Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/3547ff-202c-492f-9699-b27c80107861/1/bY-MRU6qyd1zxlWzVkPhYnBaGRc.roa
File: bY-MRU6qyd1zxlWzVkPhYnBaGRc.roa (raw, json)
Hash identifier: m7D+RleoPBthlNeKRU6QIjD+POHPpvodg5Aamer8rck=
Subject key identifier: 6D:8F:8C:45:4E:AA:C9:DD:73:C6:55:B3:56:43:E1:62:70:5A:19:17
Certificate issuer: /CN=947b9c9d1c1bebca2605323946c809887be90871
Certificate serial: 02C22A21
Authority key identifier: 94:7B:9C:9D:1C:1B:EB:CA:26:05:32:39:46:C8:09:88:7B:E9:08:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lHucnRwb68omBTI5RsgJiHvpCHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/3547ff-202c-492f-9699-b27c80107861/1/bY-MRU6qyd1zxlWzVkPhYnBaGRc.roa
Signing time: Sat 01 Jan 2022 00:50:29 +0000
ROA not before: Sat 01 Jan 2022 00:50:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42926
IP address blocks: 193.148.252.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46279201 (0x2c22a21)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=947b9c9d1c1bebca2605323946c809887be90871
Validity
Not Before: Jan 1 00:50:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6d8f8c454eaac9dd73c655b35643e162705a1917
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:06:bf:65:fc:ca:76:95:37:21:e4:65:6b:6d:
8b:a9:6a:f8:4e:9d:3d:23:e4:13:f9:b3:cf:ea:0d:
b2:04:9c:e3:b9:6c:3b:70:93:25:17:ca:12:83:94:
5d:ca:ae:04:72:88:51:05:5a:c0:f7:b7:71:ef:be:
a1:94:dc:3e:e4:aa:02:ee:15:a5:14:b1:72:5a:c1:
f6:10:f3:da:da:88:af:8c:1b:96:a0:06:93:52:44:
cf:4e:fd:b1:63:5e:7d:1e:90:06:3a:ec:bf:75:08:
8a:34:c5:c8:84:33:b8:c9:ed:b5:fe:81:af:e1:91:
e1:5a:84:8c:b9:f4:f3:8a:5c:36:ee:be:1f:84:81:
8e:7c:84:37:78:53:64:ee:4e:e7:81:0a:33:c1:56:
04:43:c5:08:d9:fa:b0:a0:dc:51:89:15:65:42:7f:
26:55:df:0d:96:66:69:84:fd:8e:15:ef:c8:26:79:
60:20:cc:f4:46:31:30:32:3c:de:2f:f9:19:c8:f9:
e5:1c:d7:34:0f:e1:9f:b1:25:1f:eb:8f:28:b5:82:
8d:a8:7c:fc:a8:0a:5b:60:a8:dc:88:21:fd:97:40:
26:06:1b:d2:b3:98:cb:8f:57:97:ae:aa:ad:3d:61:
ad:68:9c:10:f3:49:58:15:46:14:23:cb:5d:f8:e8:
1a:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:8F:8C:45:4E:AA:C9:DD:73:C6:55:B3:56:43:E1:62:70:5A:19:17
X509v3 Authority Key Identifier:
keyid:94:7B:9C:9D:1C:1B:EB:CA:26:05:32:39:46:C8:09:88:7B:E9:08:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lHucnRwb68omBTI5RsgJiHvpCHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/3547ff-202c-492f-9699-b27c80107861/1/bY-MRU6qyd1zxlWzVkPhYnBaGRc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/3547ff-202c-492f-9699-b27c80107861/1/lHucnRwb68omBTI5RsgJiHvpCHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.148.252.0/23
Signature Algorithm: sha256WithRSAEncryption
69:bf:a7:cc:fa:7a:b6:f5:32:43:60:06:b6:ed:93:b4:24:fe:
95:00:24:fb:a0:30:37:3d:cb:3b:56:a8:b8:f4:5a:9a:5a:b1:
2e:c9:fa:82:5b:e4:0b:af:6e:2f:e6:e1:c7:e1:5e:54:a7:10:
23:04:17:21:3c:d0:4c:f4:46:f9:b0:b2:bf:6d:b6:69:07:b5:
b6:8d:bc:dc:11:5b:8f:3f:2c:05:a5:d4:d3:3b:5c:99:cd:7e:
96:64:7f:9d:05:1c:fd:a3:d8:8c:ea:73:8f:ef:a2:ad:a9:1f:
7a:f2:f4:a5:78:17:7d:ab:bb:f8:f6:e9:b8:c9:bf:cd:fd:d3:
c8:3b:c6:3d:fe:da:51:3e:d1:70:d0:11:b2:9f:0a:ab:f0:2b:
cc:99:af:f3:4c:53:75:e7:e9:c0:11:08:73:fa:61:46:e6:6c:
11:f6:42:3a:3c:55:b4:3a:9e:04:2e:43:e5:23:93:1c:58:e4:
df:67:17:e1:90:4f:12:a8:0a:8e:06:eb:24:fe:48:5d:9d:89:
d5:e2:ae:99:bb:e7:92:10:ac:b9:e7:1f:3d:78:4b:9f:23:de:
d8:c6:d5:81:de:6f:97:f0:8a:ed:ab:5f:e9:5d:40:75:cf:54:
df:c1:6a:f7:5c:3f:08:b0:3c:73:9b:73:fe:d2:70:97:bf:d7:
51:c0:fa:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:42:44 2025 by rpki-client