Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/641aec-da38-4df3-8e71-f7fe3e473b12/1/__5RBVrFS6gC5_Ri6l0bvWkV_ds.roa
File: __5RBVrFS6gC5_Ri6l0bvWkV_ds.roa (raw, json)
Hash identifier: S68yeLo9QsUXf1rhCynyxWDrb4zEZ3h7bE2SG/OP9iQ=
Subject key identifier: FF:FE:51:05:5A:C5:4B:A8:02:E7:F4:62:EA:5D:1B:BD:69:15:FD:DB
Certificate issuer: /CN=cda81fe95261904e941237ea4c7cec8f768b046d
Certificate serial: 01856CE6279CF7BC050204148759A64B9172
Authority key identifier: CD:A8:1F:E9:52:61:90:4E:94:12:37:EA:4C:7C:EC:8F:76:8B:04:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zagf6VJhkE6UEjfqTHzsj3aLBG0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/641aec-da38-4df3-8e71-f7fe3e473b12/1/__5RBVrFS6gC5_Ri6l0bvWkV_ds.roa
Signing time: Sun 01 Jan 2023 10:35:00 +0000
ROA not before: Sun 01 Jan 2023 10:35:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 22773
IP address blocks: 193.111.40.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:e6:27:9c:f7:bc:05:02:04:14:87:59:a6:4b:91:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cda81fe95261904e941237ea4c7cec8f768b046d
Validity
Not Before: Jan 1 10:35:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fffe51055ac54ba802e7f462ea5d1bbd6915fddb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:44:6d:bc:d1:df:fc:2b:40:ad:35:f0:d0:d0:
ae:bc:4e:07:72:9d:3e:3a:ac:b0:81:70:3d:ef:4e:
02:fc:32:82:37:19:cc:4a:76:b3:1e:a6:7c:4e:72:
90:b4:a8:cf:d0:68:01:c1:9e:fd:ef:e8:7c:64:ea:
92:d9:65:a5:00:10:9f:41:db:ff:55:96:07:a6:35:
78:eb:6c:c4:56:64:00:8f:bc:f9:cb:e3:90:37:df:
06:d8:af:db:fd:07:2a:f6:da:06:97:bb:e0:87:a0:
d7:69:d5:05:4e:74:d3:95:34:3c:46:5c:00:fb:e1:
f5:e5:63:e7:43:89:d9:18:f6:6b:6c:97:ec:50:90:
59:1b:dc:ef:79:c1:ef:4a:43:33:a7:97:b6:9b:5d:
26:a0:73:90:3c:37:bb:19:8d:cf:82:3f:0c:35:4c:
a8:09:67:65:a6:23:9d:fb:22:cb:b9:5f:2f:58:ed:
ce:4d:1f:80:e2:96:29:04:11:53:b8:44:9c:b8:64:
e2:1a:3e:32:9e:d7:ef:df:2a:7f:1c:41:95:34:cd:
e7:ce:fa:fb:4e:4d:c0:74:80:1a:6c:83:4e:4e:14:
8e:f2:46:f6:ed:de:96:0d:91:ee:55:77:59:0b:68:
6a:e0:d0:b7:3a:f3:f9:2b:9a:40:56:55:34:34:be:
fc:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:FE:51:05:5A:C5:4B:A8:02:E7:F4:62:EA:5D:1B:BD:69:15:FD:DB
X509v3 Authority Key Identifier:
keyid:CD:A8:1F:E9:52:61:90:4E:94:12:37:EA:4C:7C:EC:8F:76:8B:04:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zagf6VJhkE6UEjfqTHzsj3aLBG0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/641aec-da38-4df3-8e71-f7fe3e473b12/1/__5RBVrFS6gC5_Ri6l0bvWkV_ds.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/641aec-da38-4df3-8e71-f7fe3e473b12/1/zagf6VJhkE6UEjfqTHzsj3aLBG0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.111.40.0/24
Signature Algorithm: sha256WithRSAEncryption
06:1d:39:a8:a4:cf:24:fa:f1:3e:da:0b:d0:cf:66:62:68:06:
72:3a:8e:4b:b9:72:cc:ca:0f:34:a5:61:9c:ba:36:6a:5d:37:
0b:18:d8:b8:1b:a2:01:bc:74:e4:d3:f5:e6:24:93:80:d2:49:
af:d5:ce:4d:15:73:92:f4:f3:9e:9a:78:73:87:1d:d9:2f:74:
d0:17:0f:07:62:b6:8a:a4:9e:66:4d:c0:a3:10:1d:89:f2:0b:
74:6c:77:04:60:5c:73:8c:69:76:41:c0:d8:72:08:66:e9:25:
cf:76:50:17:c1:1d:1f:aa:20:5e:ac:45:14:27:25:13:6d:a4:
82:7c:bf:f2:87:63:89:4b:0d:95:13:af:8a:cd:ea:15:43:07:
c4:e6:43:e2:d8:a6:28:f4:b9:f8:85:6c:e7:0f:eb:63:ce:fc:
2e:9f:82:34:94:fe:2b:52:0c:35:6a:b3:52:21:9e:6c:6a:81:
da:03:95:99:b0:6f:e5:a3:de:08:af:b9:ef:f8:0a:a8:ee:de:
42:ef:ff:6f:33:8b:bd:5d:c7:25:24:da:93:f6:87:b6:47:fe:
14:9e:18:fe:71:ca:f3:07:5b:b5:8f:e2:d0:16:1c:25:1e:6d:
20:de:17:00:b0:db:70:5c:2e:d7:ca:a2:62:19:60:92:18:c7:
95:54:0c:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:15:33 2025 by rpki-client