Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/7v17m4RI5KhC7Z3UQzQop33X718.roa
File: 7v17m4RI5KhC7Z3UQzQop33X718.roa (raw, json)
Hash identifier: vkc68o2mb58cquilkPxgbgaz2Vmy1hFlaZSl+zdjYxE=
Subject key identifier: EE:FD:7B:9B:84:48:E4:A8:42:ED:9D:D4:43:34:28:A7:7D:D7:EF:5F
Certificate issuer: /CN=4986c73994d02d91fc97d916e9809a6d981e6b17
Certificate serial: 0185703040B55485D2DD1FBAB73649C8856F
Authority key identifier: 49:86:C7:39:94:D0:2D:91:FC:97:D9:16:E9:80:9A:6D:98:1E:6B:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SYbHOZTQLZH8l9kW6YCabZgeaxc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/7v17m4RI5KhC7Z3UQzQop33X718.roa
Signing time: Mon 02 Jan 2023 01:54:48 +0000
ROA not before: Mon 02 Jan 2023 01:54:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 193.135.174.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:30:40:b5:54:85:d2:dd:1f:ba:b7:36:49:c8:85:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4986c73994d02d91fc97d916e9809a6d981e6b17
Validity
Not Before: Jan 2 01:54:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eefd7b9b8448e4a842ed9dd4433428a77dd7ef5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:ae:25:59:ad:7b:85:83:66:2b:59:2c:fa:7e:
b9:1d:d2:30:dd:b5:7d:2a:44:6b:32:14:f2:13:6a:
dd:c3:bd:74:4a:9e:19:98:e1:e3:f5:9c:35:9b:85:
2e:36:19:85:d4:b6:ec:58:2e:be:5b:80:75:0d:9d:
d9:d9:0e:6a:37:af:a2:22:1b:f0:93:38:0f:8d:5e:
21:b4:d6:9d:25:85:9f:e4:34:00:2c:c5:e4:62:98:
69:a9:00:e1:df:0c:ef:fe:bd:cd:b1:4d:39:e4:de:
31:f9:13:88:b3:d0:99:99:3e:de:e8:14:d8:1f:e4:
5a:e8:de:c9:0a:44:43:7c:04:6f:dd:54:24:55:10:
f3:39:e4:b5:fd:49:9a:c3:f1:27:3c:72:9a:a3:01:
d7:22:fe:a9:9d:3a:fa:95:68:79:7c:51:21:c8:05:
4a:01:67:0f:f9:c6:68:aa:f6:99:72:e7:ba:31:ec:
77:bc:a0:cf:83:f1:10:6c:60:60:37:95:bd:26:68:
a3:95:99:9d:04:5b:18:0f:00:2c:e8:28:fd:44:72:
76:58:0b:7e:86:9c:8c:ea:9d:41:7d:c3:04:7b:c5:
d9:73:67:ed:a2:cb:66:e6:f7:b8:b2:58:f0:cd:b5:
da:bc:24:c3:ba:0a:e8:e2:8f:8a:cd:dc:5a:99:2e:
6f:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:FD:7B:9B:84:48:E4:A8:42:ED:9D:D4:43:34:28:A7:7D:D7:EF:5F
X509v3 Authority Key Identifier:
keyid:49:86:C7:39:94:D0:2D:91:FC:97:D9:16:E9:80:9A:6D:98:1E:6B:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SYbHOZTQLZH8l9kW6YCabZgeaxc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/7v17m4RI5KhC7Z3UQzQop33X718.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.135.174.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:23:da:eb:16:dd:53:28:2b:b2:86:fa:5c:55:46:c5:84:0b:
42:04:c1:45:ed:f7:e2:52:47:08:e9:5b:b4:51:af:e3:ef:d7:
43:fc:4e:d0:bd:ee:7a:bb:f3:fc:96:ca:62:0d:af:de:41:0d:
d2:a7:d5:56:3c:5d:f2:30:b3:a0:f9:66:d2:66:94:29:da:68:
70:48:db:7b:82:51:65:9f:1e:23:d0:72:95:49:5b:e4:e5:76:
08:9e:b0:0d:96:97:b9:68:e7:a9:71:07:03:35:a6:94:8d:38:
fd:1b:4a:3b:88:6f:0b:06:77:7e:38:e2:7a:00:c3:66:84:78:
4d:9d:0b:60:bf:38:78:15:88:c8:66:a5:cf:e4:67:fd:b4:1f:
db:c2:85:61:b2:2a:83:14:e8:ab:86:a7:4a:47:41:00:0d:f8:
cb:ec:f4:ba:07:8c:13:0d:53:2e:84:8d:5a:90:5a:ad:39:2c:
23:be:8c:a8:f4:54:92:8f:80:61:3c:4a:65:e5:0d:ca:fa:ad:
93:74:0a:67:fd:7b:63:cd:f5:8c:5a:86:1b:67:21:c0:4e:d0:
23:d0:c1:4d:0a:20:e0:02:29:65:d0:d5:f6:93:4f:50:9e:8e:
f8:2c:a4:e6:9f:93:10:aa:e7:dc:e7:e5:93:32:c2:bd:84:e9:
20:ff:4b:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:11:06 2025 by rpki-client