Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/bd59ae-5b7d-4c26-8e14-24b9e8211885/1/P2sE-3tUICXx7cfC0favLdtRCZ0.roa
File: P2sE-3tUICXx7cfC0favLdtRCZ0.roa (raw, json)
Hash identifier: ayIaE8Pk074Tx7I6FVVUWCPvr0NKwOuaUa8Xe24IzDg=
Subject key identifier: 3F:6B:04:FB:7B:54:20:25:F1:ED:C7:C2:D1:F6:AF:2D:DB:51:09:9D
Certificate issuer: /CN=b215270e3b5976b44f3adece57047d1e0787ba75
Certificate serial: 019427B59D9E6BE5E4A59727C6C438755729
Authority key identifier: B2:15:27:0E:3B:59:76:B4:4F:3A:DE:CE:57:04:7D:1E:07:87:BA:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/shUnDjtZdrRPOt7OVwR9HgeHunU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/bd59ae-5b7d-4c26-8e14-24b9e8211885/1/P2sE-3tUICXx7cfC0favLdtRCZ0.roa
Signing time: Thu 02 Jan 2025 15:50:01 +0000
ROA not before: Thu 02 Jan 2025 15:50:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29119
IP address blocks: 193.38.144.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:9d:9e:6b:e5:e4:a5:97:27:c6:c4:38:75:57:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b215270e3b5976b44f3adece57047d1e0787ba75
Validity
Not Before: Jan 2 15:50:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3f6b04fb7b542025f1edc7c2d1f6af2ddb51099d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:cf:9c:21:f9:dd:2e:15:e7:b8:55:60:75:94:
66:c4:0c:74:4b:b5:50:6c:80:c7:e8:7a:ea:f3:32:
fd:46:d9:38:e0:88:9f:1a:83:7c:bb:7b:c7:de:90:
62:b1:67:6e:26:9b:36:f0:7f:e7:4d:c5:32:8b:f3:
ca:1e:0d:da:ab:af:f1:c9:20:ff:0d:23:60:89:ab:
21:04:04:fd:d1:14:3e:e4:4d:e9:7f:58:02:86:40:
d9:5b:f8:c2:9c:59:6d:b9:f1:65:75:62:e6:df:da:
4b:85:6a:72:a9:f3:53:96:cc:cc:ab:a8:b4:09:15:
ee:7e:0d:ba:34:f8:28:be:cd:fd:5c:eb:15:ae:78:
99:b6:24:e2:c2:04:a9:e7:3f:83:98:d6:7c:cb:a9:
36:51:55:9f:32:c9:fe:f5:06:f0:15:a0:56:7b:49:
69:b8:45:0d:fd:aa:d7:41:57:38:24:79:13:75:64:
74:91:08:73:9b:76:80:66:06:f7:ec:4b:7a:fe:e0:
41:a2:63:c9:ca:bd:bc:20:25:9a:1f:15:1e:b5:d6:
e6:7d:1c:75:86:e3:f2:cf:47:9a:e4:4d:27:a7:dc:
31:6f:51:cb:91:88:14:ab:56:7c:e8:f5:94:4d:16:
34:d3:a7:bd:fb:e1:4f:45:05:8e:25:f6:7d:b2:89:
a2:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:6B:04:FB:7B:54:20:25:F1:ED:C7:C2:D1:F6:AF:2D:DB:51:09:9D
X509v3 Authority Key Identifier:
keyid:B2:15:27:0E:3B:59:76:B4:4F:3A:DE:CE:57:04:7D:1E:07:87:BA:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/shUnDjtZdrRPOt7OVwR9HgeHunU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/bd59ae-5b7d-4c26-8e14-24b9e8211885/1/P2sE-3tUICXx7cfC0favLdtRCZ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/bd59ae-5b7d-4c26-8e14-24b9e8211885/1/shUnDjtZdrRPOt7OVwR9HgeHunU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.38.144.0/22
Signature Algorithm: sha256WithRSAEncryption
5e:2e:1b:65:8c:44:64:82:fa:8c:14:fb:a2:d2:5d:9e:82:b1:
e1:78:d7:cf:e3:17:1f:58:c7:3e:60:6c:d8:f6:53:02:84:dd:
29:c0:e1:c6:8e:d9:92:aa:9f:7e:6a:c3:52:fa:87:1b:29:18:
e4:64:ea:7a:b1:33:8b:7a:f1:31:00:24:b8:f0:8c:3a:7a:53:
6f:c8:5e:50:2c:6b:d3:60:df:a8:de:a7:22:df:8f:dc:a5:db:
c2:be:ae:78:85:7c:68:54:c1:21:7d:32:66:86:1a:3e:66:66:
84:79:03:8d:e9:a5:3b:48:4e:a9:ab:6c:24:24:6e:1c:d5:8d:
53:27:8e:54:08:27:c3:8e:40:34:1c:3b:3c:4a:9b:bc:b4:81:
96:4b:86:06:f9:ff:90:49:84:0e:f5:59:1f:fa:6c:84:22:7a:
18:97:bf:83:b7:6d:5d:5a:d5:a0:7a:06:69:04:4f:e3:11:5f:
39:4b:d6:7d:e6:1d:e2:be:dd:c0:3b:8e:30:7a:e1:ed:48:8c:
4a:5d:1a:73:08:16:3e:b4:a5:47:20:1f:5a:de:f1:25:03:82:
05:74:44:c5:24:e1:95:5f:ca:2f:d4:0a:49:bb:a2:fd:99:04:
23:a9:c5:e2:36:c5:8f:25:72:2e:97:81:9f:9e:68:eb:0a:81:
1f:0c:90:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:35:48 2025 by rpki-client