Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/b9230f-fbf1-4272-b217-156204897e89/1/SdcohnfguS_2eIQCOeXxImcAmfA.roa
File: SdcohnfguS_2eIQCOeXxImcAmfA.roa (raw, json)
Hash identifier: nQtlZW+pp4locZVL8deRDh5zZdxP3yZhpAP8IQ/3jNI=
Subject key identifier: 49:D7:28:86:77:E0:B9:2F:F6:78:84:02:39:E5:F1:22:67:00:99:F0
Certificate issuer: /CN=4ad35bad87fbbc23e4dda0bcaf2e329a14432e58
Certificate serial: 018281D03362E9FAB90A01823787A2166101
Authority key identifier: 4A:D3:5B:AD:87:FB:BC:23:E4:DD:A0:BC:AF:2E:32:9A:14:43:2E:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/StNbrYf7vCPk3aC8ry4ymhRDLlg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/b9230f-fbf1-4272-b217-156204897e89/1/SdcohnfguS_2eIQCOeXxImcAmfA.roa
Signing time: Tue 09 Aug 2022 08:54:41 +0000
ROA not before: Tue 09 Aug 2022 08:54:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 26548
IP address blocks: 193.202.16.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:81:d0:33:62:e9:fa:b9:0a:01:82:37:87:a2:16:61:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ad35bad87fbbc23e4dda0bcaf2e329a14432e58
Validity
Not Before: Aug 9 08:54:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=49d7288677e0b92ff678840239e5f122670099f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:16:8c:2f:67:da:a1:0d:ff:eb:b2:9b:5d:18:
63:f7:14:a5:11:41:02:e2:75:bc:9b:7a:59:f6:51:
a4:46:66:1f:54:dc:9b:e5:33:09:b6:87:79:06:46:
cb:6a:c2:bd:ee:58:69:41:ad:31:94:8b:10:4c:e9:
3d:ce:98:45:c3:20:4b:49:e2:40:ef:ed:7e:a8:3b:
6f:df:e0:3c:15:41:39:39:b2:4e:3e:d0:ea:de:99:
e9:73:46:3e:65:ba:75:06:a1:c2:7e:ba:a9:0b:91:
27:f8:cf:72:89:61:93:6d:40:70:1c:4a:eb:d7:11:
d3:c9:43:a5:5c:2b:00:2a:b8:92:2a:09:9a:9f:fd:
13:20:ff:e0:02:d9:60:f1:b6:a3:9a:8b:cf:d3:7e:
52:f3:30:24:b2:31:6b:3f:d1:b3:aa:97:a6:0f:86:
88:d2:03:f2:5f:5c:35:2b:71:47:32:2f:4f:f1:59:
e2:23:3b:e6:27:3f:b7:a4:19:32:d3:ef:19:98:66:
87:32:65:70:d7:fb:85:e3:ed:e2:df:12:ce:3e:b7:
a3:9e:80:ec:12:c6:40:ed:4d:57:32:bc:cc:4a:80:
46:04:86:52:08:a0:e2:4a:96:e7:a2:87:2b:e4:79:
f3:17:ef:ef:09:09:26:0d:33:93:73:5d:50:bb:a8:
5a:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:D7:28:86:77:E0:B9:2F:F6:78:84:02:39:E5:F1:22:67:00:99:F0
X509v3 Authority Key Identifier:
keyid:4A:D3:5B:AD:87:FB:BC:23:E4:DD:A0:BC:AF:2E:32:9A:14:43:2E:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/StNbrYf7vCPk3aC8ry4ymhRDLlg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/b9230f-fbf1-4272-b217-156204897e89/1/SdcohnfguS_2eIQCOeXxImcAmfA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/b9230f-fbf1-4272-b217-156204897e89/1/StNbrYf7vCPk3aC8ry4ymhRDLlg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.202.16.0/24
Signature Algorithm: sha256WithRSAEncryption
06:f2:37:d6:db:f5:2d:e7:29:cc:61:a4:41:43:98:8e:ab:cf:
73:46:b7:7b:a4:2b:1e:87:d3:dd:ab:62:bf:64:49:7c:4b:89:
89:88:83:11:fa:5e:3c:00:53:87:a3:87:91:80:ea:bc:e4:50:
a6:91:a4:f2:59:d0:72:f9:a5:c2:71:89:1d:43:29:a3:74:f7:
97:3b:63:47:14:41:c7:07:31:18:58:ce:e2:54:08:2d:b1:5b:
02:09:91:10:5b:c9:4d:4e:67:b9:77:dc:51:39:3e:96:53:3d:
32:56:05:9a:89:09:b9:c7:dd:7a:f1:33:1d:36:56:37:f7:42:
75:65:cd:68:d7:09:ec:15:b5:1d:f7:14:20:57:99:86:fd:62:
78:63:a2:16:6c:d4:82:64:8e:5d:f6:db:f6:38:3d:fe:a0:02:
5a:b5:ae:b5:c6:08:60:63:3e:b1:ea:1d:67:ae:90:3e:a6:02:
9a:5a:65:50:86:91:b3:43:7b:79:c7:f2:d8:59:e5:17:88:70:
14:b4:73:5b:6d:83:8d:31:ce:ec:25:77:da:a3:93:52:2c:8e:
38:56:58:10:ef:72:38:f0:3c:a5:a8:01:06:91:99:bd:69:2e:
48:38:02:57:97:d3:00:9c:9c:84:2f:d6:ba:42:e1:ce:71:88:
9a:0c:c4:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 06:23:40 2025 by rpki-client