Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/015f44-0f4c-4714-8615-23b072f5b188/1/9FAXvkrqMo0StsDDEGFeu53-BOg.roa
File: 9FAXvkrqMo0StsDDEGFeu53-BOg.roa (raw, json)
Hash identifier: ibxCaW/yD/inlCM9y4/eKXJ6L9HhtSq1jCJdMKc6WiM=
Subject key identifier: F4:50:17:BE:4A:EA:32:8D:12:B6:C0:C3:10:61:5E:BB:9D:FE:04:E8
Certificate issuer: /CN=3adeea3b6aac4d834b4fd7c2e5d3c397f61f43d6
Certificate serial: 350A74BB
Authority key identifier: 3A:DE:EA:3B:6A:AC:4D:83:4B:4F:D7:C2:E5:D3:C3:97:F6:1F:43:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ot7qO2qsTYNLT9fC5dPDl_YfQ9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/015f44-0f4c-4714-8615-23b072f5b188/1/9FAXvkrqMo0StsDDEGFeu53-BOg.roa
Signing time: Fri 27 May 2022 15:35:16 +0000
ROA not before: Fri 27 May 2022 15:35:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 193.106.199.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 889877691 (0x350a74bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3adeea3b6aac4d834b4fd7c2e5d3c397f61f43d6
Validity
Not Before: May 27 15:35:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f45017be4aea328d12b6c0c310615ebb9dfe04e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:eb:f3:bb:f1:f8:66:fa:8c:d0:b7:b2:d8:5d:
84:e7:ca:f4:7c:82:da:82:8f:4e:40:c7:92:cd:62:
41:e0:2e:90:a3:ba:1a:fb:01:b3:1c:cb:08:68:a6:
c1:40:42:b5:23:55:23:64:9b:13:ce:92:c8:8b:96:
64:fa:d3:22:61:f0:67:a5:c2:5d:83:4b:30:64:95:
99:7f:1f:5e:20:74:86:15:21:8e:53:57:11:9c:93:
8f:2e:17:df:f9:bc:15:8c:19:02:b3:f5:09:e5:81:
a3:1f:13:be:34:86:d5:29:40:2e:8a:bb:66:da:80:
1e:95:4a:51:7a:c2:9f:ac:ab:bd:0c:73:76:e0:8f:
73:5a:6a:dd:f3:24:e6:36:34:c3:12:87:b0:a6:27:
1a:d9:97:87:1f:ba:4d:35:c1:ff:9d:1f:52:54:2e:
10:8f:57:b1:e2:25:94:e0:56:05:9e:52:5d:b4:e0:
14:22:98:b6:30:04:56:fa:61:15:42:b2:87:b5:ab:
e9:13:5d:4c:17:c3:8a:9b:8b:5b:d6:38:28:91:35:
f9:e9:db:b4:24:39:0d:0e:b2:61:a2:94:4d:b8:f3:
21:bf:20:cb:ea:96:43:3a:35:b0:26:a8:01:9e:43:
3b:bb:b4:ce:ff:e4:05:f0:57:b7:8b:25:57:3a:2c:
e8:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:50:17:BE:4A:EA:32:8D:12:B6:C0:C3:10:61:5E:BB:9D:FE:04:E8
X509v3 Authority Key Identifier:
keyid:3A:DE:EA:3B:6A:AC:4D:83:4B:4F:D7:C2:E5:D3:C3:97:F6:1F:43:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ot7qO2qsTYNLT9fC5dPDl_YfQ9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/015f44-0f4c-4714-8615-23b072f5b188/1/9FAXvkrqMo0StsDDEGFeu53-BOg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/015f44-0f4c-4714-8615-23b072f5b188/1/Ot7qO2qsTYNLT9fC5dPDl_YfQ9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.106.199.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:ca:46:ed:e7:47:59:bd:7a:33:e1:f0:f9:a7:b6:d3:ea:57:
fd:75:ea:0c:88:6a:53:56:e3:9e:2d:dc:a5:37:ef:12:4a:72:
37:67:76:78:f2:86:e3:89:60:57:35:5a:de:5d:cb:b9:a4:5f:
5d:18:e3:56:dd:51:1a:61:68:50:7c:67:92:0a:6e:ff:2e:28:
1b:88:14:a9:e1:26:91:b0:30:13:6e:1b:84:9d:75:31:28:2f:
71:b7:30:4b:d5:65:ce:2f:e5:62:45:97:b4:9e:b2:e2:13:a4:
52:bd:e8:c3:f0:ff:f3:a8:80:a5:18:cc:1a:1e:93:ff:73:2d:
e7:88:39:ee:93:48:ae:fd:1f:0b:6c:18:2c:d2:c3:3d:6b:71:
01:b2:89:06:25:bb:fc:5c:17:02:39:59:32:c8:08:b8:93:6a:
0f:2f:1c:da:60:05:63:32:ed:04:89:da:1f:38:15:b2:f1:95:
72:c8:37:a2:7d:fc:41:66:a8:bf:4a:72:ac:c8:51:78:7c:de:
ef:2c:0c:21:b0:64:f9:99:c1:c9:13:36:e9:07:40:c3:f0:af:
db:cd:d1:5c:b0:41:03:8f:d2:b3:43:d3:0d:33:d1:ad:2c:fa:
ae:fa:56:d3:d8:9a:b9:81:bb:22:fa:ba:88:64:77:36:06:1a:
a4:73:73:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:38:47 2025 by rpki-client