Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/0d8088-ea93-4abb-8996-21cf56cbce12/1/gJceF3d-nooj-HNFWfJ7DjrX2tM.roa
File: gJceF3d-nooj-HNFWfJ7DjrX2tM.roa (raw, json)
Hash identifier: UdFUlFj+wie5ycXMTsd/YSKdJbHKvpKDw6EwjwqI0NE=
Subject key identifier: 80:97:1E:17:77:7E:9E:8A:23:F8:73:45:59:F2:7B:0E:3A:D7:DA:D3
Certificate issuer: /CN=44a7e5a33d9c5a965d9fbfdeecdc871af0a5d4f8
Certificate serial: 0194935767AD4E08C9EAA81A42312849460D
Authority key identifier: 44:A7:E5:A3:3D:9C:5A:96:5D:9F:BF:DE:EC:DC:87:1A:F0:A5:D4:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RKfloz2cWpZdn7_e7NyHGvCl1Pg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/0d8088-ea93-4abb-8996-21cf56cbce12/1/gJceF3d-nooj-HNFWfJ7DjrX2tM.roa
Signing time: Thu 23 Jan 2025 13:26:06 +0000
ROA not before: Thu 23 Jan 2025 13:26:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8769
IP address blocks: 193.192.54.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:93:57:67:ad:4e:08:c9:ea:a8:1a:42:31:28:49:46:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44a7e5a33d9c5a965d9fbfdeecdc871af0a5d4f8
Validity
Not Before: Jan 23 13:26:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=80971e17777e9e8a23f8734559f27b0e3ad7dad3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:92:85:1b:b4:1c:af:bd:0f:03:30:d9:f6:a9:
b9:86:6f:d5:8a:1e:6b:51:11:52:38:bf:be:cb:0a:
6f:e8:53:1c:eb:ac:10:cd:be:4f:b4:9e:eb:f8:03:
c7:4e:5f:ec:d0:c0:78:d8:00:e6:8d:c5:23:57:ec:
97:f7:fb:e7:cc:40:18:1a:14:26:f2:3b:f8:fa:67:
42:2d:8f:47:ed:e4:14:51:d6:6d:4e:88:ca:0f:75:
63:5d:52:e1:2d:22:84:8a:1c:aa:f7:fd:2c:16:d7:
95:f4:fc:45:a3:c7:d1:e6:92:45:42:b8:05:7c:69:
21:d0:9f:75:6e:43:1a:09:87:d0:5d:08:f9:4e:6c:
c4:22:1d:6c:2a:9f:65:b7:27:f1:b4:1c:95:bb:fe:
d5:9b:74:15:88:c2:85:6c:f0:4a:6b:be:3f:e4:44:
43:c4:ca:71:db:83:32:06:ba:2c:5c:be:f4:92:7c:
6b:a2:0f:45:f5:c6:c5:e3:ae:f7:4b:54:bb:f8:72:
bb:40:8d:3b:d1:37:f0:26:56:f3:4a:a1:ff:15:32:
0a:2f:38:5c:d2:68:30:81:16:4b:5e:eb:64:eb:50:
eb:cd:b5:be:ea:d7:00:5c:c2:4e:1e:26:bf:90:25:
3e:67:28:6f:cd:a8:5b:7c:10:f5:9d:68:b6:07:39:
7b:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:97:1E:17:77:7E:9E:8A:23:F8:73:45:59:F2:7B:0E:3A:D7:DA:D3
X509v3 Authority Key Identifier:
keyid:44:A7:E5:A3:3D:9C:5A:96:5D:9F:BF:DE:EC:DC:87:1A:F0:A5:D4:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RKfloz2cWpZdn7_e7NyHGvCl1Pg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/0d8088-ea93-4abb-8996-21cf56cbce12/1/gJceF3d-nooj-HNFWfJ7DjrX2tM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/0d8088-ea93-4abb-8996-21cf56cbce12/1/RKfloz2cWpZdn7_e7NyHGvCl1Pg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.192.54.0/23
Signature Algorithm: sha256WithRSAEncryption
5c:57:35:a6:4b:d3:f4:80:0d:de:2b:cf:2d:f6:89:b0:83:21:
f4:7d:3a:86:89:fc:ab:e1:65:1f:3e:b0:54:39:0a:40:dd:9b:
c7:2a:1b:d6:7a:80:99:ca:3a:cf:5d:17:38:e2:5b:17:62:62:
71:f8:0e:18:ce:d6:81:8b:ff:42:13:2a:2d:bc:2c:14:a5:3b:
61:9e:95:48:09:8a:bb:ab:24:e6:35:db:f2:fc:7d:2a:30:04:
ab:51:7c:b9:32:61:5a:cd:bd:7b:60:11:4b:be:e1:5e:82:28:
88:bb:fa:c4:9f:d6:0f:dc:be:bf:fa:c2:a1:e6:73:75:9d:80:
0a:9a:1f:33:44:87:a5:65:7e:8a:b8:6f:66:8b:64:ad:61:50:
d0:2f:c8:23:06:d1:9c:cc:6f:a4:4c:6a:6c:57:15:4e:fe:02:
df:17:b5:f0:06:f9:12:e1:17:35:ee:d4:43:cc:d3:f8:a0:62:
7c:cc:74:01:4f:9a:f1:7c:4c:ed:62:d3:f3:eb:92:55:41:57:
10:05:98:d4:06:6e:ba:50:60:ef:cd:da:94:67:a6:e9:8c:a0:
43:9a:30:4e:40:09:a1:c0:3c:c7:88:24:ee:dc:ad:e2:2a:bb:
53:48:4d:b4:06:14:32:04:75:a1:6b:9e:1b:ef:97:f7:88:29:
56:de:17:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:46:51 2025 by rpki-client