Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/MyXC_s6fATJWRxVBfs_WNv840gk.roa
File: MyXC_s6fATJWRxVBfs_WNv840gk.roa (raw, json)
Hash identifier: PVb2Q0Y7bW2uBTUT2BWm0+YT0m3U7d7aZhrgBGhGMxc=
Subject key identifier: 33:25:C2:FE:CE:9F:01:32:56:47:15:41:7E:CF:D6:36:FF:38:D2:09
Certificate issuer: /CN=c2ee45426e12e50fe30e8ffc39e04485d8f73339
Certificate serial: 018949F8D4804AC48B5B8ACE11946E1A3FF6
Authority key identifier: C2:EE:45:42:6E:12:E5:0F:E3:0E:8F:FC:39:E0:44:85:D8:F7:33:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/MyXC_s6fATJWRxVBfs_WNv840gk.roa
Signing time: Wed 12 Jul 2023 11:59:51 +0000
ROA not before: Wed 12 Jul 2023 11:59:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48678
IP address blocks: 193.106.196.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:49:f8:d4:80:4a:c4:8b:5b:8a:ce:11:94:6e:1a:3f:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2ee45426e12e50fe30e8ffc39e04485d8f73339
Validity
Not Before: Jul 12 11:59:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3325c2fece9f0132564715417ecfd636ff38d209
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c1:13:a7:7b:60:6e:26:43:04:87:14:2a:1c:
e3:08:bc:cd:db:fe:11:1f:51:0e:44:fb:07:bc:7d:
73:80:d6:65:5b:a3:a7:ee:29:95:ea:19:8e:2b:23:
40:60:a1:2d:46:88:ae:38:b2:ea:71:d8:ac:7c:06:
bc:6a:71:58:2a:c2:d0:fb:d3:f2:f2:0a:72:80:4b:
45:8d:64:60:b9:36:46:84:b5:0d:eb:11:b3:b2:24:
7c:42:3e:ef:f0:88:c1:52:13:3c:2f:02:a7:6a:5b:
28:8d:7e:57:c5:24:5d:6e:fa:02:3c:06:30:72:d3:
e7:37:0b:99:8c:f8:bc:9c:29:62:6a:16:c1:87:d9:
08:2e:71:da:ed:d5:3f:9a:ee:4b:4e:58:55:c1:f8:
e1:01:ae:58:65:2b:3b:98:86:6a:25:ac:e5:c4:ee:
1b:35:71:0e:24:a6:a8:c6:e9:95:c2:64:82:28:96:
67:e9:dd:ff:ac:b8:26:e8:99:69:9c:cb:37:4d:94:
eb:5d:b9:6c:0d:ec:57:3f:3d:fd:32:df:46:32:0c:
09:89:2c:8e:97:f4:ef:ab:a2:16:6d:9d:1e:d4:35:
78:21:3f:54:30:d0:c8:6d:0f:ce:db:cc:04:ec:05:
74:94:c4:17:da:e2:01:17:db:1b:ef:ce:ac:dc:b3:
85:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:25:C2:FE:CE:9F:01:32:56:47:15:41:7E:CF:D6:36:FF:38:D2:09
X509v3 Authority Key Identifier:
keyid:C2:EE:45:42:6E:12:E5:0F:E3:0E:8F:FC:39:E0:44:85:D8:F7:33:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/MyXC_s6fATJWRxVBfs_WNv840gk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.106.196.0/24
Signature Algorithm: sha256WithRSAEncryption
08:91:3f:fa:6f:df:c5:03:13:fc:01:37:b2:02:a5:60:ba:93:
da:1c:00:86:6d:4e:16:04:6a:81:61:94:e9:a8:6a:54:53:c9:
3d:85:86:97:94:a3:52:66:7e:42:2c:e4:4e:42:4e:84:79:81:
00:c5:7e:83:50:1e:74:06:41:f2:c1:16:5a:a6:67:bf:24:eb:
78:2b:d6:c9:7e:91:1c:99:b7:08:44:9f:dc:92:e3:ce:fa:ae:
b5:9f:96:b2:91:52:20:78:20:b8:58:05:58:9c:0a:c7:a2:2a:
22:7b:b3:48:24:ba:bf:f7:c6:8d:70:2c:2e:0a:6c:58:30:06:
d0:64:be:0c:e9:cf:75:28:a4:39:d3:2c:f7:f1:76:08:db:dc:
c0:40:59:4f:1e:ac:23:e3:1c:61:a0:06:ee:09:a2:1c:5c:22:
1c:b5:cf:7c:a9:70:5c:fa:eb:59:43:f9:23:81:cb:e8:a1:6e:
8d:c2:3d:50:a4:ed:4a:8f:64:32:16:1e:36:57:01:06:3a:45:
4e:47:ce:d9:0b:7e:bd:31:91:62:20:52:d9:28:8c:00:26:3e:
00:d3:d9:f0:39:28:82:32:49:4b:aa:ba:42:5b:ce:ab:79:eb:
46:e3:92:ad:f2:af:3d:ba:f6:ab:2c:d6:ca:81:cf:1a:48:3b:
49:67:76:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:25:03 2025 by rpki-client