Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/015f44-0f4c-4714-8615-23b072f5b188/1/xqvTjJ4OIxVP1IrK6RP-CWLucPY.roa
File: xqvTjJ4OIxVP1IrK6RP-CWLucPY.roa (raw, json)
Hash identifier: YqJmGZv3PBdVO6QyhYZqknQPoNROXRasvuk3/+FriY4=
Subject key identifier: C6:AB:D3:8C:9E:0E:23:15:4F:D4:8A:CA:E9:13:FE:09:62:EE:70:F6
Certificate issuer: /CN=3adeea3b6aac4d834b4fd7c2e5d3c397f61f43d6
Certificate serial: 0184E7E034526B0A4A292A590B11CEF865C5
Authority key identifier: 3A:DE:EA:3B:6A:AC:4D:83:4B:4F:D7:C2:E5:D3:C3:97:F6:1F:43:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ot7qO2qsTYNLT9fC5dPDl_YfQ9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/015f44-0f4c-4714-8615-23b072f5b188/1/xqvTjJ4OIxVP1IrK6RP-CWLucPY.roa
Signing time: Tue 06 Dec 2022 14:39:01 +0000
ROA not before: Tue 06 Dec 2022 14:39:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207279
IP address blocks: 193.106.196.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:e7:e0:34:52:6b:0a:4a:29:2a:59:0b:11:ce:f8:65:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3adeea3b6aac4d834b4fd7c2e5d3c397f61f43d6
Validity
Not Before: Dec 6 14:39:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c6abd38c9e0e23154fd48acae913fe0962ee70f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:2a:f4:66:ed:06:96:3e:56:2d:e9:bb:72:44:
af:da:93:53:64:39:73:28:d0:d8:9c:0e:f5:63:16:
4a:ff:83:f6:00:d9:0a:1f:d5:82:1a:69:99:03:63:
f3:34:34:9a:32:a6:ad:d3:ab:98:d7:95:2c:85:00:
2d:a2:8c:4d:d7:fd:b6:bb:e0:a7:19:2d:ec:11:de:
54:1b:d9:3a:e2:fc:a9:36:62:f0:ff:20:0c:82:99:
b3:da:f2:89:e5:0c:b0:a2:cb:43:34:5e:d9:79:b4:
5f:52:d4:e9:f1:7c:dc:1b:9a:8e:c7:79:f6:bb:fa:
b9:d8:ca:d1:74:f9:ad:ed:e7:78:76:25:c7:e1:88:
08:fa:b9:4a:67:c7:84:ac:82:be:4f:6c:a6:97:75:
28:07:14:d7:73:25:1c:f6:5b:83:cb:a7:56:d1:be:
fa:f2:61:74:f8:49:b7:0d:98:38:31:b1:41:a5:5b:
a5:76:af:a7:98:9b:6c:7d:08:1c:69:18:2c:79:1f:
be:79:5c:ea:ea:39:c3:76:74:84:51:24:03:61:54:
7a:a4:4d:ee:02:8f:3b:ec:9a:65:ab:eb:9a:dc:7e:
64:d7:43:4a:57:86:5f:db:b2:14:da:75:95:2a:d0:
d4:09:e6:12:ba:3d:31:39:21:7b:ca:aa:06:82:02:
bd:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:AB:D3:8C:9E:0E:23:15:4F:D4:8A:CA:E9:13:FE:09:62:EE:70:F6
X509v3 Authority Key Identifier:
keyid:3A:DE:EA:3B:6A:AC:4D:83:4B:4F:D7:C2:E5:D3:C3:97:F6:1F:43:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ot7qO2qsTYNLT9fC5dPDl_YfQ9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/015f44-0f4c-4714-8615-23b072f5b188/1/xqvTjJ4OIxVP1IrK6RP-CWLucPY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/015f44-0f4c-4714-8615-23b072f5b188/1/Ot7qO2qsTYNLT9fC5dPDl_YfQ9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.106.196.0/24
Signature Algorithm: sha256WithRSAEncryption
91:5e:d0:a7:42:f9:c3:28:91:25:dd:ac:f7:29:19:f0:a8:b9:
9f:95:22:ce:a6:dc:8f:44:42:c9:9d:b0:37:cb:bc:24:c7:77:
1d:d0:40:c3:a9:12:8d:83:03:23:56:80:26:99:fb:40:3c:23:
87:2b:b2:f3:a8:ec:07:28:54:b7:2c:cc:d0:99:a4:32:06:25:
df:19:2c:55:cd:40:f8:74:8c:69:c3:4c:2e:0b:a7:2b:5b:ae:
af:98:58:8f:d7:1e:03:b9:09:73:3e:7d:21:cf:a4:9e:06:10:
71:a5:7b:3f:d1:4a:6c:06:57:0c:14:0c:00:7d:79:cd:6a:4f:
da:ab:e6:17:b4:2f:d3:f2:88:9f:af:0f:4f:02:e5:b9:1d:12:
c1:8e:65:7d:53:f9:47:9c:07:e6:2a:ee:9e:46:1f:83:25:9a:
43:37:66:df:35:f9:e5:3e:59:d5:44:6c:ab:9a:41:19:95:4a:
c8:be:03:73:5b:4b:58:97:3c:e0:6f:05:f6:26:a4:f9:6d:cd:
5c:cd:9c:97:b0:be:1c:55:b1:0b:7c:d0:7a:cc:ac:51:25:17:
38:6a:2e:b9:e8:8a:0a:41:89:36:ab:1b:07:a2:47:5f:fa:be:
b4:9d:2b:d8:c2:cb:64:92:9c:c0:9c:29:0e:b4:cb:38:aa:b3:
8d:73:43:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:12:22 2025 by rpki-client