Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/x93oIxwN7f9CnY5MK-gEMFA9RCs.roa
File: x93oIxwN7f9CnY5MK-gEMFA9RCs.roa (raw, json)
Hash identifier: iUrM+UkqfotbOBAOD6sNrVDAFzEQJnu2I0F39zCKGjM=
Subject key identifier: C7:DD:E8:23:1C:0D:ED:FF:42:9D:8E:4C:2B:E8:04:30:50:3D:44:2B
Certificate issuer: /CN=b27261d715348bfd73ce9dbb72488656993ba2f1
Certificate serial: 0194221FBC408D9FF3A6A4895B90962B794A
Authority key identifier: B2:72:61:D7:15:34:8B:FD:73:CE:9D:BB:72:48:86:56:99:3B:A2:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/snJh1xU0i_1zzp27ckiGVpk7ovE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/x93oIxwN7f9CnY5MK-gEMFA9RCs.roa
Signing time: Wed 01 Jan 2025 13:48:12 +0000
ROA not before: Wed 01 Jan 2025 13:48:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51579
IP address blocks: 45.143.236.0/23 maxlen: 23
193.26.133.0/24 maxlen: 24
193.26.208.0/24 maxlen: 24
2a0e:e6c0:2000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:bc:40:8d:9f:f3:a6:a4:89:5b:90:96:2b:79:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b27261d715348bfd73ce9dbb72488656993ba2f1
Validity
Not Before: Jan 1 13:48:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c7dde8231c0dedff429d8e4c2be80430503d442b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:9f:d8:2d:2b:83:49:eb:77:71:10:72:35:29:
43:c9:a9:f9:47:f2:d8:a3:f0:93:3c:25:d5:9c:0e:
1d:47:0b:c5:14:d8:6a:88:4d:c1:f4:9f:9e:78:b3:
16:ae:75:84:65:25:f5:7b:d7:90:4c:a6:36:1a:4a:
ac:76:5e:de:4c:53:8d:7f:64:80:08:28:e6:b4:69:
20:85:7e:10:21:db:eb:2c:98:c6:38:7d:45:46:f5:
eb:db:89:5b:a0:cd:b7:e0:25:0c:71:46:3e:80:62:
90:03:bd:d2:5b:e4:56:31:16:57:ae:97:b3:88:d2:
f0:a3:ff:64:39:ed:ce:dc:94:74:2f:fb:08:88:f8:
a1:55:28:dd:12:65:a6:63:6b:39:7c:ab:8b:df:26:
ac:7b:ad:07:45:39:64:89:a1:ee:10:fe:2e:e1:a5:
2b:e5:16:ee:0d:8c:2b:8e:6a:5b:d0:dd:e7:01:97:
05:f2:d7:26:a5:d7:d2:81:f3:0c:c3:20:3f:4a:a2:
84:83:56:d4:c3:f7:a0:5d:1b:02:e3:8e:aa:55:7f:
a5:71:70:c8:91:aa:84:43:06:21:c4:ba:4b:2c:97:
b1:47:2a:0b:84:0d:c2:2b:88:f4:b7:c9:7f:18:7a:
f9:f7:53:70:f9:6e:f6:65:e7:79:1a:3f:47:c9:61:
44:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:DD:E8:23:1C:0D:ED:FF:42:9D:8E:4C:2B:E8:04:30:50:3D:44:2B
X509v3 Authority Key Identifier:
keyid:B2:72:61:D7:15:34:8B:FD:73:CE:9D:BB:72:48:86:56:99:3B:A2:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/snJh1xU0i_1zzp27ckiGVpk7ovE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/x93oIxwN7f9CnY5MK-gEMFA9RCs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/snJh1xU0i_1zzp27ckiGVpk7ovE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.143.236.0/23
193.26.133.0/24
193.26.208.0/24
IPv6:
2a0e:e6c0:2000::/36
Signature Algorithm: sha256WithRSAEncryption
7b:2d:60:81:05:84:e2:b0:df:a0:ea:7f:37:1d:20:14:0c:aa:
60:f4:57:9c:08:dd:7f:c8:22:84:e0:0e:7d:21:40:54:d4:c2:
cf:fd:d2:a5:58:d9:26:60:8c:b4:0e:79:fb:a3:99:86:da:1c:
5e:3f:88:d0:cf:fb:f4:4d:23:fd:63:36:7e:9d:8a:bd:2e:8e:
b6:38:cc:70:dd:cf:cc:29:26:2f:e0:cf:ca:66:e1:d6:77:00:
5f:12:0c:7d:25:04:f1:30:8b:c0:66:fb:fc:6a:25:90:12:6e:
ea:8f:37:5d:ef:25:45:cd:d7:e0:91:8b:ff:bd:aa:9e:b3:72:
43:48:3c:8e:33:41:33:10:78:6d:43:38:db:72:5e:48:ea:15:
1f:63:50:5a:4b:01:fd:d1:ad:8f:fd:fd:07:48:19:2d:78:7c:
11:bc:ba:cc:95:96:db:e3:54:46:45:dd:f3:77:25:20:ac:37:
fc:e5:3f:a5:9e:63:6c:a7:c0:b6:c2:d4:9b:7d:5d:4f:75:a1:
d2:3a:bf:55:59:8f:fd:75:1d:89:31:39:7b:7d:20:c7:75:8b:
57:40:fe:36:bb:7d:d1:01:80:80:e8:8e:0e:4e:1e:9e:52:0e:
87:d9:ae:00:11:e8:2e:98:18:c8:7d:c9:ec:be:19:16:b7:c5:
06:bc:86:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 13:05:36 2025 by rpki-client