Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/cd7bdf-2f6c-4402-95d7-c3d18b275465/1/KF7CR7WcdBbgxQbxQwM5xbYSDbE.roa
File: KF7CR7WcdBbgxQbxQwM5xbYSDbE.roa (raw, json)
Hash identifier: ke/dfahiT7nJArE4bu/dZxV4Dcds2ZPhtXArf1VEcGY=
Subject key identifier: 28:5E:C2:47:B5:9C:74:16:E0:C5:06:F1:43:03:39:C5:B6:12:0D:B1
Certificate issuer: /CN=9a7582c014f26d23b6ef9c2e82f48570c0b67868
Certificate serial: 018779E372D9732207217D3C20003733EC36
Authority key identifier: 9A:75:82:C0:14:F2:6D:23:B6:EF:9C:2E:82:F4:85:70:C0:B6:78:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mnWCwBTybSO275wugvSFcMC2eGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/cd7bdf-2f6c-4402-95d7-c3d18b275465/1/KF7CR7WcdBbgxQbxQwM5xbYSDbE.roa
Signing time: Thu 13 Apr 2023 09:12:41 +0000
ROA not before: Thu 13 Apr 2023 09:12:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 193.3.171.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:79:e3:72:d9:73:22:07:21:7d:3c:20:00:37:33:ec:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a7582c014f26d23b6ef9c2e82f48570c0b67868
Validity
Not Before: Apr 13 09:12:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=285ec247b59c7416e0c506f1430339c5b6120db1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:6c:64:0a:07:16:66:b2:e0:99:3e:88:13:53:
12:ce:69:81:7a:10:60:be:db:83:9e:c8:d6:a7:61:
ed:34:f8:50:ce:dc:16:87:84:07:9f:f7:7f:5e:99:
e8:46:0f:0b:b3:4b:79:ff:d1:32:ec:0e:c7:57:83:
94:df:9c:4e:50:be:9c:fa:0b:a8:d8:73:e5:21:08:
3b:31:7e:5c:41:22:c2:d6:e2:74:01:cd:87:de:a7:
2b:08:0e:e2:bf:06:0b:fd:09:c7:6a:21:c0:a3:06:
0e:83:21:c7:d9:92:12:86:cb:92:45:22:d0:ae:74:
ac:a4:2e:65:ea:38:f8:57:fc:d3:f3:98:7c:81:bc:
62:aa:24:93:a3:ee:de:f4:61:d3:fb:99:45:86:76:
ad:e1:9f:da:fd:ba:4d:71:18:b5:06:33:5e:ba:5f:
4a:94:93:1c:90:b7:9b:1d:db:7d:ce:54:e2:96:e2:
d8:d7:e6:e8:db:14:af:cf:bd:64:11:76:1e:10:a6:
32:bf:ad:15:c4:88:97:a7:d4:4a:aa:b8:11:2f:35:
35:d1:27:ab:83:f4:ab:26:11:81:b0:e0:f3:f8:f6:
6e:93:85:5d:5c:ae:88:8a:4f:6f:9f:39:e0:07:d8:
9c:8d:84:fa:ba:01:54:01:81:2e:b4:de:df:20:d4:
e1:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:5E:C2:47:B5:9C:74:16:E0:C5:06:F1:43:03:39:C5:B6:12:0D:B1
X509v3 Authority Key Identifier:
keyid:9A:75:82:C0:14:F2:6D:23:B6:EF:9C:2E:82:F4:85:70:C0:B6:78:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mnWCwBTybSO275wugvSFcMC2eGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/cd7bdf-2f6c-4402-95d7-c3d18b275465/1/KF7CR7WcdBbgxQbxQwM5xbYSDbE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/cd7bdf-2f6c-4402-95d7-c3d18b275465/1/mnWCwBTybSO275wugvSFcMC2eGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.3.171.0/24
Signature Algorithm: sha256WithRSAEncryption
05:b2:c2:d2:e9:d3:05:26:eb:af:5e:bd:72:9b:8b:d1:99:06:
64:bb:ec:19:b9:d0:24:90:d9:57:a9:ee:f7:b8:9c:a8:a1:06:
16:7f:fb:4b:52:c9:73:df:89:72:db:12:18:b2:e1:8d:71:a3:
60:58:90:1c:6e:a7:7c:a5:a2:f1:b4:a5:c7:20:9b:fa:6a:2b:
c6:1c:34:f7:11:19:85:1b:cb:84:a9:12:e7:f5:59:e2:16:83:
3f:6b:8e:a6:ac:eb:c7:98:4e:29:13:44:d3:e1:b0:bb:be:2f:
ab:f2:cb:a4:27:f5:a8:29:a1:86:04:8a:f6:a7:6d:bd:dc:e9:
95:b7:0e:75:d5:8b:3b:a9:fc:cb:99:43:f2:38:1b:a9:09:f7:
81:96:f5:2d:f9:ef:c5:b9:8b:4f:6c:97:72:a9:3f:eb:25:a6:
62:9f:ad:1e:85:1e:1b:dc:41:83:54:6c:6d:c1:5f:5e:6d:1b:
1c:9e:eb:fd:ea:08:a7:47:a3:d2:f3:ab:3e:df:8a:bc:6a:b0:
08:69:58:d1:0f:a4:c1:7d:b8:5f:9e:c2:5b:47:c4:69:df:fb:
db:b4:22:3d:05:53:85:43:dc:64:a1:83:ea:e3:35:a5:69:4c:
bb:ac:34:a9:16:bb:bc:7c:87:75:d9:e1:3d:c7:41:3a:ed:a0:
30:25:42:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 12:36:18 2025 by rpki-client