Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/4ac7e0-7b52-41ce-a3c2-4afe3ca5f1a5/1/5X6pofiCuJYId6j0aa-sS5IwMv4.roa
File: 5X6pofiCuJYId6j0aa-sS5IwMv4.roa (raw, json)
Hash identifier: QkWonhSsv/FwtvWZiy0vf5+CYQsfqsQAxOn2vSi8nBE=
Subject key identifier: E5:7E:A9:A1:F8:82:B8:96:08:77:A8:F4:69:AF:AC:4B:92:30:32:FE
Certificate issuer: /CN=a16f2a8162a75524ff52783f8132c33007da4d98
Certificate serial: 01919E4494665C0C8B97BA87D483A297B101
Authority key identifier: A1:6F:2A:81:62:A7:55:24:FF:52:78:3F:81:32:C3:30:07:DA:4D:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oW8qgWKnVST_Ung_gTLDMAfaTZg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/4ac7e0-7b52-41ce-a3c2-4afe3ca5f1a5/1/5X6pofiCuJYId6j0aa-sS5IwMv4.roa
Signing time: Thu 29 Aug 2024 13:13:00 +0000
ROA not before: Thu 29 Aug 2024 13:13:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208189
IP address blocks: 193.17.86.0/23 maxlen: 24
193.17.176.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:9e:44:94:66:5c:0c:8b:97:ba:87:d4:83:a2:97:b1:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a16f2a8162a75524ff52783f8132c33007da4d98
Validity
Not Before: Aug 29 13:13:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e57ea9a1f882b8960877a8f469afac4b923032fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:6e:1e:4e:f0:f9:e6:84:01:d7:f2:34:05:55:
c2:75:11:3c:aa:16:ca:43:a6:b8:3d:0d:29:6e:56:
bf:3f:f6:65:a8:22:7b:68:4a:bb:ad:79:77:5e:af:
ff:dd:0b:01:84:63:bd:a7:70:cc:d7:07:72:ee:52:
ba:69:bf:42:ce:27:3b:cd:89:98:76:ea:11:5a:74:
99:e6:6c:d0:ed:f7:fe:c1:44:cb:e5:b7:a5:73:1d:
53:b1:f7:2c:6a:16:34:80:7d:28:0c:7d:b9:09:29:
14:76:ab:e0:c4:d6:42:4b:80:06:6c:3f:e5:40:23:
58:96:46:5f:57:af:54:5a:ff:e2:d5:ae:68:b4:49:
cb:ec:26:26:5f:7f:8c:fa:3e:4c:01:18:98:bc:3e:
cc:8a:25:c8:39:b4:46:46:56:a9:d2:fe:a3:d0:a4:
6b:f5:a2:88:ca:1d:36:8c:4c:fd:54:c1:d8:e8:fc:
92:cf:67:bb:da:90:1d:4e:f8:69:21:5e:7e:a0:a9:
b9:b4:5e:3c:5b:84:e8:da:89:0e:59:81:a4:98:46:
91:45:d7:9e:11:c1:81:a2:14:48:b7:b2:f4:a4:e1:
f6:54:79:c4:83:6b:e8:68:cb:f4:08:e2:2b:26:4e:
b6:bb:a4:7b:56:d3:a3:ab:c8:ad:d2:7d:f3:f4:aa:
36:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:7E:A9:A1:F8:82:B8:96:08:77:A8:F4:69:AF:AC:4B:92:30:32:FE
X509v3 Authority Key Identifier:
keyid:A1:6F:2A:81:62:A7:55:24:FF:52:78:3F:81:32:C3:30:07:DA:4D:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oW8qgWKnVST_Ung_gTLDMAfaTZg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/4ac7e0-7b52-41ce-a3c2-4afe3ca5f1a5/1/5X6pofiCuJYId6j0aa-sS5IwMv4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/4ac7e0-7b52-41ce-a3c2-4afe3ca5f1a5/1/oW8qgWKnVST_Ung_gTLDMAfaTZg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.17.86.0/23
193.17.176.0/23
Signature Algorithm: sha256WithRSAEncryption
3f:91:3f:02:55:cf:5b:50:7a:77:eb:a0:b6:03:3b:69:a5:d0:
51:bc:ec:d9:57:f2:9f:71:3c:b7:12:6d:63:94:e6:80:d7:9f:
8f:c0:a1:07:55:4a:a3:02:fe:46:92:b2:63:94:1c:b8:07:5a:
38:c7:1e:e5:47:cb:c7:a5:b3:6f:8c:fc:6a:4a:82:2c:55:3a:
f7:75:73:a2:b3:6a:e8:9e:2a:06:b7:65:74:2c:c7:45:76:f2:
ec:06:d3:1b:99:89:8f:97:c8:33:a5:74:32:8c:77:3a:ee:ce:
67:78:06:71:ab:ea:48:22:3d:03:8b:e4:af:a8:3e:c4:2e:2f:
7e:20:d8:e8:71:0a:62:80:ba:39:eb:63:52:06:2e:2c:f6:2d:
24:d8:35:07:c5:f4:c1:94:bc:5b:df:af:07:43:ef:61:75:97:
5e:6a:21:35:05:c0:5b:04:01:70:a1:f2:dc:ff:4e:ae:5e:41:
95:0a:02:83:6a:3d:a6:4b:54:33:c1:86:16:fb:b3:f9:cc:be:
2d:0e:5b:1b:ec:63:a3:c4:80:11:07:ef:9f:00:f3:8d:a3:dd:
84:4f:18:6a:8a:0c:8f:d9:1c:f7:d7:0d:63:91:74:ae:6a:76:
fe:75:a4:8a:09:79:39:d4:81:b3:fc:7c:33:60:79:c2:0e:d3:
52:61:44:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:13:34 2025 by rpki-client