Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/0P0602kXen3Fm5oheXiRtBpJusg.roa
File: 0P0602kXen3Fm5oheXiRtBpJusg.roa (raw, json)
Hash identifier: jw9c+oRa7oj42KoBz4skXYUlRjYGgsiiYjsKgZDNqK0=
Subject key identifier: D0:FD:3A:D3:69:17:7A:7D:C5:9B:9A:21:79:78:91:B4:1A:49:BA:C8
Certificate issuer: /CN=4986c73994d02d91fc97d916e9809a6d981e6b17
Certificate serial: 018E3BCAB9E0670599B8B0F78EEFBB6A0724
Authority key identifier: 49:86:C7:39:94:D0:2D:91:FC:97:D9:16:E9:80:9A:6D:98:1E:6B:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SYbHOZTQLZH8l9kW6YCabZgeaxc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/0P0602kXen3Fm5oheXiRtBpJusg.roa
Signing time: Thu 14 Mar 2024 07:08:45 +0000
ROA not before: Thu 14 Mar 2024 07:08:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60721
IP address blocks: 193.135.137.0/24 maxlen: 24
193.135.151.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:3b:ca:b9:e0:67:05:99:b8:b0:f7:8e:ef:bb:6a:07:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4986c73994d02d91fc97d916e9809a6d981e6b17
Validity
Not Before: Mar 14 07:08:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d0fd3ad369177a7dc59b9a21797891b41a49bac8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:81:11:99:8f:1c:a8:01:6a:c3:6c:d7:3a:9c:
3a:37:89:ca:a1:97:a4:25:92:c7:f3:2c:11:21:6f:
76:9c:09:76:f6:56:fa:d8:2e:1f:2c:12:33:93:f2:
88:7f:c2:ef:be:8d:0a:e3:97:b4:20:2b:70:26:33:
40:6a:3b:a1:db:02:52:c3:6d:19:8f:a6:ab:0b:f5:
38:ec:4b:e2:56:f0:77:13:41:9f:20:77:57:9f:0a:
d1:6d:9b:53:29:7a:50:41:cc:7d:e7:27:39:d6:f5:
12:ad:1a:f0:fe:c6:90:68:c7:8d:8e:ce:08:26:8c:
5d:f5:ab:6a:c7:12:07:3b:d8:1c:7d:40:91:b6:20:
d6:12:bf:45:5b:54:fc:2c:11:8a:bb:d8:f7:7b:d1:
d5:8a:df:ec:b9:e2:3e:83:06:f9:b8:ff:57:62:de:
14:e9:4a:9b:75:93:39:76:60:54:c4:3d:12:59:18:
02:4f:71:74:a7:f3:6d:f3:79:8f:f6:9d:d0:2f:c5:
a1:a7:32:9f:cc:7d:d6:09:da:57:eb:7b:55:f8:f6:
83:1c:04:0e:4b:f2:97:4f:1a:7c:43:90:b4:ec:1f:
11:bf:4e:52:e4:57:79:93:ea:02:b9:bb:4b:f3:d1:
eb:02:1a:37:21:3e:2e:5c:43:be:94:01:1b:52:5f:
97:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:FD:3A:D3:69:17:7A:7D:C5:9B:9A:21:79:78:91:B4:1A:49:BA:C8
X509v3 Authority Key Identifier:
keyid:49:86:C7:39:94:D0:2D:91:FC:97:D9:16:E9:80:9A:6D:98:1E:6B:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SYbHOZTQLZH8l9kW6YCabZgeaxc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/0P0602kXen3Fm5oheXiRtBpJusg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.135.137.0/24
193.135.151.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:c0:7b:08:03:8e:88:1a:cd:71:fa:ba:38:9e:0f:85:c5:92:
98:ed:88:b9:c8:30:8e:97:90:64:83:d2:30:5d:0f:1b:00:5e:
d5:7e:4b:92:4c:50:c7:98:02:f0:8f:ac:ac:93:14:9c:16:77:
45:7f:6d:59:7a:eb:9f:5f:51:0d:e5:7b:f3:67:6d:49:72:9c:
ad:eb:fb:be:98:7a:3d:8e:29:5a:67:07:66:47:39:74:48:94:
f3:8c:80:f1:f2:56:69:85:89:14:70:97:4f:2f:87:b1:48:04:
46:a3:e8:4b:e9:96:7e:be:c8:c8:3e:ab:2b:ec:6b:e9:5c:2c:
46:cf:0b:ce:e7:92:7e:b1:59:b7:5d:12:b1:fe:06:55:d9:24:
ee:63:c3:47:58:f0:5a:11:86:48:23:cc:75:4a:75:a7:17:70:
4b:d3:e6:72:9a:1c:1c:a7:c4:33:09:34:91:11:b3:58:85:71:
1d:ac:e7:23:70:2e:67:de:32:b5:aa:93:af:80:11:38:5c:2a:
be:53:25:3a:1c:0b:42:d7:5c:f1:37:66:a9:ee:f7:60:e1:b1:
e8:65:f7:ec:ea:7a:bc:bd:fc:f5:1d:4e:9e:34:c0:12:59:e1:
26:eb:85:27:e1:ff:27:3b:aa:55:7b:2f:82:af:b8:44:bd:2f:
d6:68:b0:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:00:58 2025 by rpki-client