Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/0476ae-dd24-430f-a9ff-1cc10285349f/1/Rom1Tegh5cV_-UM_6ZyzNrOrVIw.roa
File: Rom1Tegh5cV_-UM_6ZyzNrOrVIw.roa (raw, json)
Hash identifier: 4KM9WOjJL8WGqHbxkybE3aRW2zJnSgHrdlon5rW1goU=
Subject key identifier: 46:89:B5:4D:E8:21:E5:C5:7F:F9:43:3F:E9:9C:B3:36:B3:AB:54:8C
Certificate issuer: /CN=99551907ba66e3e0a72158f51bc344f39ca1ebef
Certificate serial: 01856E265559B1AE2ADE3F0DEC27E7DC50ED
Authority key identifier: 99:55:19:07:BA:66:E3:E0:A7:21:58:F5:1B:C3:44:F3:9C:A1:EB:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mVUZB7pm4-CnIVj1G8NE85yh6-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/0476ae-dd24-430f-a9ff-1cc10285349f/1/Rom1Tegh5cV_-UM_6ZyzNrOrVIw.roa
Signing time: Sun 01 Jan 2023 16:24:43 +0000
ROA not before: Sun 01 Jan 2023 16:24:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212667
IP address blocks: 193.3.18.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:26:55:59:b1:ae:2a:de:3f:0d:ec:27:e7:dc:50:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99551907ba66e3e0a72158f51bc344f39ca1ebef
Validity
Not Before: Jan 1 16:24:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4689b54de821e5c57ff9433fe99cb336b3ab548c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:dd:b7:c6:8a:92:12:d8:f6:c4:e8:e4:b6:1d:
a0:64:62:0e:8e:f4:f3:27:f6:4e:c7:14:79:f9:91:
1b:e6:24:f8:43:dd:f1:aa:4d:6e:5d:04:1d:ea:4f:
4d:80:e4:94:9b:97:b1:72:f8:de:83:fd:80:4d:cb:
1f:6d:f4:4c:3d:bf:5a:83:eb:64:8b:ba:b1:71:b3:
09:f6:93:d9:d6:5a:9e:56:74:45:d5:a5:22:ba:3b:
ea:80:5f:5c:8a:d8:a1:55:6f:e2:b9:1d:e6:88:dd:
92:45:7b:f5:f0:a9:5a:55:8e:9c:e3:0a:66:05:b5:
c8:48:96:e7:9e:90:2d:c6:94:f8:e4:cd:32:ca:58:
a9:f0:55:f8:54:ff:22:f3:e4:0b:df:4f:2b:63:46:
30:d5:e0:da:f1:f7:50:43:b9:a3:44:cd:14:27:a9:
a7:02:ee:96:33:7e:a2:ef:2f:98:a4:b6:49:63:12:
fa:70:00:8b:58:ed:25:00:af:66:e0:e0:e8:00:ab:
cb:46:01:96:7f:21:9a:90:f9:a8:7b:b4:69:10:60:
95:00:b3:d9:a1:81:e6:0a:8b:40:db:e3:57:43:c7:
e9:c4:d1:b8:cb:76:af:c5:b7:a9:dd:ea:5c:fe:45:
5f:e8:80:3d:f1:e0:09:cf:c1:b8:47:81:45:6e:a6:
99:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:89:B5:4D:E8:21:E5:C5:7F:F9:43:3F:E9:9C:B3:36:B3:AB:54:8C
X509v3 Authority Key Identifier:
keyid:99:55:19:07:BA:66:E3:E0:A7:21:58:F5:1B:C3:44:F3:9C:A1:EB:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mVUZB7pm4-CnIVj1G8NE85yh6-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/0476ae-dd24-430f-a9ff-1cc10285349f/1/Rom1Tegh5cV_-UM_6ZyzNrOrVIw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/0476ae-dd24-430f-a9ff-1cc10285349f/1/mVUZB7pm4-CnIVj1G8NE85yh6-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.3.18.0/24
Signature Algorithm: sha256WithRSAEncryption
99:90:13:37:e1:94:a5:d5:6e:f7:ef:99:dd:b2:05:24:c7:79:
cd:b7:4b:07:51:60:cd:8e:44:7a:16:bd:96:54:5d:5b:eb:a8:
5b:0d:87:02:90:b7:5d:04:fc:0f:70:b6:5b:38:1f:19:0d:3a:
c8:cb:d7:44:34:44:33:e4:5c:21:2b:67:b3:b0:32:ae:af:75:
87:34:94:fb:a3:bb:43:f6:0a:04:12:25:15:2e:c4:0a:8f:76:
b2:9b:3b:d5:4c:3c:cd:c4:81:bd:89:b8:c8:57:72:21:bd:7c:
aa:8e:01:f2:86:4b:a5:ca:e8:e4:c9:1f:80:49:67:13:ec:c0:
04:06:1b:07:ca:ec:06:86:9f:29:35:e1:42:38:5e:b7:07:82:
55:4f:02:94:88:25:d4:ea:13:e3:8a:17:76:58:63:34:ca:23:
4f:91:67:eb:a1:b7:c5:74:52:7c:ab:a2:f8:60:31:9f:d7:7e:
68:1f:53:41:94:39:ed:a3:36:82:3f:8a:ac:31:f8:2e:62:2d:
47:9f:4c:cf:bf:02:8a:c1:0e:90:e0:ab:3e:b4:7b:fb:7b:ee:
ec:df:a9:27:11:4e:a4:d0:60:69:97:37:6a:39:7e:ef:92:f2:
28:2e:9e:0c:c4:a3:f3:4e:2c:fc:78:72:43:25:b1:2e:82:43:
6e:0e:6f:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 03:34:55 2025 by rpki-client