Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/cd7bdf-2f6c-4402-95d7-c3d18b275465/1/eSU-NmmDq1JQ6djU3AE8h-Y7Dbo.roa
File: eSU-NmmDq1JQ6djU3AE8h-Y7Dbo.roa (raw, json)
Hash identifier: SME4BC9MTXa/uu3fT/ZfyVQCiWgZxAGSKx+7Qylcf1s=
Subject key identifier: 79:25:3E:36:69:83:AB:52:50:E9:D8:D4:DC:01:3C:87:E6:3B:0D:BA
Certificate issuer: /CN=9a7582c014f26d23b6ef9c2e82f48570c0b67868
Certificate serial: 0187297B7395AE1F35B84525932A1C4C2AA6
Authority key identifier: 9A:75:82:C0:14:F2:6D:23:B6:EF:9C:2E:82:F4:85:70:C0:B6:78:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mnWCwBTybSO275wugvSFcMC2eGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/cd7bdf-2f6c-4402-95d7-c3d18b275465/1/eSU-NmmDq1JQ6djU3AE8h-Y7Dbo.roa
Signing time: Tue 28 Mar 2023 18:29:29 +0000
ROA not before: Tue 28 Mar 2023 18:29:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207279
IP address blocks: 193.3.171.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:29:7b:73:95:ae:1f:35:b8:45:25:93:2a:1c:4c:2a:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a7582c014f26d23b6ef9c2e82f48570c0b67868
Validity
Not Before: Mar 28 18:29:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=79253e366983ab5250e9d8d4dc013c87e63b0dba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:e7:aa:22:af:be:e8:6c:27:37:3b:a9:5f:c5:
ab:88:73:a8:a0:46:e0:80:88:8f:63:4c:48:c3:32:
66:fe:88:84:af:ad:11:49:69:9b:33:68:28:98:89:
da:48:e9:13:98:2e:8b:05:b5:fd:d9:e9:be:7f:3f:
4d:e3:60:18:52:e5:4b:26:85:14:c8:91:fa:84:d0:
1b:e0:6e:3b:c8:a6:92:4a:b8:be:9b:06:1b:05:d0:
35:d5:ce:cb:46:51:92:3f:99:d7:29:69:09:16:8e:
db:b6:c8:43:bf:15:dc:0a:12:cf:4c:d1:3e:f2:9a:
80:4e:b7:b6:fe:58:35:e4:95:78:0e:77:6c:15:b7:
2b:fe:37:64:e9:eb:77:91:13:40:aa:ff:f4:23:98:
d3:33:5e:13:38:af:5d:81:43:a7:4d:f2:db:b5:1b:
67:56:1c:9d:dc:02:4d:c0:56:0d:f9:e1:99:f4:77:
82:d5:0c:ec:99:28:c9:5d:2a:69:d6:42:2d:a4:5f:
d1:2b:0b:44:58:86:e5:45:92:78:d1:dc:68:f6:16:
c6:18:32:0f:dc:a2:e9:c6:66:94:0e:9f:e6:83:30:
c0:fc:5b:8f:88:f7:c8:15:30:3b:c3:44:2d:f3:3b:
93:8c:f2:6b:d8:f3:18:85:4c:9d:dc:b2:9f:89:31:
84:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:25:3E:36:69:83:AB:52:50:E9:D8:D4:DC:01:3C:87:E6:3B:0D:BA
X509v3 Authority Key Identifier:
keyid:9A:75:82:C0:14:F2:6D:23:B6:EF:9C:2E:82:F4:85:70:C0:B6:78:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mnWCwBTybSO275wugvSFcMC2eGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/cd7bdf-2f6c-4402-95d7-c3d18b275465/1/eSU-NmmDq1JQ6djU3AE8h-Y7Dbo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/cd7bdf-2f6c-4402-95d7-c3d18b275465/1/mnWCwBTybSO275wugvSFcMC2eGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.3.171.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:c3:ce:ed:ea:34:72:00:4d:78:08:41:f0:88:b5:8b:fc:db:
22:d8:67:ca:43:19:38:ef:0d:1d:62:7e:16:f0:9a:d9:e8:73:
56:a1:99:4b:74:2a:94:c7:b3:b9:76:ac:4f:3b:ad:a9:a1:4d:
03:ed:c9:16:47:e3:b3:3e:84:b9:b4:a7:f5:e9:16:ae:7d:d7:
da:98:7d:f4:c2:5a:45:fe:a3:fb:6b:8a:0f:28:76:39:75:c8:
31:03:4e:bd:39:af:3b:4f:ce:88:cf:4d:cf:07:46:c2:a9:e4:
e8:77:79:cf:f9:7c:39:64:97:48:37:73:bc:40:77:a8:48:ff:
31:c9:e9:c5:fd:33:ff:43:45:47:ad:ef:cb:c1:11:7e:9c:18:
fe:cb:ee:a9:63:0d:17:ce:08:7d:4b:95:d2:dd:2d:c2:be:8f:
4c:44:10:82:fc:a5:3d:e0:6c:63:87:9c:06:c3:d8:34:44:a6:
7b:5d:90:c5:a1:42:a3:9a:5f:df:57:00:36:7b:51:c9:4b:c0:
8e:f5:11:f3:46:4f:f3:24:32:2f:79:09:9a:9e:13:a5:5d:da:
72:8d:c9:88:9b:d8:c8:6f:a6:51:e1:3b:1b:68:f9:f4:38:a0:
63:7f:54:0e:73:ec:62:02:00:e9:a2:88:1e:5e:a5:5b:6f:b7:
8b:b0:b8:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 12:34:02 2025 by rpki-client