Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/0e607f-e21f-4cfa-a336-9314860c2c7f/1/2nI4dyEShuwjmFBhOPgTJmX-fhw.roa
File: 2nI4dyEShuwjmFBhOPgTJmX-fhw.roa (raw, json)
Hash identifier: +73w9Ws7YnwZRGLvBJtPGAgsQcJ4YCEQ+ZNV+c3TMEc=
Subject key identifier: DA:72:38:77:21:12:86:EC:23:98:50:61:38:F8:13:26:65:FE:7E:1C
Certificate issuer: /CN=afab1e48def14b29d21d34234c448ea808e618bf
Certificate serial: 2A88
Authority key identifier: AF:AB:1E:48:DE:F1:4B:29:D2:1D:34:23:4C:44:8E:A8:08:E6:18:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r6seSN7xSynSHTQjTESOqAjmGL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/0e607f-e21f-4cfa-a336-9314860c2c7f/1/2nI4dyEShuwjmFBhOPgTJmX-fhw.roa
Signing time: Thu 28 Apr 2022 12:20:09 +0000
ROA not before: Thu 28 Apr 2022 12:20:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 6830
IP address blocks: 193.246.24.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10888 (0x2a88)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afab1e48def14b29d21d34234c448ea808e618bf
Validity
Not Before: Apr 28 12:20:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=da723877211286ec2398506138f8132665fe7e1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:86:07:90:08:6a:30:b3:82:66:b2:17:60:46:
01:6b:2a:22:3d:6c:9a:40:6a:9c:9a:2c:d0:cf:d8:
52:b1:93:2e:dc:ae:6e:2e:aa:38:0e:ba:9d:1c:3a:
cb:8d:41:5a:10:eb:5e:9b:3d:6c:e6:52:c2:4e:0c:
33:67:10:bb:83:08:e0:ab:a1:34:66:71:30:98:cc:
1f:1d:63:21:1d:c3:7d:95:3c:d9:2a:87:f1:19:21:
1c:1a:88:89:8b:14:e6:c0:4f:73:df:51:0e:73:2e:
10:61:04:8d:8b:74:ad:fb:dc:63:8f:5d:c3:48:05:
3c:fa:8b:70:4a:f1:59:90:c8:66:40:45:b8:f0:b2:
43:80:75:cd:1d:03:49:fa:80:e8:e7:33:df:ba:6d:
57:43:af:11:2d:52:ae:6e:85:6f:c1:71:40:23:bf:
18:ac:51:8d:f1:0f:64:43:24:26:93:55:93:9e:2d:
0d:b3:a3:a9:68:c7:63:0e:53:f1:7b:17:f7:b5:2a:
de:c8:06:e7:2d:7d:12:da:7a:c7:0d:63:b8:5a:32:
c5:36:0a:35:67:76:9f:58:a6:ce:c5:7f:91:3f:22:
33:c1:12:f4:29:ab:b8:43:ea:d1:a1:d9:0d:35:e9:
ee:62:c7:96:43:5c:c7:ca:38:8d:20:7d:51:c5:21:
86:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:72:38:77:21:12:86:EC:23:98:50:61:38:F8:13:26:65:FE:7E:1C
X509v3 Authority Key Identifier:
keyid:AF:AB:1E:48:DE:F1:4B:29:D2:1D:34:23:4C:44:8E:A8:08:E6:18:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r6seSN7xSynSHTQjTESOqAjmGL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/0e607f-e21f-4cfa-a336-9314860c2c7f/1/2nI4dyEShuwjmFBhOPgTJmX-fhw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/0e607f-e21f-4cfa-a336-9314860c2c7f/1/r6seSN7xSynSHTQjTESOqAjmGL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.246.24.0/21
Signature Algorithm: sha256WithRSAEncryption
6c:2c:c9:b5:31:f2:15:48:63:9f:ac:43:98:69:ed:8a:c3:7e:
3f:a5:c5:0a:d4:b5:07:a2:4f:f8:9a:3f:9f:33:f5:c8:2b:71:
4d:af:de:b5:ae:98:97:fd:02:ac:ae:c8:6b:f4:f6:0b:02:d9:
c8:f2:60:72:55:4c:e8:6e:29:4b:76:67:9f:18:5a:0d:50:31:
45:14:68:c8:5e:46:09:8c:b3:14:70:b2:24:52:56:ad:16:d6:
d3:ce:53:1a:84:2a:60:4e:43:b3:2d:de:14:b1:a4:61:1c:4a:
1a:c6:13:84:47:c1:09:1f:fc:46:32:0c:ea:b9:57:1a:4d:15:
42:1d:71:bd:21:48:f4:0c:9a:fa:4c:ee:bc:a5:9c:b2:8b:e6:
bf:73:4f:b7:be:ef:1e:34:f8:82:97:c2:c2:ca:6d:1e:4f:45:
f7:39:0b:7d:aa:44:a1:12:9b:dd:a0:f4:57:f4:ae:4f:8c:82:
e5:bb:e8:c1:af:ed:7e:ad:f8:22:7b:79:33:75:bb:4d:ea:e8:
16:b4:b5:86:a2:ef:35:4c:6d:eb:dc:e4:91:34:58:ed:fb:4e:
d7:cd:30:fb:e3:58:fc:45:b0:a6:8b:ec:1d:ee:e7:b0:19:c4:
dd:b4:e5:a0:2a:a9:b4:04:47:f1:2a:1a:f9:50:86:21:b0:7b:
a4:68:e8:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:08:18 2025 by rpki-client