Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/72cbbf-84b1-41a8-9489-649ab2d16e29/1/cQ48ehFtZGWq8kyWWOQD5olSE5k.roa
File: cQ48ehFtZGWq8kyWWOQD5olSE5k.roa (raw, json)
Hash identifier: vXSjAKg9EP0+T+C+XLelaWBNg9C8KEKemd0A8M1c8LU=
Subject key identifier: 71:0E:3C:7A:11:6D:64:65:AA:F2:4C:96:58:E4:03:E6:89:52:13:99
Certificate issuer: /CN=4bb679f9acbe9e9858f685f260cb31601209b3ca
Certificate serial: 0D1E930B
Authority key identifier: 4B:B6:79:F9:AC:BE:9E:98:58:F6:85:F2:60:CB:31:60:12:09:B3:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S7Z5-ay-nphY9oXyYMsxYBIJs8o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/72cbbf-84b1-41a8-9489-649ab2d16e29/1/cQ48ehFtZGWq8kyWWOQD5olSE5k.roa
Signing time: Sat 01 Jan 2022 15:55:41 +0000
ROA not before: Sat 01 Jan 2022 15:55:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60226
IP address blocks: 193.57.96.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 220107531 (0xd1e930b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bb679f9acbe9e9858f685f260cb31601209b3ca
Validity
Not Before: Jan 1 15:55:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=710e3c7a116d6465aaf24c9658e403e689521399
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:61:42:69:e3:bf:c5:0e:96:52:fc:72:9e:95:
4a:0b:d9:7e:8b:c5:8d:5b:05:d3:7b:f1:aa:19:1d:
1f:3b:57:30:b0:f8:ab:4b:33:08:63:af:6f:9b:c5:
32:20:87:a7:a9:e4:1c:58:a0:61:32:a4:49:06:d8:
a5:f8:66:0c:99:a0:da:fc:6b:8e:c4:22:1d:a9:f0:
05:b9:17:90:2a:05:32:dc:b9:09:2d:d0:1d:62:c4:
5c:d0:48:d3:b6:7b:a5:e9:d9:68:80:7c:ba:26:9e:
a1:ae:f3:d1:a7:af:6c:32:e0:88:7a:5e:cb:a7:bc:
0d:36:1d:8b:cc:e2:5f:9f:83:bd:2f:c0:df:f8:ce:
1f:0d:45:a5:9e:3c:b2:67:ea:c2:e0:73:2e:be:82:
32:a4:a7:71:26:eb:85:4e:30:b2:79:c6:fd:09:a7:
2e:c5:6c:c8:10:7b:5d:59:3b:9d:7c:e0:0b:67:47:
a6:40:60:2b:0f:ee:7d:28:f0:87:54:0a:d5:dd:94:
50:c8:24:1e:44:cc:40:83:13:c0:22:c8:24:47:96:
03:3a:56:9c:15:98:b5:f8:b3:79:43:d5:d5:9d:2b:
f7:c2:f5:7a:4e:30:bc:9e:31:f7:3a:8f:a2:78:f6:
f4:44:e5:cb:df:e1:56:c9:da:58:61:b9:35:e0:ad:
4c:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:0E:3C:7A:11:6D:64:65:AA:F2:4C:96:58:E4:03:E6:89:52:13:99
X509v3 Authority Key Identifier:
keyid:4B:B6:79:F9:AC:BE:9E:98:58:F6:85:F2:60:CB:31:60:12:09:B3:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S7Z5-ay-nphY9oXyYMsxYBIJs8o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/72cbbf-84b1-41a8-9489-649ab2d16e29/1/cQ48ehFtZGWq8kyWWOQD5olSE5k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/72cbbf-84b1-41a8-9489-649ab2d16e29/1/S7Z5-ay-nphY9oXyYMsxYBIJs8o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.57.96.0/24
Signature Algorithm: sha256WithRSAEncryption
21:36:8e:ba:99:1a:30:af:27:67:b5:43:e3:31:24:93:e4:19:
bc:d8:bf:10:84:0a:db:e7:12:a5:43:70:61:c3:bb:b5:31:88:
92:59:16:28:29:c8:95:92:22:34:a4:7b:26:16:83:96:d3:c7:
71:78:a9:7a:cb:53:c5:85:51:4c:1f:ad:f8:7d:1f:fd:ba:a9:
81:f1:62:bb:40:71:a8:73:be:d3:14:d2:f3:0a:41:35:bb:15:
af:3c:27:36:cf:00:0c:3b:3e:c6:7d:4d:09:a0:56:98:8a:f0:
51:d3:7d:28:ac:3e:a6:f9:46:71:ce:4f:51:6d:45:64:09:4e:
1d:e5:6e:21:0e:95:8d:30:25:a8:82:6c:20:e5:8c:57:a1:25:
35:de:35:9e:7a:d5:ce:31:45:b7:93:c1:b8:8d:3e:0a:ae:09:
43:10:2b:92:a0:98:59:60:cc:57:35:1a:f6:22:e5:26:64:70:
8a:d3:5a:8a:27:c2:a4:d4:41:83:ab:18:46:16:9f:a9:66:f7:
de:c0:b5:9d:2e:80:be:3c:b2:c4:a3:e7:ef:b1:8c:5f:d0:91:
c4:27:fd:fd:37:e5:3d:8f:7b:32:e2:8f:c3:bb:08:fa:4b:06:
1a:fc:6f:9a:59:51:81:62:65:a5:a5:8f:cc:e2:82:79:c7:a2:
9e:9c:36:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:25:48 2025 by rpki-client