Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/474016-6bf2-40b2-9ba7-27ce85ef7477/1/4sCdUrrg7-vswiKHkNSy1fkSLQc.roa
File: 4sCdUrrg7-vswiKHkNSy1fkSLQc.roa (raw, json)
Hash identifier: qShQZzAdkj+1VexUUIH1OWq5M6Z+BJoC4MY621wi2GE=
Subject key identifier: E2:C0:9D:52:BA:E0:EF:EB:EC:C2:22:87:90:D4:B2:D5:F9:12:2D:07
Certificate issuer: /CN=2186c46e3b1826b782d23e6304e50f1301494fc7
Certificate serial: 019427B60D2D6776C966C87E98BFB9E810F4
Authority key identifier: 21:86:C4:6E:3B:18:26:B7:82:D2:3E:63:04:E5:0F:13:01:49:4F:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYbEbjsYJreC0j5jBOUPEwFJT8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/474016-6bf2-40b2-9ba7-27ce85ef7477/1/4sCdUrrg7-vswiKHkNSy1fkSLQc.roa
Signing time: Thu 02 Jan 2025 15:50:29 +0000
ROA not before: Thu 02 Jan 2025 15:50:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211448
IP address blocks: 193.30.127.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:0d:2d:67:76:c9:66:c8:7e:98:bf:b9:e8:10:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2186c46e3b1826b782d23e6304e50f1301494fc7
Validity
Not Before: Jan 2 15:50:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e2c09d52bae0efebecc2228790d4b2d5f9122d07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:39:1f:dc:e9:f1:45:41:46:d7:08:88:54:d7:
9b:68:de:49:d6:b9:e2:36:7b:48:bf:5c:69:2e:b9:
5c:9f:98:0b:24:d8:9f:0a:f2:7d:dd:c4:55:e3:ef:
97:ea:b4:20:04:1f:b3:72:8d:cc:76:02:37:86:4e:
1c:64:50:ee:1b:73:e4:50:22:11:2d:6d:8e:27:20:
3d:83:12:1e:ae:ad:86:38:cc:c8:52:eb:83:be:41:
15:c9:bd:2c:a2:7e:d2:86:fc:39:72:30:4f:f4:fb:
d6:41:c3:47:30:e1:50:1d:03:f1:73:a1:7a:ac:ec:
83:63:7a:ea:a7:53:c1:9b:d5:a3:33:ef:0b:93:84:
e1:94:78:06:18:e2:4d:61:5f:da:e1:22:af:f5:2f:
8b:3e:6f:08:dd:4c:36:37:d6:46:e1:79:9f:37:d7:
f3:77:65:c6:9c:e3:c7:4a:83:0f:c5:c2:31:7d:7d:
85:72:5a:66:41:09:0c:f6:57:b1:e4:52:10:4e:c5:
00:08:eb:2c:41:01:f8:24:6e:d4:5f:53:77:7e:a3:
57:7e:ac:a0:d4:c0:9d:a6:55:c1:5e:d8:fe:d4:be:
ec:1f:50:14:d5:3d:27:c2:62:f0:4a:5c:ae:42:fb:
b9:2b:5c:b6:7b:84:6a:1f:2c:42:e7:85:78:61:4e:
50:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:C0:9D:52:BA:E0:EF:EB:EC:C2:22:87:90:D4:B2:D5:F9:12:2D:07
X509v3 Authority Key Identifier:
keyid:21:86:C4:6E:3B:18:26:B7:82:D2:3E:63:04:E5:0F:13:01:49:4F:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYbEbjsYJreC0j5jBOUPEwFJT8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/474016-6bf2-40b2-9ba7-27ce85ef7477/1/4sCdUrrg7-vswiKHkNSy1fkSLQc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/474016-6bf2-40b2-9ba7-27ce85ef7477/1/IYbEbjsYJreC0j5jBOUPEwFJT8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.30.127.0/24
Signature Algorithm: sha256WithRSAEncryption
92:27:33:f3:6d:5e:b1:78:0a:75:f2:f9:d6:b6:c6:09:f0:68:
36:a7:d8:88:82:eb:a4:be:99:21:3c:be:a2:fc:25:d6:5d:f8:
3d:9a:a4:5b:7d:20:dd:1b:e6:38:95:11:67:23:26:f7:a9:85:
58:ec:c7:99:b7:cb:e2:1f:21:f8:30:b4:5a:1b:9c:cc:62:ae:
ca:85:18:c2:08:d7:22:a9:06:0c:8a:5c:2b:e8:37:79:5f:9c:
28:51:d2:8e:1c:57:47:ab:64:48:9a:8e:9c:bf:37:0a:eb:fa:
da:9d:46:3c:09:a8:03:3a:2d:18:49:a0:38:32:ac:d4:73:4e:
ab:03:c0:c5:3a:4e:f1:97:60:99:85:57:01:85:be:de:c4:4e:
3a:e6:e1:28:e9:1c:4a:bd:73:6f:b9:a2:b9:cd:24:5c:90:fc:
a7:c2:88:18:e1:68:e5:cb:8b:d4:3b:7e:07:19:ac:54:22:c7:
72:25:23:18:50:c5:18:05:91:90:71:d6:3a:b6:8d:19:68:b9:
3b:b4:b1:a7:1d:e6:20:ba:dd:2d:12:ea:5a:c4:66:74:90:d3:
37:f5:58:e3:3b:c1:c7:83:8b:60:ef:5d:d8:fc:85:d6:19:91:
d0:67:d1:f9:33:87:a2:5a:a4:6c:0e:a6:73:2d:9e:8e:8c:d9:
ee:cf:85:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:41:37 2025 by rpki-client