Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/a4cd0d-af14-49c3-9481-35479c54dcbd/1/4INtcWr4FY9nSjuvHsQ9oLOL7IE.roa
File: 4INtcWr4FY9nSjuvHsQ9oLOL7IE.roa (raw, json)
Hash identifier: vUoaC6Kug6vbJXYJ+9+HB1jGB86UaesQGKpB8LGNIFw=
Subject key identifier: E0:83:6D:71:6A:F8:15:8F:67:4A:3B:AF:1E:C4:3D:A0:B3:8B:EC:81
Certificate issuer: /CN=2fe4173626f4602640e8d4e96b54a1a096abe78b
Certificate serial: 020E5FCD
Authority key identifier: 2F:E4:17:36:26:F4:60:26:40:E8:D4:E9:6B:54:A1:A0:96:AB:E7:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L-QXNib0YCZA6NTpa1ShoJar54s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/a4cd0d-af14-49c3-9481-35479c54dcbd/1/4INtcWr4FY9nSjuvHsQ9oLOL7IE.roa
Signing time: Sat 01 Jan 2022 12:02:56 +0000
ROA not before: Sat 01 Jan 2022 12:02:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211419
IP address blocks: 193.38.247.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34496461 (0x20e5fcd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fe4173626f4602640e8d4e96b54a1a096abe78b
Validity
Not Before: Jan 1 12:02:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e0836d716af8158f674a3baf1ec43da0b38bec81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:84:9f:cb:38:d1:ce:62:7a:bd:0b:83:4b:4f:
6e:b8:fc:d9:75:01:1b:ca:ed:f5:2b:45:a3:00:9c:
1f:72:7b:9e:f9:44:f0:de:fc:a8:0b:25:96:a2:a9:
28:4e:7c:78:8f:0b:4d:8b:63:4d:0f:de:ab:8a:fb:
5c:0c:11:f3:c4:12:9b:60:ca:df:c2:cf:14:12:4b:
a2:ab:13:d4:15:95:44:14:ea:0b:20:cf:41:c1:e4:
c0:db:0d:e6:6c:c3:bd:42:43:85:86:bc:5f:2c:47:
19:41:ad:26:88:c6:d1:71:a2:cf:0c:07:01:7f:01:
11:3e:f1:1c:f8:e0:e9:e3:0a:35:b4:e4:ca:e1:46:
c7:10:95:8d:01:56:11:0e:70:ac:a2:0e:05:d2:ca:
88:0c:5d:40:85:07:2e:87:f2:49:12:e2:cc:0d:de:
79:c6:44:5a:ac:1e:3a:c8:ec:01:74:74:31:49:fa:
f3:03:6f:75:96:99:6e:8b:9f:87:89:3c:9c:8c:a4:
1f:d8:16:4c:a5:59:5d:03:29:84:c0:6f:2b:a2:e0:
a3:e1:cd:80:d6:64:2d:a4:07:7f:41:dc:14:4b:60:
46:c7:1c:76:62:bf:f9:bf:d5:39:2d:b7:f5:ef:b5:
0c:1a:60:ae:7c:73:25:9b:93:84:8b:2b:96:5f:06:
4a:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:83:6D:71:6A:F8:15:8F:67:4A:3B:AF:1E:C4:3D:A0:B3:8B:EC:81
X509v3 Authority Key Identifier:
keyid:2F:E4:17:36:26:F4:60:26:40:E8:D4:E9:6B:54:A1:A0:96:AB:E7:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L-QXNib0YCZA6NTpa1ShoJar54s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/a4cd0d-af14-49c3-9481-35479c54dcbd/1/4INtcWr4FY9nSjuvHsQ9oLOL7IE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/a4cd0d-af14-49c3-9481-35479c54dcbd/1/L-QXNib0YCZA6NTpa1ShoJar54s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.38.247.0/24
Signature Algorithm: sha256WithRSAEncryption
27:ea:aa:75:99:74:1b:71:03:11:0d:f1:9e:f6:1d:d8:da:7a:
44:50:bf:eb:39:7d:56:73:a1:4b:40:c0:66:06:db:d7:1d:6e:
7d:f1:51:6a:34:e7:29:68:14:3a:9e:45:88:85:f0:d4:47:c4:
37:33:b2:ce:62:6a:b0:6c:6b:b2:99:e6:b9:0a:42:69:55:12:
7b:95:ab:e9:cb:3e:13:f9:2e:64:85:86:c7:10:c5:26:51:fc:
e0:63:0e:c4:e4:65:73:61:86:23:90:04:fa:7d:ea:e6:37:1c:
a0:eb:0c:87:80:18:18:ec:1b:64:1f:0a:a9:da:a3:af:9b:5a:
d7:09:ce:05:68:cd:cc:00:3f:b2:3f:cb:25:46:70:2c:33:5b:
8d:6c:18:a4:d6:7e:94:93:c2:09:c1:37:54:8d:1d:3c:0a:f0:
56:c5:c8:8e:75:b8:48:b3:50:0a:9c:ec:57:7a:7c:b5:63:e6:
d7:1e:85:8c:7c:c7:1a:d0:da:fe:ff:60:3d:5f:73:1e:f3:86:
7a:0d:4c:d9:93:e4:bd:3b:b8:56:e7:bc:82:4f:1e:10:5d:fd:
d2:3a:00:1b:2e:2a:ec:6e:c9:9c:ea:02:aa:1a:74:09:5f:b3:
17:4d:b0:3f:03:79:3f:05:f0:73:3d:a5:d0:82:5a:b6:6d:9c:
4b:df:07:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:24:59 2025 by rpki-client