Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/49fbdf-ae77-4b7e-b2bc-6312fd1ad954/1/_iglB0GcSZQJePvuNm9u3NfLebM.roa
File: _iglB0GcSZQJePvuNm9u3NfLebM.roa (raw, json)
Hash identifier: 5gxGmTJ/3MgITtKr4165Z71Qa8IfUuXYus1dtSnA2pE=
Subject key identifier: FE:28:25:07:41:9C:49:94:09:78:FB:EE:36:6F:6E:DC:D7:CB:79:B3
Certificate issuer: /CN=dd2a1fd0ac3786905695af57f3ff277ffa86fea0
Certificate serial: E68E2B
Authority key identifier: DD:2A:1F:D0:AC:37:86:90:56:95:AF:57:F3:FF:27:7F:FA:86:FE:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Sof0Kw3hpBWla9X8_8nf_qG_qA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/49fbdf-ae77-4b7e-b2bc-6312fd1ad954/1/_iglB0GcSZQJePvuNm9u3NfLebM.roa
Signing time: Sat 01 Jan 2022 12:00:38 +0000
ROA not before: Sat 01 Jan 2022 12:00:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 199994
IP address blocks: 193.104.34.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15109675 (0xe68e2b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd2a1fd0ac3786905695af57f3ff277ffa86fea0
Validity
Not Before: Jan 1 12:00:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fe282507419c49940978fbee366f6edcd7cb79b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f2:6e:9d:a3:32:67:6f:4c:fc:b4:bc:81:90:
41:81:20:23:73:e7:e4:67:9b:82:c7:05:71:2f:e3:
67:f5:c6:1e:14:8b:ca:91:14:d2:ba:81:db:8d:20:
4e:d1:bd:d3:73:66:8b:2c:3b:3c:d8:88:0c:3a:b1:
e7:7b:93:20:55:c7:6f:57:fb:ea:09:67:5d:5e:21:
89:9d:59:fa:bc:d1:c0:00:f4:1b:94:2d:66:ee:cb:
aa:55:1c:d5:f0:51:2e:43:47:c2:66:35:77:de:27:
0a:4e:83:7f:8c:af:e0:69:98:2f:d7:17:40:ca:7d:
43:f8:53:bd:53:d4:d9:06:bb:55:9b:d1:d1:7b:40:
d4:54:8e:e6:7f:cd:4c:ad:81:15:31:be:bf:dc:04:
f7:d3:d7:12:d8:df:ae:1c:2f:eb:fa:2c:0b:6d:cc:
87:e2:d4:74:36:43:f1:08:e2:60:48:1f:ad:7d:61:
21:da:8f:ab:f9:90:03:31:e5:c6:bd:2e:42:4d:ee:
2d:b9:37:4c:5e:eb:2a:1a:82:90:d3:23:4f:8b:14:
33:80:2d:a4:5d:85:04:b7:e9:29:2c:56:8b:b7:0c:
93:34:8a:f9:de:52:b6:34:d2:b8:3a:dc:a6:a0:17:
1a:9d:56:2b:93:49:fd:3a:db:e0:b4:5f:3c:75:d8:
d9:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:28:25:07:41:9C:49:94:09:78:FB:EE:36:6F:6E:DC:D7:CB:79:B3
X509v3 Authority Key Identifier:
keyid:DD:2A:1F:D0:AC:37:86:90:56:95:AF:57:F3:FF:27:7F:FA:86:FE:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Sof0Kw3hpBWla9X8_8nf_qG_qA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/49fbdf-ae77-4b7e-b2bc-6312fd1ad954/1/_iglB0GcSZQJePvuNm9u3NfLebM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/49fbdf-ae77-4b7e-b2bc-6312fd1ad954/1/3Sof0Kw3hpBWla9X8_8nf_qG_qA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.104.34.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:2d:c5:32:79:45:86:3c:09:7b:0a:1f:f6:a2:c2:e7:62:02:
10:24:f8:a2:29:f9:19:ec:fb:cc:d3:c8:05:bd:f8:0b:9e:98:
c5:64:71:79:5e:16:8e:3f:86:09:61:ec:59:22:17:21:9d:2d:
63:f7:25:5f:44:d2:c0:2a:c4:43:d1:e7:7f:e3:75:92:65:b2:
67:52:08:26:ba:32:ba:0b:f7:78:41:91:48:e0:27:8b:af:e5:
03:c7:1d:0c:a6:29:d1:fc:3b:f0:7f:5c:9e:01:4a:38:9d:2b:
4d:00:67:e7:c6:5f:83:72:5f:be:25:73:32:be:26:66:86:59:
f5:b4:b3:3b:04:f7:86:66:fb:ef:0f:0e:ef:65:b2:09:d3:26:
cc:99:1b:f3:aa:8d:da:05:ba:1e:0c:90:80:8e:0e:da:e0:38:
1f:89:15:19:5a:5f:87:b6:8f:50:37:55:87:7e:5e:ee:e2:9b:
16:e7:65:4e:b7:d2:98:71:3d:bd:dc:4f:19:82:f4:fe:10:8f:
17:a0:a6:20:4d:0d:f8:74:d8:5b:8d:32:90:19:de:27:78:83:
08:05:53:e1:f3:a5:81:eb:47:cd:e6:c3:2b:be:43:75:28:40:
bc:b0:af:5d:70:b8:32:3e:cc:2a:5d:c2:cf:49:3f:01:df:a0:
38:e1:3e:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:22:35 2025 by rpki-client