: /CN=4d94f92adbd1bb45d63f9f947017a2164e9d0efa
Certificate serial: 019421B23582D6F94B3837298DA9F7CF0B20
Authority key identifier: 4D:94:F9:2A:DB:D1:BB:45:D6:3F:9F:94:70:17:A2:16:4E:9D:0E:FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TZT5KtvRu0XWP5-UcBeiFk6dDvo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/939b98-1508-4740-8dbf-24109edf6450/1/U_0Qm9bmlfNCn0QcnMuKjqVhpok.roa
Signing time: Wed 01 Jan 2025 11:48:34 +0000
ROA not before: Wed 01 Jan 2025 11:48:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1835
IP address blocks: 193.3.238.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:35:82:d6:f9:4b:38:37:29:8d:a9:f7:cf:0b:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d94f92adbd1bb45d63f9f947017a2164e9d0efa
Validity
Not Before: Jan 1 11:48:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=53fd109bd6e695f3429f441c9ccb8a8ea561a689
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:12:1d:4d:26:85:0c:d9:b0:92:7a:c9:b4:25:
6e:a2:c6:c1:e4:46:6e:73:1a:01:75:2b:29:33:4b:
8a:f3:3e:6c:56:0a:77:f8:f9:3a:e3:37:db:31:5f:
10:4a:32:0b:62:3e:f3:c7:98:e9:38:11:0f:0c:c9:
d3:4e:dc:3f:0d:26:e7:c7:30:1d:d7:15:09:4d:1f:
35:c0:78:3a:a3:88:38:34:38:ec:ca:82:d0:e1:a7:
f7:c2:03:2c:6c:ae:0c:ee:26:d5:79:07:89:4f:e2:
31:d2:5f:5d:71:dd:76:94:01:c1:99:54:e3:84:e2:
18:73:70:14:50:59:5e:fc:f0:e9:40:b0:81:c3:99:
18:87:67:7d:b6:78:87:93:f6:41:12:04:18:50:be:
89:ad:07:46:e2:2f:95:9c:9d:09:4b:36:66:ed:6b:
a6:24:ca:5a:53:ad:b7:29:22:55:92:87:22:80:29:
8f:e4:4c:40:d3:d2:18:fc:2b:2a:77:23:99:52:05:
d9:da:8d:ee:e5:d1:83:54:c2:6e:e1:79:07:fd:f7:
45:f2:7d:bf:60:2a:61:41:fe:b5:7d:9c:c8:ec:ea:
e6:a1:ee:e8:01:0d:03:9c:7f:02:c4:de:19:1c:33:
b8:ea:0e:16:34:0d:6a:72:93:72:8f:84:ca:3a:db:
64:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:FD:10:9B:D6:E6:95:F3:42:9F:44:1C:9C:CB:8A:8E:A5:61:A6:89
X509v3 Authority Key Identifier:
keyid:4D:94:F9:2A:DB:D1:BB:45:D6:3F:9F:94:70:17:A2:16:4E:9D:0E:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TZT5KtvRu0XWP5-UcBeiFk6dDvo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/939b98-1508-4740-8dbf-24109edf6450/1/U_0Qm9bmlfNCn0QcnMuKjqVhpok.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/939b98-1508-4740-8dbf-24109edf6450/1/TZT5KtvRu0XWP5-UcBeiFk6dDvo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.3.238.0/24
Signature Algorithm: sha256WithRSAEncryption
56:b9:d0:d1:af:28:7c:f3:a0:9e:d6:fd:92:0f:0a:a7:08:dd:
aa:d9:dc:e4:ff:1b:73:c4:28:be:3c:a2:8f:01:8f:0a:69:f3:
ab:ae:7f:09:ca:8c:7f:7e:84:60:52:20:60:36:94:4f:de:ad:
6c:6a:1b:7c:9a:9d:f5:16:39:9c:c7:dd:18:91:82:d7:69:1e:
98:05:5f:32:35:43:7d:f4:c7:29:ce:ed:21:ff:4d:bc:31:af:
7d:bc:f1:33:fc:36:bc:a0:7b:0e:99:2e:9e:c0:f0:17:c1:79:
d8:bb:97:d9:e1:78:86:21:8b:7c:4d:ef:43:c7:d4:ee:56:f6:
fb:60:39:8e:44:31:97:05:03:ce:6e:43:61:70:77:44:62:38:
d2:98:1a:fa:6c:ac:31:8b:9a:91:0f:13:cb:e7:4e:ba:f6:c0:
cb:80:4c:f5:d9:9c:6a:5b:9e:a7:3f:88:2c:ab:5b:8a:7a:24:
75:88:2f:2c:6a:d1:9e:06:d3:a8:54:29:59:a8:33:b1:c6:6b:
be:7c:c5:49:ea:58:92:5a:4c:0a:34:5e:22:6b:cb:db:2f:7b:
98:5b:d0:15:f6:56:d1:11:6f:20:58:49:d6:9a:c4:8d:1d:db:
eb:77:a6:bb:66:af:56:25:3b:55:c4:e6:74:75:11:af:aa:fa:
f7:ef:d0:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:54:32 2025 by rpki-client