Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/ea0623-36c1-4f3a-bff3-6314b98bda42/1/ssFjFRP8rOyA12qsYqju5Tngnd4.roa
File: ssFjFRP8rOyA12qsYqju5Tngnd4.roa (raw, json)
Hash identifier: hIS1+X5/5zlmutztUW28Al86ZCC1Pn71/f8lra8GU0U=
Subject key identifier: B2:C1:63:15:13:FC:AC:EC:80:D7:6A:AC:62:A8:EE:E5:39:E0:9D:DE
Certificate issuer: /CN=aaf2288014995932737ae7f9fc224df102141255
Certificate serial: 019424455C28547C59F0CB11032667FCC248
Authority key identifier: AA:F2:28:80:14:99:59:32:73:7A:E7:F9:FC:22:4D:F1:02:14:12:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qvIogBSZWTJzeuf5_CJN8QIUElU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/ea0623-36c1-4f3a-bff3-6314b98bda42/1/ssFjFRP8rOyA12qsYqju5Tngnd4.roa
Signing time: Wed 01 Jan 2025 23:48:32 +0000
ROA not before: Wed 01 Jan 2025 23:48:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198199
IP address blocks: 193.38.48.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:5c:28:54:7c:59:f0:cb:11:03:26:67:fc:c2:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aaf2288014995932737ae7f9fc224df102141255
Validity
Not Before: Jan 1 23:48:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b2c1631513fcacec80d76aac62a8eee539e09dde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:b2:26:e4:80:1d:cc:ca:bf:a9:c2:74:a9:e7:
8d:3e:a6:f8:85:5d:70:d7:f5:2f:52:fc:12:2c:c2:
24:6e:ce:48:c0:dd:fc:71:ac:23:c0:6b:e4:2b:cb:
e3:14:c8:e0:e6:00:b3:a1:c4:09:fc:6f:fe:f2:05:
ae:b9:68:0c:a4:5e:3b:8b:b0:59:dd:16:d4:15:ae:
85:8c:99:82:10:95:fd:83:f9:88:19:be:ea:11:b4:
43:5b:54:fc:1c:5d:26:65:e9:ca:34:17:b2:bb:02:
0e:15:b3:f1:29:0c:9c:bc:68:30:de:8c:8a:29:ce:
31:0e:52:b3:9e:92:9d:4c:f8:c4:55:8c:d5:20:a6:
91:24:d7:e9:db:61:8a:93:d3:ec:36:6d:ff:3c:87:
86:a9:c7:e5:ad:87:ba:77:bd:de:ed:46:dd:f9:2b:
a3:1b:04:87:10:9b:28:dd:b1:35:ee:d8:bc:f2:a7:
ba:66:1e:69:c8:e5:ff:d4:47:09:98:04:77:f9:57:
8a:ba:e7:5a:f3:f6:66:93:14:86:1e:98:16:0a:bf:
bb:10:a7:ec:f3:b9:25:b7:02:27:59:4e:a0:e1:f1:
18:8f:37:0b:4b:c4:99:7f:ee:ab:f6:6e:2c:f0:16:
53:0c:9d:64:8f:bf:bb:a7:cf:e4:d9:aa:35:b8:b7:
1e:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:C1:63:15:13:FC:AC:EC:80:D7:6A:AC:62:A8:EE:E5:39:E0:9D:DE
X509v3 Authority Key Identifier:
keyid:AA:F2:28:80:14:99:59:32:73:7A:E7:F9:FC:22:4D:F1:02:14:12:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qvIogBSZWTJzeuf5_CJN8QIUElU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/ea0623-36c1-4f3a-bff3-6314b98bda42/1/ssFjFRP8rOyA12qsYqju5Tngnd4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/ea0623-36c1-4f3a-bff3-6314b98bda42/1/qvIogBSZWTJzeuf5_CJN8QIUElU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.38.48.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:c0:6e:8f:c4:b2:ea:f2:c9:5a:00:1b:01:94:7b:e4:95:dd:
f3:da:f5:a7:f3:ea:8e:b4:40:73:a8:f9:80:c5:67:b3:d4:98:
11:74:80:f7:fc:54:b7:0a:9c:b8:ae:6b:67:c5:af:8d:9f:a7:
6d:ba:97:2f:8d:c8:d6:cf:0d:28:6e:e3:3c:cb:41:bd:61:12:
14:10:f0:d1:cc:25:c9:ef:96:a0:6f:8d:b3:c4:89:bd:09:90:
56:31:f8:04:19:97:d9:82:16:a0:12:06:88:d8:36:ac:0d:47:
66:08:02:c8:9b:69:90:4c:3b:61:69:b7:d4:5e:0e:d8:1d:59:
6e:f3:88:4b:e2:10:ad:65:75:64:28:79:56:3e:59:65:cb:14:
15:ef:26:52:7d:9a:c7:d0:ef:65:9c:b7:40:98:f0:3c:e2:10:
57:8a:bc:d7:84:d7:f9:26:13:13:5a:73:29:c6:69:da:81:47:
a4:52:e6:6b:fd:f8:53:c4:a4:44:e5:4d:96:3b:ae:4c:52:a1:
35:3d:5a:48:07:44:b0:4b:f0:5a:38:a2:54:71:15:b4:78:93:
84:cf:d2:94:4c:34:b8:9f:6b:5c:f6:bb:e0:59:ef:8e:4a:24:
b1:58:ec:6c:41:a7:fa:c1:e5:c1:dc:fe:c7:26:b5:aa:95:d0:
7c:c7:e7:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:42:22 2025 by rpki-client