Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/767b34-6929-4d19-b7ff-8ae129c06965/1/S0tX1ML0Ez6Pd24HJTvxihV92fk.roa
File: S0tX1ML0Ez6Pd24HJTvxihV92fk.roa (raw, json)
Hash identifier: FKNW8e3bHAz9iZgj62xFs1VWeLRNRj3j/3n3MRxCvBg=
Subject key identifier: 4B:4B:57:D4:C2:F4:13:3E:8F:77:6E:07:25:3B:F1:8A:15:7D:D9:F9
Certificate issuer: /CN=19fec662638dbe92e580135140a6b2f0e93677ce
Certificate serial: 018C5DD3BB27847F2F8B0F9A270ACE7B3249
Authority key identifier: 19:FE:C6:62:63:8D:BE:92:E5:80:13:51:40:A6:B2:F0:E9:36:77:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gf7GYmONvpLlgBNRQKay8Ok2d84.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/767b34-6929-4d19-b7ff-8ae129c06965/1/S0tX1ML0Ez6Pd24HJTvxihV92fk.roa
Signing time: Tue 12 Dec 2023 11:40:06 +0000
ROA not before: Tue 12 Dec 2023 11:40:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 216246
IP address blocks: 194.26.229.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:5d:d3:bb:27:84:7f:2f:8b:0f:9a:27:0a:ce:7b:32:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19fec662638dbe92e580135140a6b2f0e93677ce
Validity
Not Before: Dec 12 11:40:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4b4b57d4c2f4133e8f776e07253bf18a157dd9f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:19:2a:ef:e1:be:45:b6:a0:cb:c7:2d:0b:30:
5d:3c:ec:ff:da:0d:09:12:42:5a:e6:84:93:c2:ab:
35:89:24:c3:de:51:80:62:a6:14:e1:de:70:a9:c2:
25:11:42:46:70:52:1b:b6:2a:e5:6e:56:45:18:43:
ba:87:4b:0b:2a:14:97:14:2f:71:7b:2f:8c:21:cc:
cb:8d:bf:01:53:ae:c5:f7:e4:12:bd:25:f7:38:92:
9f:7e:32:ba:04:51:fa:e4:a8:3f:71:62:c9:39:62:
89:f8:3c:ba:f9:fb:f0:26:1b:15:26:e1:dc:6c:12:
3b:0d:aa:61:90:b5:42:6b:62:08:6d:18:47:b2:6f:
61:44:ff:56:a6:0b:14:0f:89:a6:a9:34:b9:54:75:
53:83:70:8a:a1:d7:d5:63:c3:9e:f7:1e:0f:fb:ef:
bf:60:b2:60:96:a9:ad:20:57:fc:1b:a4:ef:8a:87:
22:6d:cf:0d:90:b5:04:2b:6d:0d:96:c8:57:b5:50:
78:90:0f:fd:1b:fc:bf:e0:29:9d:d4:4e:94:a1:cc:
af:14:af:3e:2f:f1:20:a5:66:b0:28:8f:a3:53:48:
76:3b:22:1d:08:8b:0b:fd:bf:98:91:41:6e:64:8d:
f4:8e:9a:20:3c:86:68:a0:f0:d1:95:96:b6:68:18:
bc:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:4B:57:D4:C2:F4:13:3E:8F:77:6E:07:25:3B:F1:8A:15:7D:D9:F9
X509v3 Authority Key Identifier:
keyid:19:FE:C6:62:63:8D:BE:92:E5:80:13:51:40:A6:B2:F0:E9:36:77:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gf7GYmONvpLlgBNRQKay8Ok2d84.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/767b34-6929-4d19-b7ff-8ae129c06965/1/S0tX1ML0Ez6Pd24HJTvxihV92fk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/767b34-6929-4d19-b7ff-8ae129c06965/1/Gf7GYmONvpLlgBNRQKay8Ok2d84.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.26.229.0/24
Signature Algorithm: sha256WithRSAEncryption
22:2d:24:51:0d:a8:ac:a6:2c:4b:e1:a4:c2:ab:36:a9:35:30:
45:8f:0d:c2:c4:8a:4a:21:dd:19:c4:65:23:78:d6:86:a2:6a:
12:0d:0e:ff:50:cd:c7:49:75:9c:79:00:7d:b5:e4:1a:6b:8b:
1f:10:2c:6a:59:0d:b3:a7:05:b3:b5:a0:2f:b1:c1:d1:61:96:
57:3a:db:8e:fc:2c:de:b9:09:44:f5:78:24:f5:7d:19:12:f1:
06:57:5d:fe:95:cb:1f:f8:09:e0:6a:de:bc:7d:14:9b:85:e6:
bc:0d:17:d0:32:2a:31:37:e1:7f:e3:0a:a5:c2:02:30:7b:51:
9f:11:35:af:55:a4:59:a5:27:74:51:21:90:9e:43:77:b3:54:
58:43:a0:5b:aa:45:49:d7:ea:44:4b:b0:66:0c:f9:4b:af:93:
08:2d:23:19:ed:59:8c:52:72:f8:b8:e6:fb:25:a6:d5:94:58:
10:8d:c7:68:f7:2b:25:7b:6f:dd:2d:96:28:27:e2:ea:db:06:
72:fa:e1:3c:94:12:67:55:ed:c1:17:31:50:03:ef:ff:42:ef:
01:f6:e7:d6:2e:c5:a3:87:90:da:fb:7c:f3:57:ba:da:50:ee:
84:f6:d5:8e:b7:49:56:66:10:bc:97:c1:1e:c4:2b:46:26:9d:
38:7b:63:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 07:21:23 2025 by rpki-client