Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/deeb1f-1f35-4c61-ab30-cbfa17e326fb/1/aPcnWCFMBiimS8fWMvYntf_udzc.roa
File: aPcnWCFMBiimS8fWMvYntf_udzc.roa (raw, json)
Hash identifier: FtJTWg8pjGg/w+7RI7SkmnD3I1ODsIS/SLJTAY78+ow=
Subject key identifier: 68:F7:27:58:21:4C:06:28:A6:4B:C7:D6:32:F6:27:B5:FF:EE:77:37
Certificate issuer: /CN=7b7645c8328f39afcdd079fa54a0ba3be78d4287
Certificate serial: 018A4A76A6CCA9D5F7BF729EC0DB2A87AFC0
Authority key identifier: 7B:76:45:C8:32:8F:39:AF:CD:D0:79:FA:54:A0:BA:3B:E7:8D:42:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e3ZFyDKPOa_N0Hn6VKC6O-eNQoc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/deeb1f-1f35-4c61-ab30-cbfa17e326fb/1/aPcnWCFMBiimS8fWMvYntf_udzc.roa
Signing time: Thu 31 Aug 2023 07:20:04 +0000
ROA not before: Thu 31 Aug 2023 07:20:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 137409
IP address blocks: 193.35.228.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:4a:76:a6:cc:a9:d5:f7:bf:72:9e:c0:db:2a:87:af:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b7645c8328f39afcdd079fa54a0ba3be78d4287
Validity
Not Before: Aug 31 07:20:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=68f72758214c0628a64bc7d632f627b5ffee7737
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:2d:4b:b0:1e:bd:39:1d:d5:7b:1c:92:3f:cd:
b3:e4:00:3a:65:af:f2:5b:d7:57:2c:f4:77:eb:ab:
28:92:de:57:41:55:bc:49:dd:84:91:7c:44:c6:d5:
dc:a5:0d:23:c2:d1:fc:d4:3c:23:72:d6:f8:43:84:
09:4d:03:59:ca:68:27:04:56:0b:e1:ac:8d:64:ef:
64:68:78:98:19:88:58:b7:df:de:16:6f:25:41:0a:
f4:83:b2:3b:a9:a0:17:cc:74:71:b3:de:f0:14:79:
b4:2c:05:23:34:36:21:5b:2c:02:4d:c2:d9:9a:24:
b6:63:f3:bd:6c:b7:17:51:22:df:8a:28:f7:a6:39:
2c:75:ef:4a:c4:d3:be:ce:10:15:66:fe:4d:47:ee:
57:79:b0:a9:27:08:c2:a5:b8:18:42:10:8b:09:db:
2f:f1:75:0d:85:9d:d7:d7:7d:99:ba:ab:00:5b:d8:
b6:ef:23:cc:ab:9a:ed:90:9d:41:e5:74:9f:f2:0f:
a5:0e:8b:fa:2e:33:fe:f5:60:48:45:a6:b9:03:e1:
27:ab:e1:18:db:40:b9:16:b2:ab:cb:b8:41:05:31:
0d:15:8e:0f:1a:75:96:63:39:3c:ab:25:2d:46:c0:
22:3f:67:05:46:ee:05:17:0e:f3:1d:a1:84:d8:15:
26:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:F7:27:58:21:4C:06:28:A6:4B:C7:D6:32:F6:27:B5:FF:EE:77:37
X509v3 Authority Key Identifier:
keyid:7B:76:45:C8:32:8F:39:AF:CD:D0:79:FA:54:A0:BA:3B:E7:8D:42:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3ZFyDKPOa_N0Hn6VKC6O-eNQoc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/deeb1f-1f35-4c61-ab30-cbfa17e326fb/1/aPcnWCFMBiimS8fWMvYntf_udzc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/deeb1f-1f35-4c61-ab30-cbfa17e326fb/1/e3ZFyDKPOa_N0Hn6VKC6O-eNQoc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.35.228.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:e6:d2:43:5f:4e:46:3d:38:d6:e2:4a:9b:7c:ff:29:82:40:
da:38:84:8e:c4:16:00:15:1b:80:4c:e4:60:15:ae:12:2c:19:
7d:94:ef:0f:70:57:ed:f3:f5:4e:1c:e9:95:9e:2f:de:92:38:
71:46:38:01:c2:b8:ef:3a:5e:b6:28:b1:19:57:d5:2a:fd:33:
ef:29:2b:98:5b:c1:dc:83:8f:b2:46:3e:ee:8c:71:e8:bb:0a:
a6:9d:42:cc:f6:8e:6a:6c:5f:67:df:0b:a2:f0:bd:da:93:7e:
28:fb:f4:58:be:65:68:48:5e:a0:78:35:3f:08:e7:50:bc:3e:
5f:5f:d7:ab:64:d7:3b:99:11:93:f2:cb:6d:8a:52:92:1a:f7:
94:f6:97:b4:c5:8d:cc:6d:17:1d:9f:13:21:44:d5:03:d1:6f:
6b:e4:49:a1:9c:1c:54:42:5b:56:ae:17:54:de:02:da:6e:e3:
a6:c0:76:ae:6f:68:fe:42:32:8a:08:d5:d5:76:15:f5:1f:72:
95:e4:4c:16:bf:3e:29:75:2a:04:01:94:f5:21:25:94:c8:f6:
9c:d7:e2:ca:ca:0b:ae:98:b9:df:cb:bd:e9:72:9b:3d:53:bb:
2c:77:2a:f3:35:cc:a5:53:a7:2b:86:7e:92:3d:e7:13:73:92:
00:06:cb:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:21:43 2025 by rpki-client