Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/ILTLOyoWPc07Zu5uedVl9OoSM7g.roa
File: ILTLOyoWPc07Zu5uedVl9OoSM7g.roa (raw, json)
Hash identifier: rrMZtSbTq6ORLNPo8ZtTEklQIan0rtyS360P6d5+a8w=
Subject key identifier: 20:B4:CB:3B:2A:16:3D:CD:3B:66:EE:6E:79:D5:65:F4:EA:12:33:B8
Certificate issuer: /CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Certificate serial: 01941FFA53F05C8794EAC75CBBD3A9FFA248
Authority key identifier: 76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/ILTLOyoWPc07Zu5uedVl9OoSM7g.roa
Signing time: Wed 01 Jan 2025 03:48:06 +0000
ROA not before: Wed 01 Jan 2025 03:48:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35273
IP address blocks: 193.43.252.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:53:f0:5c:87:94:ea:c7:5c:bb:d3:a9:ff:a2:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Validity
Not Before: Jan 1 03:48:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=20b4cb3b2a163dcd3b66ee6e79d565f4ea1233b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:aa:45:34:1c:38:a1:ce:61:02:24:63:62:fa:
da:56:05:e4:c9:ad:2d:c1:f1:a1:b8:fc:8a:f4:88:
7f:5a:63:c3:68:52:53:6d:56:fe:ce:9a:23:cd:ad:
b9:09:10:d9:d8:ea:ba:45:03:0b:51:9a:c1:a6:09:
bb:a7:00:7d:13:af:89:c9:8b:ea:b0:ac:18:51:97:
8f:60:de:5a:1d:bb:3f:cb:f8:04:8b:6e:ea:73:3d:
0d:7e:16:a9:43:05:ba:3e:62:a0:9e:e6:c8:f3:57:
c0:c9:ee:00:02:ec:f3:a8:fd:53:31:c5:2c:2e:df:
a3:e1:ce:26:11:83:0b:3b:23:bb:8f:34:7e:20:a1:
ae:d5:72:c5:03:d3:bd:66:8b:f3:cd:9b:a3:e0:ef:
f2:41:db:ab:5c:b6:ce:8b:fb:ad:73:35:bb:d3:9e:
e3:8c:35:eb:43:08:5e:c5:ee:f4:a1:57:2e:63:c2:
68:bb:37:e1:2c:dc:10:ce:68:5d:53:cb:a5:ec:e3:
9c:1e:86:a4:fd:06:52:73:9d:cf:6a:06:5c:c4:cd:
f4:8b:3a:19:1a:e6:da:4e:54:11:02:81:1b:d9:2a:
43:90:c9:e4:fa:43:75:a7:58:0a:cc:76:88:d9:de:
0e:e2:e3:1a:90:36:bc:bf:f2:7f:95:cf:d4:63:aa:
ff:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:B4:CB:3B:2A:16:3D:CD:3B:66:EE:6E:79:D5:65:F4:EA:12:33:B8
X509v3 Authority Key Identifier:
keyid:76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/ILTLOyoWPc07Zu5uedVl9OoSM7g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.43.252.0/23
Signature Algorithm: sha256WithRSAEncryption
18:81:71:a7:f5:cd:49:73:e7:c4:0e:ba:b6:6e:c2:e1:95:3a:
d6:b3:c1:a3:d3:c3:5d:c3:34:cf:3a:8e:e9:5b:49:6d:0f:e1:
14:0c:b8:6d:d8:1b:f8:91:fd:9c:88:59:9a:60:02:07:74:b0:
d6:e7:ad:94:ee:73:1c:80:9b:ef:fb:c9:60:ef:f7:73:5d:f9:
b3:64:02:a6:d0:b1:14:24:82:2c:cd:9d:ae:21:3b:f8:fc:cb:
48:3a:7a:dd:98:8e:98:fb:16:01:b7:1e:18:09:65:6c:df:a3:
79:e8:16:c0:af:e0:27:6c:0a:4b:d8:3d:d9:4d:a8:33:b0:a6:
43:c1:72:e5:f4:bf:e7:7c:79:70:3e:cd:ca:cf:96:b4:cf:3f:
cb:02:dc:11:ca:d4:d7:32:80:90:65:e3:f3:2a:68:10:a1:3b:
be:e3:7a:20:5d:67:ff:33:d4:ca:08:fc:5c:b6:65:40:0b:2b:
8c:e7:e0:61:b5:eb:82:fe:b6:23:2d:3b:2e:ce:65:b6:d5:4e:
3e:18:4d:ed:67:71:7a:88:f3:43:af:ff:1e:5f:d0:80:7b:08:
e0:b9:a9:ac:5e:b7:5e:f1:e4:ce:63:ce:bc:80:3b:1b:51:9e:
27:da:87:7e:33:f4:df:71:b3:f4:7e:97:32:8c:ae:4f:72:4d:
38:dc:1d:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:15:45 2025 by rpki-client