Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/e88416-250d-42cb-88d9-476faa7cbe93/1/aU4buxJHsBY-vtJd1jvSYnVemv4.roa
File: aU4buxJHsBY-vtJd1jvSYnVemv4.roa (raw, json)
Hash identifier: yFrGHKXjN92eZG2oMti8Tbs8IaM6TFIqrs15xp9VUUY=
Subject key identifier: 69:4E:1B:BB:12:47:B0:16:3E:BE:D2:5D:D6:3B:D2:62:75:5E:9A:FE
Certificate issuer: /CN=402038cf1128e54637036c6182c11f6542e7643b
Certificate serial: 0185E84F14C8CACB19046674834D48F5A445
Authority key identifier: 40:20:38:CF:11:28:E5:46:37:03:6C:61:82:C1:1F:65:42:E7:64:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QCA4zxEo5UY3A2xhgsEfZULnZDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/e88416-250d-42cb-88d9-476faa7cbe93/1/aU4buxJHsBY-vtJd1jvSYnVemv4.roa
Signing time: Wed 25 Jan 2023 09:42:54 +0000
ROA not before: Wed 25 Jan 2023 09:42:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12815
IP address blocks: 193.17.229.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e8:4f:14:c8:ca:cb:19:04:66:74:83:4d:48:f5:a4:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=402038cf1128e54637036c6182c11f6542e7643b
Validity
Not Before: Jan 25 09:42:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=694e1bbb1247b0163ebed25dd63bd262755e9afe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:ce:3f:13:e7:72:37:a4:b3:f0:81:6d:ec:7f:
80:b3:23:42:b8:7a:1b:2b:77:9e:71:cd:a9:8f:4e:
20:f2:38:3e:62:e0:a9:94:1e:eb:af:3f:89:a0:7b:
4c:a3:6b:52:d9:02:40:88:04:40:c1:d2:14:da:7d:
d8:d5:b9:23:c6:2f:c9:3a:2b:fe:52:eb:de:bf:ef:
fa:17:2c:cb:3c:c2:6f:9d:b3:6d:4f:92:d8:d4:ed:
6b:53:02:ec:d4:12:9c:a0:d5:0d:5a:aa:82:42:76:
98:ce:8e:6e:9f:ab:76:b6:c6:a1:c4:2b:6e:3b:74:
b2:e4:40:50:50:4b:a9:70:12:3c:54:52:7b:47:33:
28:89:50:6a:be:2f:06:9a:cb:93:7b:2b:1b:40:86:
f5:65:de:5d:38:29:ae:ca:c8:2c:aa:1d:87:e8:f7:
8f:46:f5:67:82:0d:86:45:b3:ee:a7:30:e6:76:0b:
84:dc:36:f7:ec:99:8b:c4:cd:30:f7:64:ea:22:c2:
eb:48:2a:a7:db:77:fe:5a:9a:f3:4c:ec:a2:d3:9f:
01:57:a9:54:f2:56:b4:46:4d:52:65:43:05:13:c4:
b8:e5:62:d1:58:1d:e0:67:89:48:ce:90:c7:38:8e:
3f:9b:3e:c0:5a:a3:07:33:1a:95:7a:d1:8b:10:13:
d8:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:4E:1B:BB:12:47:B0:16:3E:BE:D2:5D:D6:3B:D2:62:75:5E:9A:FE
X509v3 Authority Key Identifier:
keyid:40:20:38:CF:11:28:E5:46:37:03:6C:61:82:C1:1F:65:42:E7:64:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QCA4zxEo5UY3A2xhgsEfZULnZDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e88416-250d-42cb-88d9-476faa7cbe93/1/aU4buxJHsBY-vtJd1jvSYnVemv4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e88416-250d-42cb-88d9-476faa7cbe93/1/QCA4zxEo5UY3A2xhgsEfZULnZDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.17.229.0/24
Signature Algorithm: sha256WithRSAEncryption
09:ad:4e:01:21:00:d1:d0:6f:d0:8f:0a:f0:21:a5:c5:e9:e8:
9a:71:d8:b4:b1:c2:bb:cb:66:a3:76:4e:0b:05:c7:68:d5:b8:
56:f2:06:c8:ab:8d:30:fb:9a:1c:37:45:bc:0d:1a:ff:10:2a:
5c:b5:cc:be:f4:29:83:86:de:b1:1f:23:5f:80:aa:f6:34:da:
6b:b4:05:72:8e:ea:b1:f5:0b:a3:86:a4:48:16:a9:6a:4d:f0:
fe:9c:63:f2:56:f6:d6:a6:66:9d:3f:48:5c:58:5f:05:0f:23:
53:31:d7:79:9a:73:75:5d:ab:7d:9a:a1:43:83:a3:a4:da:d8:
10:3d:b3:4e:57:d9:db:2f:9e:7d:da:77:25:29:73:0b:74:97:
39:89:0b:7a:15:08:fc:6c:09:0e:7b:fd:71:d9:d4:14:47:b0:
2b:f9:a2:93:5d:7e:ae:b8:8c:df:4c:a5:e1:1c:19:4e:fa:0b:
2d:69:c7:b5:ad:e0:f6:ce:ed:3c:ea:57:ba:d2:39:65:7d:9f:
b2:5f:3d:fd:06:1c:d4:7d:c8:e9:a2:9c:47:89:f6:5b:47:6d:
38:6e:4d:3e:28:08:cf:4b:53:1c:f0:72:35:ec:df:c3:85:65:
db:2d:b2:cc:5e:e9:a2:fe:e4:59:97:d9:96:76:94:ae:e3:df:
f5:20:39:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 15:33:07 2025 by rpki-client