Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/365ec9-6793-4188-ab5a-48454a3f4aba/1/H_bkpIpaq7hEeU7K-QYxxylOXTY.roa
File: H_bkpIpaq7hEeU7K-QYxxylOXTY.roa (raw, json)
Hash identifier: HgcHpsQsiuFUzmpjZe8FsXnNgnuAmofzhrdYed8Rb4g=
Subject key identifier: 1F:F6:E4:A4:8A:5A:AB:B8:44:79:4E:CA:F9:06:31:C7:29:4E:5D:36
Certificate issuer: /CN=92df34b64782d86e371e3fea025bf5aa1dea2e9b
Certificate serial: 0185DD7AE518DBAADC6852E53636E7A27928
Authority key identifier: 92:DF:34:B6:47:82:D8:6E:37:1E:3F:EA:02:5B:F5:AA:1D:EA:2E:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kt80tkeC2G43Hj_qAlv1qh3qLps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/365ec9-6793-4188-ab5a-48454a3f4aba/1/H_bkpIpaq7hEeU7K-QYxxylOXTY.roa
Signing time: Mon 23 Jan 2023 07:14:56 +0000
ROA not before: Mon 23 Jan 2023 07:14:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210818
IP address blocks: 193.35.230.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:dd:7a:e5:18:db:aa:dc:68:52:e5:36:36:e7:a2:79:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92df34b64782d86e371e3fea025bf5aa1dea2e9b
Validity
Not Before: Jan 23 07:14:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1ff6e4a48a5aabb844794ecaf90631c7294e5d36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:00:c6:52:1c:d9:8e:a2:e7:60:15:a9:e8:67:
1e:a5:d9:3e:07:29:1d:37:34:54:3c:77:e9:1c:d1:
ee:f1:a3:4a:a1:d6:84:ca:ac:ea:85:59:fb:a0:5d:
49:46:ef:25:80:3a:9f:16:26:d2:a7:bc:ae:58:6f:
fc:0f:b1:7f:d3:73:8c:6b:88:fd:fb:ac:55:d4:7e:
e1:dd:2b:1c:b1:4a:83:18:9e:b7:dc:60:f6:63:09:
78:10:d4:43:26:20:3a:52:c7:14:e5:d6:96:97:00:
ad:06:0a:14:f4:a6:0a:d8:97:8f:cd:00:ff:ea:f6:
99:0f:b7:9d:2e:d6:c7:5b:ed:75:c9:69:b6:5d:52:
c2:5a:52:2c:94:1f:20:8a:42:da:b1:6e:47:48:4a:
53:e9:ac:78:de:4e:eb:1e:c8:4b:a7:c7:26:99:15:
66:43:28:46:69:d6:ee:e0:4d:cf:5c:eb:26:03:51:
aa:72:dc:37:56:03:7a:31:1a:c3:b3:51:a7:09:d2:
c5:54:fc:35:c1:a4:00:7e:77:17:a1:1f:63:a3:11:
03:80:02:38:48:dd:a2:88:26:9d:95:b3:f1:52:00:
3e:0d:93:1d:68:8b:67:b5:2c:fb:b8:a2:2c:27:88:
f5:03:f5:9c:85:da:7e:d9:6b:d1:be:df:e9:d7:a2:
5f:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:F6:E4:A4:8A:5A:AB:B8:44:79:4E:CA:F9:06:31:C7:29:4E:5D:36
X509v3 Authority Key Identifier:
keyid:92:DF:34:B6:47:82:D8:6E:37:1E:3F:EA:02:5B:F5:AA:1D:EA:2E:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kt80tkeC2G43Hj_qAlv1qh3qLps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/365ec9-6793-4188-ab5a-48454a3f4aba/1/H_bkpIpaq7hEeU7K-QYxxylOXTY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/365ec9-6793-4188-ab5a-48454a3f4aba/1/kt80tkeC2G43Hj_qAlv1qh3qLps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.35.230.0/24
Signature Algorithm: sha256WithRSAEncryption
af:77:a6:9c:9e:17:34:c8:db:25:3b:2e:2e:f9:f4:fc:02:75:
40:7b:00:7e:2d:5b:0d:7b:d4:82:ff:24:34:6b:dc:00:40:a3:
d9:96:3c:13:da:02:5d:57:65:e2:a4:f9:7d:59:f8:70:49:1c:
1f:28:59:07:25:e2:96:bb:3e:0f:61:31:1c:0a:a2:b8:3d:a7:
fc:6e:21:c2:93:20:95:ae:92:32:25:0b:35:51:ce:02:14:07:
70:2a:38:be:42:3f:a8:95:53:97:d9:d8:d3:27:0f:c2:06:b6:
80:c2:49:d6:fb:72:e8:1a:8c:ef:e5:7e:6e:7e:82:f5:af:d6:
60:b5:b5:93:bd:60:c6:76:1e:55:79:9a:92:9f:db:4c:8a:89:
b4:15:3a:3d:e6:36:d7:75:2a:1b:ec:f6:b9:e7:9e:1c:fc:d0:
0f:06:7b:15:fb:a8:ee:da:fc:f2:f3:03:ac:d3:6b:76:af:b1:
5e:08:78:ab:fc:6c:2c:1c:39:5a:ee:f2:33:9e:4d:56:78:c2:
ac:52:64:39:c2:0f:6d:72:18:bd:80:f9:5e:92:7d:99:38:a2:
73:21:5e:9f:81:d1:29:0e:fd:11:1d:bf:77:ab:19:9b:f0:07:
cb:15:fa:ee:24:08:a7:35:a2:14:f0:64:cb:6c:be:a2:44:f4:
7f:2e:03:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:28:57 2025 by rpki-client