Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/c2e16e-ab68-4429-96ee-002f26e3b898/1/ce3s-l78XzI7ZR6-pTcvYWg6bN8.roa
File: ce3s-l78XzI7ZR6-pTcvYWg6bN8.roa (raw, json)
Hash identifier: vhEXecEtzanLvP3pYs42MRccvnoJlmf0Yc+ADB1YVeU=
Subject key identifier: 71:ED:EC:FA:5E:FC:5F:32:3B:65:1E:BE:A5:37:2F:61:68:3A:6C:DF
Certificate issuer: /CN=2f5cab8a09a9fde23c9635f8e164aef09e17948c
Certificate serial: 018F1EC522F907AF57431D47E9FDEFEC7EAE
Authority key identifier: 2F:5C:AB:8A:09:A9:FD:E2:3C:96:35:F8:E1:64:AE:F0:9E:17:94:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L1yrigmp_eI8ljX44WSu8J4XlIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/c2e16e-ab68-4429-96ee-002f26e3b898/1/ce3s-l78XzI7ZR6-pTcvYWg6bN8.roa
Signing time: Sat 27 Apr 2024 08:56:26 +0000
ROA not before: Sat 27 Apr 2024 08:56:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61317
IP address blocks: 193.19.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:1e:c5:22:f9:07:af:57:43:1d:47:e9:fd:ef:ec:7e:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f5cab8a09a9fde23c9635f8e164aef09e17948c
Validity
Not Before: Apr 27 08:56:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=71edecfa5efc5f323b651ebea5372f61683a6cdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:0f:a2:3e:6f:c2:a6:d3:67:76:3d:3c:1a:20:
b2:bf:bd:93:a5:35:0c:6c:85:0f:75:a8:ad:56:2a:
80:a3:6d:98:ab:6e:6d:27:29:0c:6f:bf:53:be:e6:
8d:a2:fe:56:6d:8c:d4:83:ad:1e:b3:2e:85:8b:f8:
28:cd:05:64:67:35:d8:8d:43:e5:2e:0c:2b:9e:95:
d1:cc:46:d1:18:49:87:53:b1:eb:39:76:bc:8c:87:
b0:af:a7:a4:25:b5:88:0d:9b:02:2b:63:6b:d5:16:
af:22:af:17:dd:4e:c8:5b:6a:e5:a0:f4:85:af:2b:
f6:72:d7:fc:6e:f4:59:0f:e3:13:1b:2d:07:54:cd:
96:db:46:02:37:d1:dd:03:d3:52:a5:1f:d4:5c:88:
d3:57:68:a5:d3:07:e4:91:88:f3:e4:cb:65:60:39:
40:2e:af:54:45:ea:90:0b:b3:eb:07:86:dd:76:33:
7e:11:57:02:86:0f:f1:f0:42:a4:da:d7:9c:83:9c:
31:96:ac:15:80:45:b7:fd:e3:2a:54:ec:f8:76:30:
43:90:9f:b8:72:4b:c7:79:30:5d:8d:b4:fa:b2:ef:
74:1a:78:b7:8b:84:60:de:ed:dd:97:8a:f6:25:fd:
e9:af:7f:9d:12:f0:81:67:fe:2e:c0:bb:02:b1:c8:
f0:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:ED:EC:FA:5E:FC:5F:32:3B:65:1E:BE:A5:37:2F:61:68:3A:6C:DF
X509v3 Authority Key Identifier:
keyid:2F:5C:AB:8A:09:A9:FD:E2:3C:96:35:F8:E1:64:AE:F0:9E:17:94:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L1yrigmp_eI8ljX44WSu8J4XlIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c2e16e-ab68-4429-96ee-002f26e3b898/1/ce3s-l78XzI7ZR6-pTcvYWg6bN8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c2e16e-ab68-4429-96ee-002f26e3b898/1/L1yrigmp_eI8ljX44WSu8J4XlIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.19.191.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:20:75:11:10:55:96:93:25:c7:6b:e1:1f:1c:79:36:fa:8a:
45:26:cb:04:ca:c0:67:0c:1d:a1:8a:1a:10:ad:38:11:7f:9e:
48:a4:99:fc:c8:e3:7e:c0:7d:8d:75:8d:72:e5:9c:c0:da:ef:
60:f2:d9:a5:25:34:35:ab:09:5b:59:d8:d4:36:07:8d:da:c8:
76:ae:1c:68:2e:51:01:ce:69:b3:ca:3e:bf:d2:cd:29:59:7f:
eb:d5:62:5d:f2:99:60:67:f2:c8:c4:58:da:68:29:02:f0:06:
21:1f:8d:5f:b5:16:52:60:ff:7d:21:df:9a:70:ad:a7:d2:33:
35:86:0a:57:d7:b8:27:a8:e7:3c:08:3a:d5:2e:21:84:54:3c:
30:d6:20:22:08:bc:3b:bd:7e:2c:db:8f:60:dc:4f:46:79:ff:
f6:50:93:c2:1b:f9:06:77:3e:17:4a:79:57:78:f2:3f:08:91:
e4:d1:c9:a2:be:a0:c3:55:da:85:09:11:82:d2:ad:8c:06:82:
9a:8f:d8:81:93:f2:1e:14:2b:aa:fc:04:3c:2e:17:49:cd:75:
63:11:98:f2:19:cc:d9:41:c1:4a:c6:8d:08:2c:53:41:44:ae:
62:ae:81:2a:6a:6b:ff:2e:43:d4:58:4c:bd:1f:62:9e:65:be:
83:13:bd:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:14:00 2025 by rpki-client