Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/3ee7e0-9f8a-478c-99e6-698f483719ce/1/zD4v15Zqk9YXI3GiEYlmV_JFqgg.roa
File: zD4v15Zqk9YXI3GiEYlmV_JFqgg.roa (raw, json)
Hash identifier: EB51LLT5ltql9pPNM8ranpPeDLBQTNoz/6AbBsSj9vs=
Subject key identifier: CC:3E:2F:D7:96:6A:93:D6:17:23:71:A2:11:89:66:57:F2:45:AA:08
Certificate issuer: /CN=2e0b6ff7b65894332cbb41d3aeb735301f48b298
Certificate serial: 01C52BDB
Authority key identifier: 2E:0B:6F:F7:B6:58:94:33:2C:BB:41:D3:AE:B7:35:30:1F:48:B2:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lgtv97ZYlDMsu0HTrrc1MB9Ispg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/3ee7e0-9f8a-478c-99e6-698f483719ce/1/zD4v15Zqk9YXI3GiEYlmV_JFqgg.roa
Signing time: Mon 28 Mar 2022 13:04:01 +0000
ROA not before: Mon 28 Mar 2022 13:04:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 193.243.190.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29699035 (0x1c52bdb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e0b6ff7b65894332cbb41d3aeb735301f48b298
Validity
Not Before: Mar 28 13:04:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cc3e2fd7966a93d6172371a211896657f245aa08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:78:a5:62:1b:18:77:ba:48:99:5c:8f:d8:83:
aa:ab:ab:cd:9b:74:d5:47:f8:3b:33:f4:3f:74:c6:
ad:04:57:5a:f4:eb:58:d6:59:3f:88:d8:24:41:db:
8e:14:f8:fb:d7:2f:5f:bb:3c:d9:3d:2a:de:e3:39:
6d:9e:9f:ed:3b:f9:26:f1:61:a0:4a:28:03:bc:27:
3e:2c:74:4b:99:65:67:6c:70:a9:29:52:4d:44:44:
2f:6f:f2:00:48:87:76:de:67:80:de:46:0b:cc:2d:
16:61:f4:8a:66:88:b3:8e:3b:10:f5:10:a5:30:c5:
a5:65:0b:18:2c:04:f1:23:b4:5c:70:70:cf:f5:9f:
dc:63:3f:50:39:9a:21:10:1c:50:72:86:ff:bb:02:
d1:e9:6a:dd:58:5b:7e:8e:2d:a9:80:15:4a:d3:c0:
84:98:8b:1a:a0:15:b0:19:20:15:c0:2e:2d:f3:2a:
67:32:1a:d4:68:f5:61:66:ec:24:58:e0:6c:78:7f:
eb:93:d5:fd:e8:55:d1:7e:e3:34:05:5e:f2:f1:8a:
c5:ef:29:82:63:99:3a:0e:da:ee:00:f2:ee:98:e3:
84:0c:f8:d9:aa:1a:10:da:e9:f4:a4:ad:b7:a9:2b:
86:17:e6:ea:44:db:76:9f:a3:4b:ad:4b:8d:bd:cc:
22:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:3E:2F:D7:96:6A:93:D6:17:23:71:A2:11:89:66:57:F2:45:AA:08
X509v3 Authority Key Identifier:
keyid:2E:0B:6F:F7:B6:58:94:33:2C:BB:41:D3:AE:B7:35:30:1F:48:B2:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lgtv97ZYlDMsu0HTrrc1MB9Ispg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/3ee7e0-9f8a-478c-99e6-698f483719ce/1/zD4v15Zqk9YXI3GiEYlmV_JFqgg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/3ee7e0-9f8a-478c-99e6-698f483719ce/1/Lgtv97ZYlDMsu0HTrrc1MB9Ispg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.243.190.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:1e:cc:c7:6a:4d:fc:4c:13:ce:a7:15:85:cd:ab:34:59:7c:
cd:69:8d:fc:9a:91:1f:00:33:13:1c:4d:3b:27:37:68:04:62:
08:86:40:6d:73:b2:1f:6d:5d:33:25:c9:c8:f0:e7:57:0e:e2:
b4:80:a9:43:bd:1b:9c:db:27:1e:7c:c6:92:20:4d:07:56:97:
0c:9f:66:c3:ac:24:55:1e:91:db:3a:71:50:9a:e4:9e:c9:6f:
4e:88:01:69:90:fd:94:94:ee:bb:c6:c4:be:4c:d9:a6:ba:13:
91:dc:49:ee:88:bc:c8:76:f4:99:11:cd:7c:3e:44:c8:0d:b9:
c5:aa:95:da:9d:54:16:1c:3a:6b:ff:81:e5:48:32:e2:a0:93:
23:e7:13:68:4d:e9:3a:d3:b5:0e:f8:a0:f9:79:57:26:0f:ad:
98:ce:df:67:fc:ea:53:0a:64:02:3a:bb:14:9a:87:88:eb:e4:
af:4c:7e:bf:1e:c2:38:4d:9d:ef:fc:56:75:76:9e:a1:60:72:
89:ed:9e:dd:0a:63:46:ee:1d:13:d4:8e:98:d8:f7:fe:b0:bd:
0f:54:dc:96:aa:e1:2a:00:6c:9b:5a:09:49:b6:51:6f:dd:e0:
d2:69:01:e7:79:b9:61:23:a9:6d:c4:d1:de:f0:fc:ea:18:c5:
8b:20:05:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:18:00 2025 by rpki-client