Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/ae1b89-fd48-4b2d-a88e-966be4832815/1/UTvK6gSJU03H7EOW3gSzFazwB7M.roa
File: UTvK6gSJU03H7EOW3gSzFazwB7M.roa (raw, json)
Hash identifier: fFNxwITyp66ny+cQJs93d3VRTa/z6HUTvmCKvoybY9I=
Subject key identifier: 51:3B:CA:EA:04:89:53:4D:C7:EC:43:96:DE:04:B3:15:AC:F0:07:B3
Certificate issuer: /CN=a4dc8a4e916aa3f78ef78047ac20d0d0f8a950f9
Certificate serial: 01941F8C49578DA9B039D8B253D672F1A6E8
Authority key identifier: A4:DC:8A:4E:91:6A:A3:F7:8E:F7:80:47:AC:20:D0:D0:F8:A9:50:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pNyKTpFqo_eO94BHrCDQ0PipUPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/ae1b89-fd48-4b2d-a88e-966be4832815/1/UTvK6gSJU03H7EOW3gSzFazwB7M.roa
Signing time: Wed 01 Jan 2025 01:47:55 +0000
ROA not before: Wed 01 Jan 2025 01:47:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210302
IP address blocks: 193.202.40.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:49:57:8d:a9:b0:39:d8:b2:53:d6:72:f1:a6:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4dc8a4e916aa3f78ef78047ac20d0d0f8a950f9
Validity
Not Before: Jan 1 01:47:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=513bcaea0489534dc7ec4396de04b315acf007b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c7:a3:0e:d4:3d:60:36:dc:ac:a9:37:e2:2d:
9f:d2:9f:6d:37:71:a0:3f:88:0b:bc:18:52:03:ae:
4e:ed:65:f0:fe:3b:08:0a:b6:2e:0b:05:2b:c1:28:
1b:24:1d:a6:dd:33:2b:55:57:64:70:b9:b1:13:da:
b0:d0:bf:79:b6:47:85:b4:6d:de:0e:ad:b0:0b:52:
d8:9b:3a:72:af:c1:1f:cb:8e:ac:d0:27:a7:ee:2d:
be:67:18:3b:43:30:8c:b8:6f:ed:44:59:ff:f2:82:
d3:3f:41:0e:85:d7:17:11:15:55:5e:63:03:ce:52:
bd:a8:9f:ce:df:3c:83:4d:ce:1b:76:22:fc:5e:27:
d8:63:b8:be:be:98:8d:0e:fc:78:3b:99:06:a7:b7:
5d:1f:7b:0d:2a:32:89:70:27:ff:43:b3:9e:f2:ad:
0c:f3:90:49:a7:1e:d2:88:1d:05:eb:04:1d:56:9d:
05:0f:cb:45:95:ae:8b:b5:2c:35:53:22:bb:a0:a4:
1a:e0:88:2c:93:2a:5c:e0:df:8a:b2:44:c4:aa:f5:
70:fe:24:ec:ac:cb:9b:a2:aa:36:73:74:77:71:f7:
e5:df:06:c4:f8:49:b0:a0:fd:7e:87:c4:77:ab:f5:
c8:44:dd:bd:2f:de:f3:4c:8c:af:5e:07:2b:20:89:
89:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:3B:CA:EA:04:89:53:4D:C7:EC:43:96:DE:04:B3:15:AC:F0:07:B3
X509v3 Authority Key Identifier:
keyid:A4:DC:8A:4E:91:6A:A3:F7:8E:F7:80:47:AC:20:D0:D0:F8:A9:50:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pNyKTpFqo_eO94BHrCDQ0PipUPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/ae1b89-fd48-4b2d-a88e-966be4832815/1/UTvK6gSJU03H7EOW3gSzFazwB7M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/ae1b89-fd48-4b2d-a88e-966be4832815/1/pNyKTpFqo_eO94BHrCDQ0PipUPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.202.40.0/24
Signature Algorithm: sha256WithRSAEncryption
09:b1:32:1d:d6:82:73:bb:a0:0c:7e:9e:41:21:fe:fc:9f:23:
b7:a4:39:bd:7e:8b:fe:df:d5:ef:3c:6e:ab:ff:43:db:40:29:
d8:4e:29:3d:7c:6b:69:e9:ee:08:fe:4b:16:36:e8:38:eb:fb:
9a:7d:cb:c2:5a:95:00:af:88:79:57:c5:c2:1a:06:98:ea:a7:
a9:74:b6:6a:16:91:e4:3e:3a:41:90:71:6c:68:64:89:52:8f:
9d:33:1e:d9:b3:d0:ff:82:31:85:55:db:92:cb:8f:2b:ab:53:
10:77:17:20:71:17:d2:01:96:20:9d:14:5e:5f:25:ac:82:bf:
85:ff:9d:95:ae:47:05:36:f0:b8:cd:e3:d0:8d:89:88:ff:a4:
83:a5:86:29:c2:39:18:7a:dd:fe:10:b5:60:f4:89:77:10:50:
f5:b4:b5:7f:be:a7:2a:a8:45:af:84:a6:13:fa:7a:24:4d:02:
01:49:08:c1:50:5b:be:0d:09:cd:7e:87:08:c7:f1:44:aa:72:
4f:39:08:59:8c:f5:8f:9c:9e:5e:37:04:0e:a1:0c:4f:84:d6:
73:2b:b4:60:a6:ed:ff:9d:65:d3:05:4c:01:fa:cb:8d:f3:40:
8b:b8:39:6c:b0:51:e7:8c:8c:82:58:6b:09:42:ec:2a:bc:7a:
7b:d0:27:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 13:03:27 2025 by rpki-client