Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/U9w_oytAZGfCrgJNZmTDwb9UySA.roa
File: U9w_oytAZGfCrgJNZmTDwb9UySA.roa (raw, json)
Hash identifier: SIaenc5yJk4e4CmTezfW/ZhsftMgF7z8cKg6hJBljXU=
Subject key identifier: 53:DC:3F:A3:2B:40:64:67:C2:AE:02:4D:66:64:C3:C1:BF:54:C9:20
Certificate issuer: /CN=4986c73994d02d91fc97d916e9809a6d981e6b17
Certificate serial: 018DD55B52438B28F292916D67F5D5305E99
Authority key identifier: 49:86:C7:39:94:D0:2D:91:FC:97:D9:16:E9:80:9A:6D:98:1E:6B:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SYbHOZTQLZH8l9kW6YCabZgeaxc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/U9w_oytAZGfCrgJNZmTDwb9UySA.roa
Signing time: Fri 23 Feb 2024 09:45:48 +0000
ROA not before: Fri 23 Feb 2024 09:45:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43260
IP address blocks: 193.135.174.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:d5:5b:52:43:8b:28:f2:92:91:6d:67:f5:d5:30:5e:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4986c73994d02d91fc97d916e9809a6d981e6b17
Validity
Not Before: Feb 23 09:45:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=53dc3fa32b406467c2ae024d6664c3c1bf54c920
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:b3:4c:d6:ec:70:e9:e0:c7:6e:f0:91:91:c1:
2b:a8:6e:34:0f:b5:ae:d9:d1:61:33:f7:03:91:05:
ec:11:b2:86:5d:23:27:51:7d:63:3c:03:af:7d:24:
43:72:1d:bd:9a:52:63:73:70:a5:fe:94:85:73:dd:
07:82:d2:d6:28:e6:10:08:64:b5:e7:1a:55:3a:90:
9c:7c:69:81:ee:bb:a8:dc:3a:3b:04:1e:a6:5c:3b:
56:31:7a:2e:37:19:31:a7:57:ed:66:40:9e:1d:ee:
0b:34:88:ff:b6:f7:08:cb:a6:03:e4:dd:b2:72:5e:
74:e5:62:45:ee:6a:30:39:1c:59:6c:4e:8f:c1:b9:
c6:b3:70:09:ff:1b:a7:97:8e:81:67:a8:2c:e6:5d:
7e:18:01:b8:7e:a5:fd:40:99:82:28:c8:6a:c6:5f:
aa:92:3b:56:42:bd:68:5d:10:86:7d:3a:5f:3c:90:
25:83:25:e5:8e:19:3c:4f:9c:fa:a2:0c:6f:cf:32:
e1:11:12:28:58:91:d9:a3:cc:e2:d0:10:0d:5b:6c:
c6:11:67:3a:7b:fc:52:7d:64:97:d1:9a:00:b5:1d:
85:52:08:f5:7a:73:19:d3:36:e3:ce:65:ce:b9:f3:
e2:b5:4d:69:94:e3:0b:4d:19:4e:b8:e1:12:be:26:
f0:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:DC:3F:A3:2B:40:64:67:C2:AE:02:4D:66:64:C3:C1:BF:54:C9:20
X509v3 Authority Key Identifier:
keyid:49:86:C7:39:94:D0:2D:91:FC:97:D9:16:E9:80:9A:6D:98:1E:6B:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SYbHOZTQLZH8l9kW6YCabZgeaxc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/U9w_oytAZGfCrgJNZmTDwb9UySA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.135.174.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:19:9b:49:cc:90:ee:01:66:63:8b:da:9b:79:83:51:fd:21:
61:60:62:26:2e:99:62:44:31:1b:0d:cf:e1:5f:6b:3f:28:24:
86:bf:03:86:0a:01:47:2c:d5:5d:61:ba:0f:2c:94:08:37:84:
29:6a:b1:5b:b7:9d:81:fb:08:b7:c7:a2:48:5d:1b:c4:ed:09:
63:ab:3d:8d:2f:ec:b6:86:25:0e:93:31:40:45:e8:ea:62:c0:
97:04:fe:90:54:99:1f:df:c9:e8:83:9e:2c:3c:e5:b1:5a:37:
39:1c:6c:0b:79:af:a6:fd:e2:ac:d1:ac:c5:d2:2a:f9:ed:d8:
a1:2d:10:69:76:01:b7:e0:74:1b:75:0f:3c:bc:dc:58:b1:17:
91:4c:60:00:60:b8:0d:19:f8:da:93:e6:03:78:97:fb:d7:3a:
af:31:76:bc:73:82:62:7a:bf:37:2f:3a:4b:26:5e:39:1a:6d:
2f:d1:e0:33:87:ee:fa:54:dd:4a:8d:7b:ef:16:d7:2d:fe:35:
6a:be:34:ff:96:7d:15:3a:58:05:87:13:4f:e6:6f:d4:68:7f:
fc:64:fa:27:6d:a4:34:45:62:49:26:cf:0a:24:b1:7e:c8:c8:
b6:64:ae:a1:f6:63:d1:46:14:c7:52:c0:ae:45:3c:e2:cc:af:
f0:a3:bd:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:07:37 2025 by rpki-client