Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/b4b509-4a06-4bc4-9384-53e410825676/1/nKyRwPqcX2Pwl8QqxOHs7wN6WP4.roa
File: nKyRwPqcX2Pwl8QqxOHs7wN6WP4.roa (raw, json)
Hash identifier: Cehg6RQEAivNo1tB2za4d8lZNQj9dE/ZAc7k21L4qCc=
Subject key identifier: 9C:AC:91:C0:FA:9C:5F:63:F0:97:C4:2A:C4:E1:EC:EF:03:7A:58:FE
Certificate issuer: /CN=4dbc0c0633cbef2e97fceac797633d4912f76f96
Certificate serial: CC4ACD
Authority key identifier: 4D:BC:0C:06:33:CB:EF:2E:97:FC:EA:C7:97:63:3D:49:12:F7:6F:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TbwMBjPL7y6X_OrHl2M9SRL3b5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/b4b509-4a06-4bc4-9384-53e410825676/1/nKyRwPqcX2Pwl8QqxOHs7wN6WP4.roa
Signing time: Fri 06 May 2022 08:38:39 +0000
ROA not before: Fri 06 May 2022 08:38:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 193.246.102.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13388493 (0xcc4acd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dbc0c0633cbef2e97fceac797633d4912f76f96
Validity
Not Before: May 6 08:38:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9cac91c0fa9c5f63f097c42ac4e1ecef037a58fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:0e:76:1e:47:3f:89:68:60:17:ec:f7:fb:b5:
d9:7d:bb:98:a1:3b:e0:2d:4b:3e:3a:05:54:96:e8:
67:fc:18:9d:a1:29:75:e0:49:21:45:14:f4:b1:3f:
1f:0c:75:be:7d:63:8c:34:ff:09:a5:3e:13:da:2a:
6b:74:48:e1:b3:45:0d:70:05:9a:3e:00:bb:84:18:
55:7f:fb:b7:1d:ae:ac:8c:6b:84:db:61:fd:af:af:
6c:c1:26:46:eb:c2:58:a0:2c:3e:84:f8:60:d7:1a:
4f:cc:a4:e0:01:db:61:13:53:a8:b7:26:d1:0a:ea:
d4:5a:82:c2:b3:f8:b8:14:c9:4c:93:95:24:1e:ba:
97:f3:e9:2c:7a:47:2c:fb:1a:51:61:67:74:05:45:
2b:f5:27:2c:fa:7b:c6:88:3b:c9:2a:54:0a:81:d2:
cb:cd:cb:c5:16:9a:4d:d2:18:bf:d8:f7:6b:a8:8e:
eb:9e:ae:df:6b:d4:53:52:65:a3:0a:2d:03:17:36:
2b:12:f8:ef:c9:59:e5:c2:ad:9a:a2:e7:ec:dc:1f:
7f:7a:98:c7:98:90:b3:a1:af:df:dd:4e:89:6a:7f:
d1:27:9a:d7:f4:9d:9b:11:49:91:b3:d3:84:2b:98:
f5:54:fd:32:92:b5:d5:33:61:a8:43:52:fe:e2:5a:
60:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:AC:91:C0:FA:9C:5F:63:F0:97:C4:2A:C4:E1:EC:EF:03:7A:58:FE
X509v3 Authority Key Identifier:
keyid:4D:BC:0C:06:33:CB:EF:2E:97:FC:EA:C7:97:63:3D:49:12:F7:6F:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TbwMBjPL7y6X_OrHl2M9SRL3b5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b4b509-4a06-4bc4-9384-53e410825676/1/nKyRwPqcX2Pwl8QqxOHs7wN6WP4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b4b509-4a06-4bc4-9384-53e410825676/1/TbwMBjPL7y6X_OrHl2M9SRL3b5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.246.102.0/23
Signature Algorithm: sha256WithRSAEncryption
35:8e:8a:1e:58:da:de:9d:aa:83:9b:8b:36:6d:62:5f:ab:00:
d6:17:ee:c6:c3:87:96:b7:25:90:6e:43:6c:fb:fb:02:80:70:
b7:1c:b8:19:66:2b:76:8e:bc:9d:46:b0:c3:c0:f7:54:af:d0:
fc:46:86:a5:1c:d0:ca:28:35:62:40:5a:07:0b:66:d5:36:8e:
0f:56:4e:85:2f:87:96:39:96:50:63:46:1c:9a:19:5d:0b:d1:
22:df:e4:f2:68:50:b8:e8:6d:24:46:0b:b8:31:99:a3:cb:10:
2c:b2:d3:ca:c7:9e:ae:60:3c:e6:4d:cc:bd:4b:17:eb:5c:bc:
d7:52:e0:2a:d7:c6:18:43:af:76:21:14:a0:b0:d2:1e:c9:04:
b6:20:90:ab:b9:06:c5:5e:92:10:56:93:11:bf:a5:42:4b:24:
ad:9f:55:f7:99:0b:d7:69:3b:75:e3:ef:ef:a7:3d:2c:5e:00:
70:31:0b:02:a0:fe:14:5b:04:9a:60:6a:80:c6:a1:3f:aa:85:
2b:33:c9:95:ab:e9:f9:6e:44:a5:cc:01:d6:7c:eb:10:3f:c5:
a2:4e:78:f9:6c:c7:81:16:c0:f5:ba:b1:d5:0e:ee:51:3f:e6:
d8:ac:b0:aa:d1:5b:52:05:2a:1f:b4:ee:91:98:e0:cb:65:7c:
8f:48:d8:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:17:34 2025 by rpki-client