Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/b4b509-4a06-4bc4-9384-53e410825676/1/eO7YTCW1Ct3XJF_r00iDguisODM.roa
File: eO7YTCW1Ct3XJF_r00iDguisODM.roa (raw, json)
Hash identifier: W+mdouf8fJNdhamv7KOwr9qCIYdxQMzoaZKEi6c067w=
Subject key identifier: 78:EE:D8:4C:25:B5:0A:DD:D7:24:5F:EB:D3:48:83:82:E8:AC:38:33
Certificate issuer: /CN=4dbc0c0633cbef2e97fceac797633d4912f76f96
Certificate serial: EC3B1C
Authority key identifier: 4D:BC:0C:06:33:CB:EF:2E:97:FC:EA:C7:97:63:3D:49:12:F7:6F:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TbwMBjPL7y6X_OrHl2M9SRL3b5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/b4b509-4a06-4bc4-9384-53e410825676/1/eO7YTCW1Ct3XJF_r00iDguisODM.roa
Signing time: Thu 19 May 2022 13:04:04 +0000
ROA not before: Thu 19 May 2022 13:04:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 193.246.102.0/23 maxlen: 24
193.246.4.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15481628 (0xec3b1c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dbc0c0633cbef2e97fceac797633d4912f76f96
Validity
Not Before: May 19 13:04:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=78eed84c25b50addd7245febd3488382e8ac3833
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:76:9e:1c:9d:7e:7f:7b:13:a2:90:d2:71:83:
cd:1d:a9:06:61:5e:1a:3b:77:d2:a3:44:a4:d2:20:
a4:f2:f0:87:d5:cc:63:bd:4f:e8:46:85:50:53:5c:
ad:6d:56:96:62:87:6b:cf:71:95:00:22:e6:0b:b8:
54:57:3c:51:a5:d6:0b:a6:43:68:f0:98:b5:9b:46:
ff:cb:c1:f2:13:49:6a:bb:e9:bf:80:4f:2b:d0:fa:
2d:fd:94:65:7e:d6:29:b8:5b:1b:75:d1:5f:58:fd:
91:54:0f:32:3a:80:92:03:6c:04:40:83:c7:41:8b:
51:bc:de:64:c6:30:01:ad:1b:a4:61:a1:c5:ad:62:
6e:be:5e:e3:5e:f6:39:3c:f7:66:15:b2:62:fb:a8:
c7:74:cd:62:a1:31:9b:f0:96:d6:d6:98:36:38:c3:
cb:a8:80:f8:05:c2:3b:17:3b:cf:25:a0:af:8e:98:
31:c0:6b:f5:36:e4:0a:ee:71:cb:ef:60:d7:ed:8f:
97:68:fb:bb:38:a3:3d:23:3e:bc:30:48:a0:f8:3b:
64:7b:61:fa:34:92:a5:5f:5d:0e:a1:9d:cf:d3:b3:
f1:f9:d3:17:06:7f:1e:f1:cb:d7:9f:70:e1:6c:4b:
0f:e9:a2:94:6f:f0:c5:0e:4a:ab:d6:75:44:f2:6e:
85:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:EE:D8:4C:25:B5:0A:DD:D7:24:5F:EB:D3:48:83:82:E8:AC:38:33
X509v3 Authority Key Identifier:
keyid:4D:BC:0C:06:33:CB:EF:2E:97:FC:EA:C7:97:63:3D:49:12:F7:6F:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TbwMBjPL7y6X_OrHl2M9SRL3b5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b4b509-4a06-4bc4-9384-53e410825676/1/eO7YTCW1Ct3XJF_r00iDguisODM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b4b509-4a06-4bc4-9384-53e410825676/1/TbwMBjPL7y6X_OrHl2M9SRL3b5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.246.4.0/23
193.246.102.0/23
Signature Algorithm: sha256WithRSAEncryption
d7:8c:c6:33:8f:70:40:e2:94:ab:24:b2:48:a5:55:00:35:0c:
ce:19:f4:0e:f7:e4:d7:46:9a:ab:07:19:52:0e:f3:3d:7e:82:
f5:4d:75:5c:dc:57:4f:73:09:9e:f7:5a:7b:0c:67:73:bb:29:
72:01:5a:94:65:a4:3e:16:a5:7f:0a:88:a2:88:a0:39:47:83:
1f:38:fc:96:53:25:3b:5b:c3:51:1c:8f:0f:39:0c:5c:3b:ac:
cf:2a:bb:02:24:29:4c:e5:f6:dd:44:bc:38:a5:5e:7c:d5:53:
b6:88:c4:79:d8:ea:25:81:2f:5d:6e:ee:a3:ee:85:0c:6c:55:
f2:58:0b:ec:69:9c:82:20:81:0e:3e:9b:50:b5:58:81:f3:f0:
a4:a4:f6:4d:b2:64:f4:01:a5:ee:41:bd:35:cf:92:d1:7e:f8:
c1:b1:28:98:b6:32:89:be:1e:e8:a5:9b:27:da:8e:01:ec:62:
d9:29:bf:9a:56:7f:56:d1:4b:9d:b6:a2:51:7d:f3:bf:48:d3:
14:ef:03:73:97:fa:6f:13:11:ab:6f:d9:82:1a:9b:62:df:03:
cc:1a:ae:fe:71:5f:c0:3d:e5:5b:3d:ca:27:f0:85:4d:75:04:
a0:f4:08:b6:bd:40:91:fb:3d:4d:a6:37:20:6d:12:66:d3:dd:
f8:e4:7a:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:04:29 2025 by rpki-client