Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/3faba7-3529-414d-a79f-25ff96d41afb/1/id5g4ruuScRWbV19sATpy6RboyA.roa
File: id5g4ruuScRWbV19sATpy6RboyA.roa (raw, json)
Hash identifier: 2PyPADhOx4J0QJSWPbRQhP7BdhcXZAvwo4ofHQNNPx4=
Subject key identifier: 89:DE:60:E2:BB:AE:49:C4:56:6D:5D:7D:B0:04:E9:CB:A4:5B:A3:20
Certificate issuer: /CN=823b669a87620faf0c422710e26ee3000c9a9a41
Certificate serial: 01857227C197C2933DFEB7296EBDF3A23E06
Authority key identifier: 82:3B:66:9A:87:62:0F:AF:0C:42:27:10:E2:6E:E3:00:0C:9A:9A:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gjtmmodiD68MQicQ4m7jAAyamkE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/3faba7-3529-414d-a79f-25ff96d41afb/1/id5g4ruuScRWbV19sATpy6RboyA.roa
Signing time: Mon 02 Jan 2023 11:04:46 +0000
ROA not before: Mon 02 Jan 2023 11:04:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 193.243.186.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:27:c1:97:c2:93:3d:fe:b7:29:6e:bd:f3:a2:3e:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=823b669a87620faf0c422710e26ee3000c9a9a41
Validity
Not Before: Jan 2 11:04:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=89de60e2bbae49c4566d5d7db004e9cba45ba320
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:ae:a0:c6:3a:68:c7:73:99:32:6b:2e:b2:ae:
ae:36:af:91:72:ba:b7:e4:24:3c:16:21:be:fe:f5:
43:f0:0a:03:af:2a:89:58:ed:58:fc:3b:05:a9:fe:
fc:d1:2a:dd:51:74:c6:39:d7:bc:03:16:f5:a8:24:
55:01:51:ea:ea:c1:a0:db:f3:2b:15:5f:a6:b4:7f:
6e:65:e4:4c:7e:1f:cb:b9:7c:ae:d0:db:d8:f9:16:
dd:ab:e9:67:9b:ab:a6:c0:0c:34:05:7d:d1:92:3e:
60:78:8a:e4:d1:3a:64:3f:4d:ac:e1:f3:24:86:54:
a0:70:75:6d:56:3a:d1:80:b5:5b:7e:48:df:60:92:
7d:ff:ae:20:75:9d:e4:e7:54:74:8c:2d:92:48:9c:
90:f6:35:9d:9d:e3:88:3d:62:f5:f6:d4:d3:87:b5:
bf:4a:b1:0f:b2:6a:fe:10:d1:f5:79:b3:ce:b3:76:
7f:ff:15:f0:3f:d8:cf:f8:5e:61:f1:89:22:8e:0b:
e1:9d:c6:97:c1:0d:ea:24:99:c9:ed:da:5e:69:0b:
f5:23:0c:d9:8e:ba:79:55:7e:0f:27:60:0d:30:27:
e9:07:9f:48:d6:46:2f:bf:85:f9:71:84:6a:84:94:
c5:4f:b2:22:b1:80:a9:ab:21:03:af:65:12:02:97:
4a:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:DE:60:E2:BB:AE:49:C4:56:6D:5D:7D:B0:04:E9:CB:A4:5B:A3:20
X509v3 Authority Key Identifier:
keyid:82:3B:66:9A:87:62:0F:AF:0C:42:27:10:E2:6E:E3:00:0C:9A:9A:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gjtmmodiD68MQicQ4m7jAAyamkE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/3faba7-3529-414d-a79f-25ff96d41afb/1/id5g4ruuScRWbV19sATpy6RboyA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/3faba7-3529-414d-a79f-25ff96d41afb/1/gjtmmodiD68MQicQ4m7jAAyamkE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.243.186.0/24
Signature Algorithm: sha256WithRSAEncryption
42:4d:c7:86:28:28:77:51:ed:cb:cb:f8:a9:af:f4:ec:85:f2:
78:ea:e3:e9:40:13:05:85:e0:ef:eb:0c:ea:42:41:01:8c:2a:
14:13:35:ae:9e:50:b5:27:96:8d:19:b7:1a:1a:d7:e7:20:ed:
38:e4:01:32:f3:10:35:b4:40:11:81:4b:9c:33:ec:08:f1:26:
4c:7f:48:26:bc:ab:8f:f3:e7:4f:c8:83:03:3c:92:3d:d3:1f:
48:87:9a:a3:54:94:3c:21:42:ff:c8:ad:a4:a6:b6:ed:36:b4:
db:b9:cd:f2:f6:67:9e:7b:47:9e:a4:30:b9:7a:23:2d:4a:c9:
e8:f2:9d:de:30:04:e8:94:db:d6:12:48:5d:ed:3e:23:fc:8e:
40:d8:6f:ca:7b:c3:75:3b:b2:87:75:47:30:d7:46:86:43:00:
2f:fb:8a:61:1b:be:15:ce:6b:97:22:bd:c9:9c:2f:a9:56:61:
8c:26:6b:4f:e0:fe:73:df:b4:3d:7f:3b:9c:64:8e:09:6f:46:
68:43:bf:0f:d7:e7:e4:ed:27:2a:fe:dd:e5:a0:e3:c1:2c:99:
52:a2:53:28:e8:e3:63:42:a5:ee:b9:e5:b2:89:ca:86:ca:76:
64:3b:e1:c8:12:c1:47:0d:7e:66:31:0d:df:44:62:46:6c:f6:
62:e2:8f:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:25:55 2025 by rpki-client