Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/1MUwYjUY8A9oDjVUEGXnLKbirCw.roa
File: 1MUwYjUY8A9oDjVUEGXnLKbirCw.roa (raw, json)
Hash identifier: I+6siqM1ml+gFtzUvvOkOG7kHVziz6ffWmqziLqBZiI=
Subject key identifier: D4:C5:30:62:35:18:F0:0F:68:0E:35:54:10:65:E7:2C:A6:E2:AC:2C
Certificate issuer: /CN=4986c73994d02d91fc97d916e9809a6d981e6b17
Certificate serial: 018ACD3993A9A2B335252BAC0A1E3DFB2430
Authority key identifier: 49:86:C7:39:94:D0:2D:91:FC:97:D9:16:E9:80:9A:6D:98:1E:6B:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SYbHOZTQLZH8l9kW6YCabZgeaxc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/1MUwYjUY8A9oDjVUEGXnLKbirCw.roa
Signing time: Mon 25 Sep 2023 16:43:37 +0000
ROA not before: Mon 25 Sep 2023 16:43:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51765
IP address blocks: 193.135.174.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:cd:39:93:a9:a2:b3:35:25:2b:ac:0a:1e:3d:fb:24:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4986c73994d02d91fc97d916e9809a6d981e6b17
Validity
Not Before: Sep 25 16:43:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d4c530623518f00f680e35541065e72ca6e2ac2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:be:f1:94:9d:0d:fe:df:73:ed:53:21:f7:ff:
6a:6b:6f:c4:1e:07:e2:15:f5:b6:95:01:55:01:fe:
29:c0:86:37:59:d0:20:83:1b:df:71:05:65:88:89:
24:82:96:ac:f0:b5:fc:78:dc:40:eb:67:9f:4a:d5:
97:56:7d:12:53:ce:6e:a5:01:11:59:a7:fd:86:e0:
50:17:f5:0a:4c:39:7a:69:9e:39:7a:3c:da:66:9b:
24:da:42:10:1c:24:bf:2a:22:9a:38:2d:b7:8f:6c:
65:08:9a:de:46:8c:01:4a:cb:10:3d:2e:b3:89:03:
63:a9:95:10:ee:0d:5f:d1:f8:bf:97:d1:50:4d:8e:
59:3c:0c:37:9a:1e:af:00:65:77:8d:94:f2:5f:0a:
9d:18:28:a7:c0:d2:4f:73:74:7b:33:28:90:5e:96:
d0:fc:14:60:ef:ed:23:6c:ff:33:3d:f0:7d:dd:43:
8b:be:70:f5:09:9a:36:bc:20:d0:7c:b0:d7:70:59:
8e:1b:90:a5:4c:35:c2:32:42:e9:6a:5d:7a:7d:3a:
f0:b6:dd:00:1a:83:de:fe:f8:60:74:7b:e9:3b:af:
fb:0b:b6:8f:97:5d:ac:d7:91:82:8b:6f:a5:26:d6:
15:f9:5e:40:d8:0a:4d:42:60:cc:6a:a8:49:40:3a:
b0:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:C5:30:62:35:18:F0:0F:68:0E:35:54:10:65:E7:2C:A6:E2:AC:2C
X509v3 Authority Key Identifier:
keyid:49:86:C7:39:94:D0:2D:91:FC:97:D9:16:E9:80:9A:6D:98:1E:6B:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SYbHOZTQLZH8l9kW6YCabZgeaxc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/1MUwYjUY8A9oDjVUEGXnLKbirCw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.135.174.0/24
Signature Algorithm: sha256WithRSAEncryption
91:6e:00:99:16:35:6a:94:77:66:c6:fd:6d:01:8c:e1:ee:79:
bd:dc:f1:f9:9a:dd:4f:b0:93:91:a2:3d:c9:e7:32:1c:f8:84:
9c:68:b9:c2:23:dd:94:86:c4:b9:b0:98:64:1c:22:0b:fc:e2:
0d:fc:b6:64:2f:9c:2e:94:4e:08:aa:44:2b:40:5b:d4:19:b8:
81:5e:f5:97:56:33:cf:d4:c8:85:a6:43:38:58:96:a4:85:08:
7e:ea:c9:bc:11:c4:c5:f8:99:6b:7e:05:6e:1c:61:4d:31:f1:
51:0d:a9:99:89:80:1f:f3:d9:11:1b:4c:12:18:f1:45:53:e0:
9e:20:e5:a4:68:42:f8:35:ef:b9:f6:c3:6a:9a:55:32:a5:6b:
a6:3d:a5:2f:06:68:f4:b2:31:f4:c7:51:3a:a6:37:5b:39:d3:
13:d6:47:de:17:1b:ba:42:7b:47:46:78:96:47:a1:04:7b:7a:
c5:f7:96:b0:f4:a0:7f:dd:55:e4:11:f2:d5:d9:80:02:23:14:
e5:c7:c2:fb:20:16:b8:bc:27:b3:0e:19:61:c3:6e:c2:1a:b1:
16:8e:8d:5c:3b:54:f9:44:2f:99:33:0a:66:20:67:6a:db:f9:
55:c6:c2:1a:52:0f:2e:4f:ab:7a:82:6c:7a:6c:6b:90:9c:4c:
1c:3e:33:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:57:07 2025 by rpki-client