Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/c2e16e-ab68-4429-96ee-002f26e3b898/1/VS3bQYSeAtXsdMKQT45gnaOg_3E.roa
File: VS3bQYSeAtXsdMKQT45gnaOg_3E.roa (raw, json)
Hash identifier: 8Eo8JUt8jW6jFExDivNS8Nwz27PBmVvX9LTn8p3ZZD4=
Subject key identifier: 55:2D:DB:41:84:9E:02:D5:EC:74:C2:90:4F:8E:60:9D:A3:A0:FF:71
Certificate issuer: /CN=2f5cab8a09a9fde23c9635f8e164aef09e17948c
Certificate serial: 01896478EA31767EB813E15B54392231C585
Authority key identifier: 2F:5C:AB:8A:09:A9:FD:E2:3C:96:35:F8:E1:64:AE:F0:9E:17:94:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L1yrigmp_eI8ljX44WSu8J4XlIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/c2e16e-ab68-4429-96ee-002f26e3b898/1/VS3bQYSeAtXsdMKQT45gnaOg_3E.roa
Signing time: Mon 17 Jul 2023 15:29:53 +0000
ROA not before: Mon 17 Jul 2023 15:29:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62240
IP address blocks: 193.160.216.0/24 maxlen: 24
193.160.218.0/24 maxlen: 24
193.160.217.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:64:78:ea:31:76:7e:b8:13:e1:5b:54:39:22:31:c5:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f5cab8a09a9fde23c9635f8e164aef09e17948c
Validity
Not Before: Jul 17 15:29:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=552ddb41849e02d5ec74c2904f8e609da3a0ff71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:47:f3:33:fd:21:3c:37:73:8c:04:c4:39:be:
b9:d0:c9:57:6e:1a:41:16:c5:db:4c:f1:4d:05:19:
2f:f0:35:87:28:23:c9:0f:f8:84:19:db:fe:8d:98:
87:81:69:9e:4b:31:ff:90:be:1d:6a:33:18:14:82:
94:83:28:92:bd:4a:ab:2d:3c:3d:84:ad:00:6d:73:
e0:ee:29:60:21:23:c0:3c:c1:27:a0:f2:fc:32:92:
fb:b1:9d:2d:e2:3e:55:72:f4:2e:16:cb:03:e2:88:
86:10:49:3c:a3:fc:b0:5d:9b:62:4a:b1:29:39:b6:
b2:95:f0:fa:5b:9c:32:bb:85:2f:10:53:ed:cd:c4:
64:7f:e5:37:eb:36:ef:20:a8:b5:67:0b:37:4e:2f:
08:44:3f:e7:3c:d4:47:75:80:41:fc:6a:88:00:b1:
db:3e:8f:07:81:83:32:46:9f:af:3d:5c:b8:c3:f8:
15:d8:20:8e:20:3a:e6:90:61:66:27:2b:cc:a1:88:
d6:89:88:af:09:f8:2c:8c:63:3c:26:f9:eb:5a:a1:
f2:53:42:15:37:b7:f4:17:22:43:bd:eb:d5:dc:01:
43:ae:23:f3:9a:47:1d:84:77:b1:9d:a8:4c:dd:ac:
cf:18:7e:61:12:b2:e2:b4:64:eb:9b:81:5f:99:ec:
18:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:2D:DB:41:84:9E:02:D5:EC:74:C2:90:4F:8E:60:9D:A3:A0:FF:71
X509v3 Authority Key Identifier:
keyid:2F:5C:AB:8A:09:A9:FD:E2:3C:96:35:F8:E1:64:AE:F0:9E:17:94:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L1yrigmp_eI8ljX44WSu8J4XlIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c2e16e-ab68-4429-96ee-002f26e3b898/1/VS3bQYSeAtXsdMKQT45gnaOg_3E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c2e16e-ab68-4429-96ee-002f26e3b898/1/L1yrigmp_eI8ljX44WSu8J4XlIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.160.216.0-193.160.218.255
Signature Algorithm: sha256WithRSAEncryption
a9:de:1f:b8:ac:b6:e4:e6:cc:65:62:8f:4f:e3:2d:ba:0f:3c:
33:97:28:0f:e2:57:72:c5:d6:e7:6d:2a:85:da:8b:96:e9:2d:
a3:b4:e8:42:1d:7b:4e:4f:1a:ee:0c:d4:4c:61:e7:12:52:b9:
02:fe:9a:0f:85:58:c6:bf:57:0d:e6:2a:ea:40:0d:a5:8d:e2:
00:8e:25:57:df:73:23:f9:30:3b:25:ac:e6:8a:8d:74:d6:94:
81:f0:ac:14:0d:5d:86:6f:e1:7d:b5:62:97:8e:7b:85:7a:f4:
5b:f0:9e:50:e4:9a:65:92:3c:69:41:46:e9:ab:e2:2a:a2:1a:
4c:6d:7c:05:0a:d0:44:82:7d:37:60:ab:97:33:c9:ea:b9:3c:
cf:96:a1:2e:50:1a:4f:02:82:84:bd:9a:4f:ea:55:86:19:e8:
57:b1:11:2a:f7:b4:85:8e:b9:b5:89:42:8e:c3:b1:53:49:e2:
45:94:2a:86:85:1f:8a:f3:79:c4:f4:df:fb:90:18:6f:24:8b:
bc:54:80:ec:10:d3:aa:23:26:8d:84:9c:77:27:e0:20:c5:ab:
ba:81:54:c1:4a:b3:fa:42:3c:78:49:ec:34:97:58:56:6f:e4:
67:27:29:a0:db:29:f7:a5:d7:76:38:08:ba:e4:39:16:07:3b:
eb:4c:58:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 17:51:46 2025 by rpki-client