Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/0e607f-e21f-4cfa-a336-9314860c2c7f/1/S8zFVY79mqxGFg3vSlDd6BDQjs0.roa
File: S8zFVY79mqxGFg3vSlDd6BDQjs0.roa (raw, json)
Hash identifier: qFvb7EVGD4y4Dvp73Z8Yio/HfKjYVxCK6+l2xKQGrJo=
Subject key identifier: 4B:CC:C5:55:8E:FD:9A:AC:46:16:0D:EF:4A:50:DD:E8:10:D0:8E:CD
Certificate issuer: /CN=afab1e48def14b29d21d34234c448ea808e618bf
Certificate serial: 018CC801B64D0B9E4FB0E37BCFD712DBF60E
Authority key identifier: AF:AB:1E:48:DE:F1:4B:29:D2:1D:34:23:4C:44:8E:A8:08:E6:18:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r6seSN7xSynSHTQjTESOqAjmGL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/0e607f-e21f-4cfa-a336-9314860c2c7f/1/S8zFVY79mqxGFg3vSlDd6BDQjs0.roa
Signing time: Tue 02 Jan 2024 02:30:04 +0000
ROA not before: Tue 02 Jan 2024 02:30:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6830
IP address blocks: 193.246.28.0/24 maxlen: 24
193.246.31.0/24 maxlen: 24
193.246.30.0/24 maxlen: 24
193.246.29.0/24 maxlen: 24
193.246.24.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:b6:4d:0b:9e:4f:b0:e3:7b:cf:d7:12:db:f6:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afab1e48def14b29d21d34234c448ea808e618bf
Validity
Not Before: Jan 2 02:30:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4bccc5558efd9aac46160def4a50dde810d08ecd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d3:95:9b:5f:62:ca:b2:2b:04:40:ee:61:3f:
7e:05:b3:d2:76:b2:74:d8:1b:3e:82:d6:bc:aa:74:
5a:f9:19:85:11:51:1d:58:c6:9f:91:69:1d:56:13:
61:c8:93:af:7b:86:21:b7:b9:b8:c6:fe:da:d6:6d:
b4:0e:bc:c8:58:0d:4e:6f:0d:29:76:32:13:a7:1e:
2f:75:73:e5:b2:4e:0d:ac:62:6b:c8:b0:52:a2:fd:
e4:e4:ee:c4:f2:f5:b3:10:a8:26:b6:8a:ac:4b:fa:
b5:1b:d2:be:20:93:2c:12:fd:93:9b:e1:58:ab:ef:
67:a5:8e:27:46:11:d6:49:dd:13:9a:de:ea:86:87:
96:97:0f:02:6a:53:60:dc:43:94:9e:c7:f5:f8:36:
a7:1d:0d:b5:57:8f:b9:0f:0f:f6:37:95:59:b7:eb:
1f:f6:ac:31:04:82:8a:b7:34:57:db:cd:2f:ac:68:
61:8a:2d:8f:ec:32:d4:36:2b:d3:56:c6:94:3f:47:
7c:8b:72:1c:30:71:b3:46:96:51:2d:52:e0:6a:0b:
f8:eb:c2:20:eb:9a:98:b5:33:8c:df:7e:90:ed:a0:
8f:1e:29:ed:09:7f:0f:3f:68:d1:72:97:71:2a:0d:
c8:8b:9e:bd:74:ac:2e:b7:20:ac:ad:8e:aa:c8:af:
9c:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:CC:C5:55:8E:FD:9A:AC:46:16:0D:EF:4A:50:DD:E8:10:D0:8E:CD
X509v3 Authority Key Identifier:
keyid:AF:AB:1E:48:DE:F1:4B:29:D2:1D:34:23:4C:44:8E:A8:08:E6:18:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r6seSN7xSynSHTQjTESOqAjmGL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/0e607f-e21f-4cfa-a336-9314860c2c7f/1/S8zFVY79mqxGFg3vSlDd6BDQjs0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/0e607f-e21f-4cfa-a336-9314860c2c7f/1/r6seSN7xSynSHTQjTESOqAjmGL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.246.24.0/24
193.246.28.0/22
Signature Algorithm: sha256WithRSAEncryption
42:a2:6a:f2:56:a7:32:4a:5e:3a:45:fe:54:eb:10:93:9c:4f:
ad:6a:3d:77:ff:b5:fc:ca:b7:72:53:e8:4a:b3:f1:59:2d:81:
a6:28:3f:cd:3c:2b:73:8c:46:ef:9e:56:ed:09:aa:48:1f:08:
73:6e:b3:26:eb:34:99:31:9f:c8:87:52:cd:3a:d4:0a:a3:88:
e2:f5:71:af:34:92:2f:93:7b:02:aa:f8:70:e8:5b:e6:6d:4f:
e5:87:02:76:f4:20:16:72:90:c8:bd:ad:58:98:2c:2c:8c:ff:
90:55:a7:43:bc:3e:13:24:6c:e7:f5:be:3b:bc:00:88:91:7b:
17:90:36:64:37:fc:ae:15:34:25:c9:15:cd:36:07:cd:aa:25:
28:f4:53:50:9f:1d:56:e9:f1:8e:52:2e:42:33:d3:62:84:da:
64:33:b3:ec:33:ba:51:aa:e5:45:04:06:3f:8b:43:ee:a3:87:
84:8c:e9:ea:ee:0a:43:85:43:94:ef:6d:8b:51:e3:7a:95:6c:
cb:62:49:11:7d:e7:6b:f1:5b:21:c1:4f:88:1c:43:97:5d:24:
96:7c:03:21:e4:85:b5:47:20:d3:90:d5:d1:89:01:1c:0a:34:
a6:e4:b6:25:ce:c3:8c:87:03:06:91:a1:00:ac:ad:bc:a1:20:
56:03:4c:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:34:23 2025 by rpki-client