Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/2dd397-00c1-46bb-907f-4fb27902e33d/1/SnkIGv1Y_CwOrxfyFojpcXgw0Ls.roa
File: SnkIGv1Y_CwOrxfyFojpcXgw0Ls.roa (raw, json)
Hash identifier: IwKgVaNIzaUzPSKrRfaBBOI4dxHaqzJJLFSUxcLVrtA=
Subject key identifier: 4A:79:08:1A:FD:58:FC:2C:0E:AF:17:F2:16:88:E9:71:78:30:D0:BB
Certificate issuer: /CN=2aa694f440fb760212b92056e0eb5b31d5150ffb
Certificate serial: 073EF9A5
Authority key identifier: 2A:A6:94:F4:40:FB:76:02:12:B9:20:56:E0:EB:5B:31:D5:15:0F:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KqaU9ED7dgISuSBW4OtbMdUVD_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/2dd397-00c1-46bb-907f-4fb27902e33d/1/SnkIGv1Y_CwOrxfyFojpcXgw0Ls.roa
Signing time: Wed 26 Jan 2022 19:38:19 +0000
ROA not before: Wed 26 Jan 2022 19:38:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207610
IP address blocks: 193.26.22.0/24 maxlen: 24
193.26.21.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121567653 (0x73ef9a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2aa694f440fb760212b92056e0eb5b31d5150ffb
Validity
Not Before: Jan 26 19:38:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4a79081afd58fc2c0eaf17f21688e9717830d0bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:ab:ac:64:47:47:67:12:8a:d6:69:3e:d7:58:
47:96:b9:80:98:ac:4e:19:20:40:72:5a:72:68:86:
37:c0:61:67:9c:f6:30:b9:81:b7:9a:13:76:e4:f0:
71:a6:32:b1:ea:69:41:9d:15:9d:3b:0c:5b:65:3d:
35:71:18:a0:60:c9:15:f3:2e:d1:0c:7c:90:68:c8:
49:37:24:aa:a3:dc:72:8b:b7:a4:34:93:11:a8:12:
e1:4a:ce:b8:7d:da:96:b3:4a:0b:de:f6:eb:3f:98:
3f:2e:08:40:8e:f2:8e:dc:47:90:32:26:92:ca:16:
68:46:b5:dd:46:10:4c:3d:f4:22:47:da:6a:58:bf:
63:d1:1b:92:7c:9a:68:1c:d0:6b:5c:91:ef:74:c0:
a9:ea:8f:27:67:e0:3a:b5:67:af:a4:23:c6:92:ff:
82:3e:ce:e7:3b:92:8f:2f:2b:7d:6c:63:02:ff:d0:
38:ac:a5:56:fe:05:51:6a:0b:6b:da:e9:df:9a:73:
81:5a:c5:80:dc:86:ba:7b:98:04:93:97:5c:91:d0:
9d:7c:d5:a2:41:86:40:6f:bc:11:f0:64:2c:b6:95:
ce:a5:3c:5d:a2:4b:53:7c:4e:c9:da:f5:0b:c2:fe:
6d:2b:2e:c0:e7:3c:c4:22:af:49:78:52:9b:36:8c:
80:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:79:08:1A:FD:58:FC:2C:0E:AF:17:F2:16:88:E9:71:78:30:D0:BB
X509v3 Authority Key Identifier:
keyid:2A:A6:94:F4:40:FB:76:02:12:B9:20:56:E0:EB:5B:31:D5:15:0F:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqaU9ED7dgISuSBW4OtbMdUVD_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/2dd397-00c1-46bb-907f-4fb27902e33d/1/SnkIGv1Y_CwOrxfyFojpcXgw0Ls.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/2dd397-00c1-46bb-907f-4fb27902e33d/1/KqaU9ED7dgISuSBW4OtbMdUVD_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.26.21.0-193.26.22.255
Signature Algorithm: sha256WithRSAEncryption
04:c3:b8:ae:e5:35:ea:0c:9a:ec:0f:92:0a:de:b6:42:cf:58:
83:9a:80:01:f7:81:c0:1c:5e:51:fa:01:6e:47:4d:6e:b5:4c:
1b:5a:4a:c9:49:26:d7:e7:b5:1e:e4:1b:e1:0b:94:33:87:bb:
89:21:90:c0:e6:02:83:eb:1c:46:11:83:85:6f:91:5c:54:f3:
a7:2f:6b:2f:9a:9b:f7:08:30:75:00:ed:f8:b8:fb:d4:26:37:
cf:bb:07:78:60:a4:af:93:12:3f:f6:93:ba:94:3e:74:db:59:
77:09:d0:d2:e2:0d:f4:48:c0:49:14:c1:37:2c:24:15:19:6a:
e4:90:49:1e:6c:36:e7:c7:2a:98:ef:6b:fe:47:5f:b9:91:df:
d0:a1:67:f0:64:f0:f2:9d:64:d9:fd:47:4f:e8:8a:9c:4b:fb:
e6:c3:67:22:e3:bb:33:e9:1e:9c:6d:64:6f:6a:eb:42:d8:8c:
bd:9c:31:21:80:a6:3f:a3:cd:85:6f:24:55:b2:39:36:9e:12:
ac:a9:f4:ea:73:b0:8b:f4:4f:81:aa:4a:a2:60:a9:ee:67:0d:
18:b8:c1:8b:be:7b:ab:13:32:c2:9c:1a:23:64:82:ee:f3:0b:
d1:4f:be:d0:d7:37:57:26:b3:a8:cb:cf:49:d3:f1:4f:e3:f6:
81:21:9c:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:33:54 2025 by rpki-client