Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/iaezRUsq6oqRuV0UPGmpGjhu3dc.roa
File: iaezRUsq6oqRuV0UPGmpGjhu3dc.roa (raw, json)
Hash identifier: EbHsDSMupigAO8eLGnuShvBg31086wfwB7IKI6SvcCc=
Subject key identifier: 89:A7:B3:45:4B:2A:EA:8A:91:B9:5D:14:3C:69:A9:1A:38:6E:DD:D7
Certificate issuer: /CN=4f8aea2f025f495beacee7ce5a8820519dda1370
Certificate serial: 01914C46471F195EB4C8E19A4EAB52CE6996
Authority key identifier: 4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/iaezRUsq6oqRuV0UPGmpGjhu3dc.roa
Signing time: Tue 13 Aug 2024 15:05:59 +0000
ROA not before: Tue 13 Aug 2024 15:05:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 151704
IP address blocks: 193.38.249.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:4c:46:47:1f:19:5e:b4:c8:e1:9a:4e:ab:52:ce:69:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f8aea2f025f495beacee7ce5a8820519dda1370
Validity
Not Before: Aug 13 15:05:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=89a7b3454b2aea8a91b95d143c69a91a386eddd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ab:e0:82:29:eb:72:06:a3:03:9e:c9:d1:55:
85:ba:ae:d8:b9:fc:0e:93:06:47:15:7f:31:e0:94:
83:ee:bc:30:e6:f1:b0:fb:a7:a1:a1:0f:33:c2:11:
af:fc:bc:03:6b:ae:f9:b4:65:00:1b:6f:72:cb:af:
7c:68:5e:73:26:be:74:2c:7c:0a:41:4d:69:80:c3:
90:51:5b:ee:74:6b:28:81:a9:0d:84:e3:4b:94:36:
ec:fd:ff:14:a9:38:2b:4d:af:89:ea:c2:06:7a:e6:
9c:29:05:be:8b:01:46:29:29:d0:53:7f:55:cc:91:
8a:fd:5f:37:5b:24:c3:bf:51:b6:7a:13:56:5a:bc:
6e:5c:a6:bf:e8:90:db:47:0e:12:4d:c0:fa:5a:c6:
95:af:1a:65:b1:e3:ec:46:c6:45:ed:a5:6f:af:bd:
0a:4f:34:d0:e0:c8:67:17:6b:05:f6:6d:b8:f2:35:
93:11:5f:d9:72:69:e9:ea:89:fb:01:b7:61:b6:e2:
8e:c0:77:f3:60:71:95:d4:c9:32:b4:8e:c6:19:38:
ee:8f:1d:3a:25:c2:e7:fa:7b:7f:b9:6e:a5:f7:1f:
08:15:2f:a6:11:47:c3:27:f2:5e:0a:35:6f:c5:51:
96:2a:2d:cb:35:6f:65:a7:78:a1:f2:7e:da:98:32:
50:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:A7:B3:45:4B:2A:EA:8A:91:B9:5D:14:3C:69:A9:1A:38:6E:DD:D7
X509v3 Authority Key Identifier:
keyid:4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/iaezRUsq6oqRuV0UPGmpGjhu3dc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.38.249.0/24
Signature Algorithm: sha256WithRSAEncryption
32:64:f7:e8:c1:e9:99:17:d6:2a:bf:7f:47:2a:14:18:86:2a:
84:e7:d4:eb:ed:95:5f:ca:89:d4:89:88:28:86:f3:9f:0b:f5:
20:c7:50:04:46:69:f4:87:4b:0d:5c:a0:2c:40:48:78:5d:d0:
ab:a9:95:38:a7:6f:79:e8:48:04:66:91:b8:84:2c:8f:c7:66:
e0:9d:b3:4f:17:dd:71:7e:0f:29:15:94:bb:c4:1d:83:32:4a:
36:4f:f4:f0:91:92:f8:64:7b:b9:b7:1c:a7:2a:7a:c9:be:83:
3b:d7:9b:05:5d:8b:e2:8a:53:6a:44:ff:b5:61:55:66:c4:7a:
85:2f:9a:d9:06:b6:c9:d5:40:39:48:c1:38:22:e8:9b:4c:c5:
b8:a3:46:a1:5b:e5:8f:73:5d:9f:be:14:e2:6e:0d:2c:ee:dd:
a2:39:da:54:65:0e:e6:ed:5b:87:cb:79:ae:3d:04:60:9e:d8:
bd:c2:52:7e:8c:dc:a9:67:6e:9e:18:c4:2e:bc:92:52:66:7c:
98:7e:56:b5:1e:e2:89:54:34:d7:96:b9:f9:98:22:11:44:c2:
47:10:db:9a:04:fb:39:d9:51:6e:39:13:4a:1d:b2:ff:fc:d3:
27:ac:4e:56:fd:d3:f3:bf:a1:94:18:18:e4:1a:f9:7b:ee:d4:
d6:00:cb:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:47:06 2025 by rpki-client