Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/Rz4iHFTIur7oDHxva0qDyYJvugQ.roa
File: Rz4iHFTIur7oDHxva0qDyYJvugQ.roa (raw, json)
Hash identifier: 4iZN4EG3Y3qhPOXU8Ljqk9CqK+zlcNc33wtTTQK4wTM=
Subject key identifier: 47:3E:22:1C:54:C8:BA:BE:E8:0C:7C:6F:6B:4A:83:C9:82:6F:BA:04
Certificate issuer: /CN=a7fd3f89335dcf828666b28fad8ae993bd448878
Certificate serial: 261DCC
Authority key identifier: A7:FD:3F:89:33:5D:CF:82:86:66:B2:8F:AD:8A:E9:93:BD:44:88:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p_0_iTNdz4KGZrKPrYrpk71EiHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/Rz4iHFTIur7oDHxva0qDyYJvugQ.roa
Signing time: Fri 25 Mar 2022 13:54:50 +0000
ROA not before: Fri 25 Mar 2022 13:54:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57327
IP address blocks: 193.53.81.0/24 maxlen: 24
193.53.35.0/24 maxlen: 24
193.53.40.0/24 maxlen: 24
2a0a:3507::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2497996 (0x261dcc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7fd3f89335dcf828666b28fad8ae993bd448878
Validity
Not Before: Mar 25 13:54:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=473e221c54c8babee80c7c6f6b4a83c9826fba04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:7e:ce:f7:d2:0e:ac:e3:62:71:07:58:8d:eb:
0a:a4:01:31:8b:4c:7c:31:d4:c9:ac:76:22:8c:86:
8d:3a:a4:7e:89:c3:c5:e9:e7:cd:6d:8c:1b:4d:c1:
fd:2c:eb:ee:81:98:48:1f:b6:e8:71:cc:10:9a:f8:
da:7c:77:dc:da:73:31:cb:a7:d1:82:2b:99:02:bd:
2f:4f:f9:9c:e8:32:1d:45:6d:3f:89:79:ec:58:19:
c6:e8:cf:bd:7d:b2:33:32:0e:33:38:bd:39:c4:1f:
69:0b:20:56:ad:ed:0d:78:41:7d:5f:77:f2:a2:1a:
25:f6:43:6b:b0:e5:f4:5f:48:19:13:9f:ec:74:40:
fb:cc:0a:86:85:eb:b5:79:c4:13:bc:3c:bc:62:7c:
26:45:23:99:8f:25:25:c9:38:a5:a1:8c:78:9b:3f:
85:9c:c8:e6:26:cd:a1:90:87:0f:d6:b4:d7:e4:dc:
74:f7:8a:ee:15:e7:84:44:b9:da:f3:94:ae:7a:ea:
da:ba:07:f8:d5:4b:f9:f3:38:00:e8:f4:3c:74:8a:
2d:53:68:57:c4:4a:1f:90:3a:e7:ef:4e:bf:ff:7a:
76:32:73:e8:9b:81:78:62:ca:bb:36:74:29:3e:23:
2c:f3:9a:98:07:6c:0a:50:a4:c0:a7:65:ad:e2:93:
62:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:3E:22:1C:54:C8:BA:BE:E8:0C:7C:6F:6B:4A:83:C9:82:6F:BA:04
X509v3 Authority Key Identifier:
keyid:A7:FD:3F:89:33:5D:CF:82:86:66:B2:8F:AD:8A:E9:93:BD:44:88:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p_0_iTNdz4KGZrKPrYrpk71EiHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/Rz4iHFTIur7oDHxva0qDyYJvugQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/p_0_iTNdz4KGZrKPrYrpk71EiHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.53.35.0/24
193.53.40.0/24
193.53.81.0/24
IPv6:
2a0a:3507::/48
Signature Algorithm: sha256WithRSAEncryption
5a:8c:34:65:4e:4b:05:39:c6:09:23:8d:15:31:cc:07:0d:97:
8b:e1:38:c3:9f:81:ae:e5:f4:b0:a2:fd:b6:2f:00:ae:2b:cf:
92:0f:5d:65:f2:80:60:ab:8a:e4:3c:aa:ed:f5:f2:36:af:2e:
34:29:33:50:f8:29:94:bb:8b:3c:2b:45:fa:7f:64:6e:9a:01:
b4:87:ee:d6:b0:f6:70:00:f6:52:f7:2d:31:40:e5:1a:e3:65:
f4:52:a7:d1:7c:a5:f4:15:36:ce:50:6e:4f:8b:ce:37:85:39:
53:02:8c:2c:93:bf:71:2c:13:32:2a:a3:3f:d2:ce:61:36:54:
77:8d:06:53:c2:af:17:cc:96:2a:9c:9c:83:d2:c8:b9:f7:18:
ec:1c:2a:56:8f:a8:74:80:c5:3a:97:0f:19:90:3b:83:71:ca:
a2:ac:56:bc:7f:9f:df:7b:b2:00:00:7f:7c:e6:24:78:24:99:
de:11:3e:fe:c8:6c:f4:e5:89:a8:7c:54:c9:81:c9:96:2d:21:
85:1a:19:2a:34:05:dc:34:8a:b6:94:9b:8b:6c:38:11:f3:98:
6b:da:09:ca:94:c7:1d:f1:1e:40:b4:3d:be:d5:0f:13:f2:af:
c8:f3:3e:5b:41:22:a9:14:d8:02:d0:f1:a0:81:98:ff:cb:77:
3e:22:80:8f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:24:34 2025 by rpki-client