Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/f89b64-87b7-48f4-8b60-c3204bde7773/1/KAFC3cLT9QH5ScoLRsIonvwUhMU.roa
File: KAFC3cLT9QH5ScoLRsIonvwUhMU.roa (raw, json)
Hash identifier: whbGIDYtnScT7kdeeSbgI7fHOy+PdfaxJL9lQqTD7kk=
Subject key identifier: 28:01:42:DD:C2:D3:F5:01:F9:49:CA:0B:46:C2:28:9E:FC:14:84:C5
Certificate issuer: /CN=021b3ea35edfdd138c15506d74a76022dd37694b
Certificate serial: 019427B5C2428A22D25C2183B5950B94212C
Authority key identifier: 02:1B:3E:A3:5E:DF:DD:13:8C:15:50:6D:74:A7:60:22:DD:37:69:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ahs-o17f3ROMFVBtdKdgIt03aUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/f89b64-87b7-48f4-8b60-c3204bde7773/1/KAFC3cLT9QH5ScoLRsIonvwUhMU.roa
Signing time: Thu 02 Jan 2025 15:50:10 +0000
ROA not before: Thu 02 Jan 2025 15:50:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42873
IP address blocks: 193.196.12.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:c2:42:8a:22:d2:5c:21:83:b5:95:0b:94:21:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=021b3ea35edfdd138c15506d74a76022dd37694b
Validity
Not Before: Jan 2 15:50:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=280142ddc2d3f501f949ca0b46c2289efc1484c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:7a:f8:2f:56:e2:a1:a8:f2:08:e6:f3:42:97:
80:9a:7b:f9:7b:47:f1:73:91:26:25:ca:1b:ee:51:
40:e1:e7:4c:43:e5:2a:e7:9e:8b:e0:64:e7:37:ad:
bd:c9:e4:12:bd:1c:52:07:ca:42:99:29:62:4b:a1:
24:4a:21:e5:09:0c:ed:37:00:a3:5e:95:d5:ae:48:
0a:d3:be:93:fb:b4:60:a0:bc:ff:58:bd:e7:0c:01:
24:94:d4:14:17:7a:55:e4:c2:ac:5c:37:05:04:8d:
c3:ba:3b:1a:66:ff:7a:6d:13:08:4c:10:2b:70:c8:
e2:38:bf:e8:4b:1b:9d:11:37:02:55:41:60:8e:f6:
18:61:2d:6d:09:22:0d:ad:8f:5e:d9:e5:09:f0:85:
3a:21:92:fe:ce:a6:f4:4d:be:c1:57:00:40:f5:38:
80:4e:42:d8:23:33:a3:cf:40:15:67:02:d6:c3:b5:
d4:b2:b6:cd:e0:56:a2:47:30:d3:0e:a3:99:9b:e8:
cf:21:98:cc:b2:f8:7d:fb:3f:85:e6:03:04:82:e9:
85:ad:8c:37:f3:85:de:65:e8:ea:a6:90:e3:6e:ac:
2f:a0:5c:34:1b:35:67:4e:f9:aa:c8:61:98:40:68:
40:90:e3:f3:6b:9f:65:27:77:31:27:95:87:85:34:
b3:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:01:42:DD:C2:D3:F5:01:F9:49:CA:0B:46:C2:28:9E:FC:14:84:C5
X509v3 Authority Key Identifier:
keyid:02:1B:3E:A3:5E:DF:DD:13:8C:15:50:6D:74:A7:60:22:DD:37:69:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ahs-o17f3ROMFVBtdKdgIt03aUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f89b64-87b7-48f4-8b60-c3204bde7773/1/KAFC3cLT9QH5ScoLRsIonvwUhMU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f89b64-87b7-48f4-8b60-c3204bde7773/1/Ahs-o17f3ROMFVBtdKdgIt03aUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.196.12.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:3f:9d:14:1e:77:2e:f0:54:b2:73:82:60:84:3d:12:c5:bc:
56:ff:85:d2:86:6f:84:83:09:d6:31:e5:b2:87:38:5d:37:9a:
aa:10:0d:44:fc:98:a3:8f:60:c3:ed:a5:c2:f0:3f:2c:c0:32:
e2:ad:37:3b:6e:55:5d:76:a8:77:15:51:e9:52:3c:51:37:02:
5b:fd:29:ff:26:bc:57:9c:fc:37:6e:ab:be:51:e6:9d:25:9b:
dd:1f:18:77:1d:ee:39:56:56:f4:bb:ef:e3:c0:27:69:4a:a0:
0a:ba:0a:24:2e:91:c1:a5:0d:64:1c:12:01:f2:ce:de:4f:3d:
93:a9:75:c7:77:46:71:36:c2:34:9c:be:f9:63:a7:ac:d4:59:
e2:f1:1f:24:1a:c4:6b:6d:f5:1a:7e:f3:d0:3c:92:0b:07:e3:
16:8f:d8:d0:1c:1e:26:90:78:c2:da:66:18:be:61:88:70:2e:
36:70:dd:60:99:52:6c:07:1e:66:76:f1:63:81:20:3d:e1:9a:
f1:34:81:e2:65:43:ee:15:6e:16:c3:f9:b5:90:40:14:2b:28:
18:da:65:9f:48:75:d5:ec:7d:74:e1:1a:d2:ea:3b:0a:93:b4:
e9:0e:03:b2:55:ce:fb:c9:46:78:1e:fe:27:8f:67:36:80:2b:
f5:28:96:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:50:38 2025 by rpki-client