Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/SSA3wAa6qGPZV2ZKOEHHmBcbeHg.roa
File: SSA3wAa6qGPZV2ZKOEHHmBcbeHg.roa (raw, json)
Hash identifier: HjWEJNo69vfXSikYC8nQh4A3DJ/21zeFs/esnUwA13I=
Subject key identifier: 49:20:37:C0:06:BA:A8:63:D9:57:66:4A:38:41:C7:98:17:1B:78:78
Certificate issuer: /CN=c2ee45426e12e50fe30e8ffc39e04485d8f73339
Certificate serial: 018949F8D5F67391B3659BA3C5F3C790AB0D
Authority key identifier: C2:EE:45:42:6E:12:E5:0F:E3:0E:8F:FC:39:E0:44:85:D8:F7:33:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/SSA3wAa6qGPZV2ZKOEHHmBcbeHg.roa
Signing time: Wed 12 Jul 2023 11:59:51 +0000
ROA not before: Wed 12 Jul 2023 11:59:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212669
IP address blocks: 193.106.198.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:49:f8:d5:f6:73:91:b3:65:9b:a3:c5:f3:c7:90:ab:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2ee45426e12e50fe30e8ffc39e04485d8f73339
Validity
Not Before: Jul 12 11:59:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=492037c006baa863d957664a3841c798171b7878
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:12:3b:47:53:6a:91:4e:76:30:15:f3:b4:5e:
bd:94:a4:87:e7:3f:6e:df:98:d0:fc:e8:ad:d4:ad:
36:19:f0:c6:67:e0:6d:54:15:b4:e8:43:5c:91:7a:
7f:40:16:89:64:80:4d:da:ae:7f:fc:79:87:ad:a7:
84:e0:a6:d6:e0:ea:84:82:fb:4e:0c:ec:f6:aa:5a:
5c:00:21:54:d9:7b:02:68:b4:a9:0c:24:20:f4:7a:
da:77:d5:cb:ba:9f:2f:c8:73:d0:58:24:16:72:0f:
0b:fa:bd:09:50:8a:f5:09:58:a3:6c:5f:73:2c:ae:
d8:16:6b:66:a4:ad:2b:9a:21:d1:da:f0:e6:91:35:
4f:0d:83:8c:eb:eb:35:b4:65:c1:c4:5e:d4:14:06:
b0:9d:82:f9:cb:6b:6f:63:c4:7f:79:40:7a:3d:5b:
60:61:0e:18:cf:b1:c1:f4:84:6d:75:f8:e8:a8:09:
25:13:b1:88:35:61:84:3b:2d:48:d6:b2:f0:65:47:
d2:df:cc:34:5d:9c:e9:24:7b:14:35:21:03:4b:a3:
c7:4b:d5:07:32:18:aa:63:0c:61:19:40:f4:f5:f0:
e2:94:0e:9a:de:c3:59:be:5c:98:d7:9a:36:35:2e:
56:09:01:b7:24:bd:e4:af:4c:5e:d5:a1:c0:1d:2f:
f2:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:20:37:C0:06:BA:A8:63:D9:57:66:4A:38:41:C7:98:17:1B:78:78
X509v3 Authority Key Identifier:
keyid:C2:EE:45:42:6E:12:E5:0F:E3:0E:8F:FC:39:E0:44:85:D8:F7:33:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/SSA3wAa6qGPZV2ZKOEHHmBcbeHg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.106.198.0/24
Signature Algorithm: sha256WithRSAEncryption
33:31:2a:3a:06:8a:e1:ab:18:d9:f1:b9:0c:f8:39:58:d7:e9:
30:d1:6a:25:22:98:b8:02:a4:c8:b7:15:c8:80:3d:94:9d:fd:
ae:d5:da:36:57:63:36:97:74:fa:18:a5:2e:53:bd:fc:00:1c:
8d:d6:a8:8c:99:01:f3:de:fa:d5:4f:51:fd:df:8a:52:4a:45:
2a:01:5b:f3:66:32:ed:68:74:b2:7f:a8:1a:8c:7a:65:c0:20:
7f:bb:9f:ee:ed:07:9f:ea:76:14:59:59:55:0d:3b:43:50:04:
34:45:98:b1:a5:62:35:8d:eb:89:4b:5f:b4:a3:84:22:da:3d:
28:dc:b1:46:b4:21:67:67:e9:97:4e:8c:d7:04:5d:e6:1f:d5:
80:20:b5:b9:30:ae:e9:88:be:a3:85:62:74:f7:74:03:c1:56:
17:f1:69:fa:b7:b0:09:41:3d:e8:a2:e4:02:c8:93:5a:11:bd:
3c:47:9d:f5:ae:79:9b:89:99:8a:da:b9:25:2c:14:ff:00:ae:
3d:4c:21:db:35:c0:7d:a1:be:21:4b:07:16:c1:04:e0:dc:4c:
49:40:4f:1d:b0:11:c8:ee:d1:87:c5:7b:bd:97:a5:3d:5c:ab:
b1:90:03:6f:6a:e8:29:d1:70:dc:8b:1b:e8:63:9f:00:b1:9b:
ce:91:31:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:20:22 2025 by rpki-client