Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/31a837-952b-4341-bf6c-5e13ff3ef3e9/1/KqFbO14tWjVi-9bo7ALp0deds6Q.roa
File: KqFbO14tWjVi-9bo7ALp0deds6Q.roa (raw, json)
Hash identifier: OlQpqe12jK7Q5E73rjrva2xvDZpDUknvKn4ssNYDdGc=
Subject key identifier: 2A:A1:5B:3B:5E:2D:5A:35:62:FB:D6:E8:EC:02:E9:D1:D7:9D:B3:A4
Certificate issuer: /CN=f353c73f1fbf4bfb46d06750e25660cda1d801b1
Certificate serial: 0194244540CD28F92406CB4EC617FFE54B4D
Authority key identifier: F3:53:C7:3F:1F:BF:4B:FB:46:D0:67:50:E2:56:60:CD:A1:D8:01:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/81PHPx-_S_tG0GdQ4lZgzaHYAbE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/31a837-952b-4341-bf6c-5e13ff3ef3e9/1/KqFbO14tWjVi-9bo7ALp0deds6Q.roa
Signing time: Wed 01 Jan 2025 23:48:25 +0000
ROA not before: Wed 01 Jan 2025 23:48:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209242
IP address blocks: 193.162.35.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:40:cd:28:f9:24:06:cb:4e:c6:17:ff:e5:4b:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f353c73f1fbf4bfb46d06750e25660cda1d801b1
Validity
Not Before: Jan 1 23:48:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2aa15b3b5e2d5a3562fbd6e8ec02e9d1d79db3a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:31:7c:a9:d0:c0:71:3a:95:32:1c:f2:d9:71:
c7:9a:03:92:5d:61:1d:72:a2:a1:ce:9f:76:ec:5b:
96:f6:cc:92:71:13:df:0f:30:21:c7:3c:9d:78:0a:
2b:a0:58:2d:b9:92:af:3d:b5:e8:db:13:6c:b4:86:
5e:9f:ce:79:16:2d:d5:c5:0f:df:8c:e7:98:67:a2:
97:d4:59:e6:1d:1c:d3:c4:dc:b6:c8:01:f0:cf:97:
dc:4b:4a:84:aa:ca:b9:72:0e:3c:d8:ab:6a:1e:78:
d5:36:63:79:3c:7d:ad:cc:92:a4:7d:53:09:2c:5d:
76:2b:01:c1:90:da:8c:be:9b:8f:d1:dc:1c:53:f4:
2a:88:a9:1d:36:1a:72:55:b5:55:28:fc:04:00:d1:
42:9f:ce:a9:d3:80:3a:62:24:09:69:cd:9c:60:18:
98:7b:ee:30:8e:4a:64:3d:8b:a6:51:ec:5a:48:19:
f5:4b:62:63:fd:cd:96:20:79:af:b0:33:68:86:27:
f8:d9:be:05:9d:80:02:29:55:e7:b7:85:94:a7:75:
5f:24:45:b3:42:ad:86:a5:56:6d:74:06:40:e7:40:
52:e3:40:68:70:2f:00:5a:54:04:30:3d:7a:53:54:
0c:d8:b8:69:38:61:68:31:1a:96:6e:e1:3c:db:17:
65:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:A1:5B:3B:5E:2D:5A:35:62:FB:D6:E8:EC:02:E9:D1:D7:9D:B3:A4
X509v3 Authority Key Identifier:
keyid:F3:53:C7:3F:1F:BF:4B:FB:46:D0:67:50:E2:56:60:CD:A1:D8:01:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/81PHPx-_S_tG0GdQ4lZgzaHYAbE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/31a837-952b-4341-bf6c-5e13ff3ef3e9/1/KqFbO14tWjVi-9bo7ALp0deds6Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/31a837-952b-4341-bf6c-5e13ff3ef3e9/1/81PHPx-_S_tG0GdQ4lZgzaHYAbE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.162.35.0/24
Signature Algorithm: sha256WithRSAEncryption
06:59:93:ea:74:ac:82:28:57:bd:1b:be:d6:79:05:eb:87:18:
e6:3a:cc:33:61:9c:8d:a4:f5:25:ec:ca:5b:8f:fc:4c:cd:d9:
00:ab:cd:50:58:21:a5:15:e8:6b:1d:4f:aa:da:38:9b:56:b5:
f5:97:5c:05:e0:3d:cc:0e:43:bc:f7:ce:1b:75:62:50:06:21:
cb:bb:09:a1:20:b2:31:8b:cb:e1:e4:ce:9e:40:d7:16:1e:07:
54:4b:c4:e6:f8:74:3a:6d:23:99:41:7e:93:e0:bb:e6:67:97:
0d:0e:f3:b0:f2:b5:ca:45:8f:bb:95:f2:36:18:38:68:d5:c5:
97:89:c0:eb:b7:89:e2:77:4d:8c:d9:1e:01:2e:04:ce:7d:11:
9a:df:7b:86:2c:1a:c2:f4:60:7c:c5:16:f2:e0:47:b7:6b:94:
f9:55:9c:dc:ba:78:03:c9:1d:5f:19:ec:5f:11:32:73:5c:0a:
38:f3:51:43:57:75:51:8e:35:84:8c:ee:56:06:15:b0:9d:00:
5d:44:0a:e9:ff:f2:12:3f:03:5d:08:f9:eb:d2:8d:18:7d:d7:
3c:d2:04:c0:06:4c:15:b2:39:64:52:60:0c:b8:0b:f7:4b:a0:
78:b5:6f:77:b8:de:79:02:4d:26:59:29:15:f7:5f:d2:ec:87:
98:d0:a6:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:41:30 2025 by rpki-client