Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/890848-1c71-4cf1-bc75-06e1e399b894/1/Pib5DEKS9kiF2hUpLiaNImsgB-o.roa
File: Pib5DEKS9kiF2hUpLiaNImsgB-o.roa (raw, json)
Hash identifier: he7h6/701e9oSZGZPwQRh77xZmZzepmZ/Vr0Q4wrMxI=
Subject key identifier: 3E:26:F9:0C:42:92:F6:48:85:DA:15:29:2E:26:8D:22:6B:20:07:EA
Certificate issuer: /CN=c1a11ca059e44d410e37861eb6040aa26e687903
Certificate serial: 01856FE707FC0B13708FDFE3B516635E3F99
Authority key identifier: C1:A1:1C:A0:59:E4:4D:41:0E:37:86:1E:B6:04:0A:A2:6E:68:79:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/waEcoFnkTUEON4YetgQKom5oeQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/890848-1c71-4cf1-bc75-06e1e399b894/1/Pib5DEKS9kiF2hUpLiaNImsgB-o.roa
Signing time: Mon 02 Jan 2023 00:34:49 +0000
ROA not before: Mon 02 Jan 2023 00:34:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 46918
IP address blocks: 193.169.200.0/23 maxlen: 23
193.169.218.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:e7:07:fc:0b:13:70:8f:df:e3:b5:16:63:5e:3f:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1a11ca059e44d410e37861eb6040aa26e687903
Validity
Not Before: Jan 2 00:34:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3e26f90c4292f64885da15292e268d226b2007ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:71:20:58:33:b5:05:9e:7c:0b:2a:28:88:72:
ab:f1:6d:c9:68:a7:d9:43:51:a2:f4:35:fb:28:58:
e4:7d:be:f4:3d:25:7f:04:54:4c:29:4f:be:e9:70:
bd:94:ff:7a:39:82:81:32:76:6b:44:55:08:7f:a2:
4a:3c:e3:ec:55:4d:95:30:e7:17:82:98:d3:08:f1:
71:d8:84:df:a5:35:31:2e:39:86:5a:09:76:c5:cf:
35:62:86:93:b3:53:64:c8:6c:77:d4:75:d8:2c:e3:
44:eb:36:26:b7:21:2d:c0:05:2e:b9:97:18:1a:c0:
13:9a:7e:73:79:1c:89:65:f1:65:d0:a1:0d:6c:05:
fa:55:33:6c:e6:1c:31:8e:c3:52:25:ef:69:04:e3:
f8:71:5e:f8:37:b7:4a:01:51:7f:4c:c6:74:c0:62:
71:ec:8b:e8:d0:d4:c2:34:7a:36:49:d2:c7:20:9a:
36:1c:e5:f7:59:78:72:56:92:68:6a:61:24:23:5b:
f6:62:3a:0f:8a:ca:3a:f2:67:66:7d:a8:fe:ff:f0:
cb:5e:d7:d2:f9:f3:5c:d9:9e:c1:61:e2:65:71:0a:
71:c8:89:e8:d2:fa:7b:37:bf:54:c2:92:6f:f5:f2:
54:b9:7d:2c:4a:13:57:82:45:0c:ca:32:6a:8c:db:
ba:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:26:F9:0C:42:92:F6:48:85:DA:15:29:2E:26:8D:22:6B:20:07:EA
X509v3 Authority Key Identifier:
keyid:C1:A1:1C:A0:59:E4:4D:41:0E:37:86:1E:B6:04:0A:A2:6E:68:79:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/waEcoFnkTUEON4YetgQKom5oeQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/890848-1c71-4cf1-bc75-06e1e399b894/1/Pib5DEKS9kiF2hUpLiaNImsgB-o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/890848-1c71-4cf1-bc75-06e1e399b894/1/waEcoFnkTUEON4YetgQKom5oeQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.169.200.0/23
193.169.218.0/23
Signature Algorithm: sha256WithRSAEncryption
39:cf:40:19:bf:ac:78:f1:8f:26:ff:80:32:f1:f4:a5:0d:be:
d5:ec:de:30:d6:7f:d7:da:36:76:04:78:64:2e:e1:7a:cf:0d:
74:31:46:67:10:de:36:cc:58:11:c5:98:a4:14:79:62:7b:e0:
c1:c8:9e:07:59:56:e4:4f:9b:75:5a:30:1d:fd:44:6b:be:57:
a2:19:a4:9c:78:4a:d8:ac:d3:e0:49:30:ef:6a:28:a1:10:96:
b6:1a:f0:bc:5c:d8:73:57:69:ff:84:5f:e6:61:15:ea:5c:ac:
e4:0c:34:00:f1:a7:ff:1c:27:d2:b0:78:f1:eb:59:4b:44:ec:
80:cc:e5:59:b8:0c:d4:04:1c:b5:d6:18:bf:ca:3f:22:3c:1f:
f7:02:a7:a0:a3:1b:cb:86:89:21:82:69:da:0d:f2:a1:86:f8:
d6:0e:03:b2:bb:f4:4b:71:18:90:1e:34:c2:a7:c7:00:7f:3b:
99:c8:7d:59:25:e2:3d:77:3a:6d:10:25:f6:2b:7f:4c:f7:01:
6f:53:d0:48:b7:ac:59:c0:4e:75:52:9e:9f:33:e4:a5:66:f3:
77:2b:ea:c2:73:93:07:c1:ec:7c:51:2b:dd:63:2a:84:f5:15:
58:01:b1:98:4a:80:44:2c:54:3c:1d:ef:d4:68:03:58:8d:9c:
87:28:03:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:17:21 2025 by rpki-client