Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/3a8bad-97b7-456a-b74b-82f9528c41bc/1/1-9oVwG2m7MWjj6HEtrOO6M3v3II.roa
File: 1-9oVwG2m7MWjj6HEtrOO6M3v3II.roa (raw, json)
Hash identifier: Mxqxuf94cOPowu6lctuOAtef7yZRQ42eUBGg31IP8qw=
Subject key identifier: FB:DA:15:C0:6D:A6:EC:C5:A3:8F:A1:C4:B6:B3:8E:E8:CD:EF:DC:82
Certificate issuer: /CN=cf49f9d397ad8fcb03b843318140267a5c214dbc
Certificate serial: 01856E267F0664DDC9F0CBDC536AD48EA6FB
Authority key identifier: CF:49:F9:D3:97:AD:8F:CB:03:B8:43:31:81:40:26:7A:5C:21:4D:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z0n505etj8sDuEMxgUAmelwhTbw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/3a8bad-97b7-456a-b74b-82f9528c41bc/1/1-9oVwG2m7MWjj6HEtrOO6M3v3II.roa
Signing time: Sun 01 Jan 2023 16:24:54 +0000
ROA not before: Sun 01 Jan 2023 16:24:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 33911
IP address blocks: 193.202.126.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:26:7f:06:64:dd:c9:f0:cb:dc:53:6a:d4:8e:a6:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf49f9d397ad8fcb03b843318140267a5c214dbc
Validity
Not Before: Jan 1 16:24:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fbda15c06da6ecc5a38fa1c4b6b38ee8cdefdc82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:c1:e9:bb:fa:33:f3:b3:22:68:28:81:f5:34:
63:97:da:71:1b:97:b2:c0:21:bc:05:36:a7:f5:1a:
25:a5:ed:b4:07:90:0e:f0:24:62:85:68:99:1f:48:
f9:98:35:a7:b5:e4:12:9f:1d:63:bc:60:6f:64:c3:
97:b6:6d:ea:44:c7:93:18:11:8b:4e:af:a3:80:96:
db:97:4d:18:42:10:cc:b1:5e:67:86:d7:b6:f5:eb:
32:65:82:e7:b9:94:d4:82:6b:24:38:6b:b9:a1:c9:
e0:6f:37:de:e2:0c:c1:d9:9b:9e:da:76:e9:99:7e:
e6:3c:65:d0:e5:5a:f6:cc:06:f5:0a:9d:4a:fd:06:
3a:5d:71:e8:fa:bb:db:6a:74:cc:5f:3b:f0:9f:fe:
f4:27:7d:93:91:79:ab:6c:18:6b:8d:98:43:c5:b2:
ed:4e:1a:bf:76:bc:22:ae:e4:9d:0a:19:d6:d8:b7:
b8:ca:61:9a:33:37:a5:72:aa:cb:a3:33:96:e6:05:
9a:8a:e3:54:7f:4f:c5:e1:46:0b:7b:cd:9a:b3:05:
60:a4:57:1b:64:57:2b:15:d2:89:b3:58:da:9a:01:
27:40:83:79:c3:6f:7b:86:7f:73:f8:18:38:5b:1b:
66:58:0f:d3:0d:e7:ae:19:f9:d4:59:af:e4:94:74:
fa:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:DA:15:C0:6D:A6:EC:C5:A3:8F:A1:C4:B6:B3:8E:E8:CD:EF:DC:82
X509v3 Authority Key Identifier:
keyid:CF:49:F9:D3:97:AD:8F:CB:03:B8:43:31:81:40:26:7A:5C:21:4D:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z0n505etj8sDuEMxgUAmelwhTbw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/3a8bad-97b7-456a-b74b-82f9528c41bc/1/1-9oVwG2m7MWjj6HEtrOO6M3v3II.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/3a8bad-97b7-456a-b74b-82f9528c41bc/1/z0n505etj8sDuEMxgUAmelwhTbw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.202.126.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:99:c7:e2:7a:be:51:b3:6c:f6:c0:b9:03:3b:62:f3:59:9f:
08:0b:55:95:ec:43:52:4b:c7:9d:27:98:8a:71:c2:1c:6a:c4:
21:6f:8d:c5:4d:1a:18:d6:5a:2a:e4:1c:ac:53:68:75:fc:62:
44:2b:b7:63:23:36:35:9e:cb:1d:f1:c8:77:2b:18:c6:fe:b3:
a6:a1:52:61:4c:69:d7:63:47:11:e2:83:f3:5c:53:29:fa:40:
4c:4e:8e:a1:d1:ba:d1:18:c6:1f:aa:8d:07:5e:b7:40:9b:f9:
25:8e:6e:6d:89:e4:a6:4f:f1:d4:d5:0a:8d:c3:a0:77:f7:a0:
fb:16:69:21:b3:b2:77:c5:31:80:60:ec:8a:8a:4d:a8:1a:87:
54:65:52:e5:60:be:5f:7e:f8:ff:70:98:62:b6:1e:7f:66:9d:
44:66:6e:ce:f0:d1:f5:e0:4b:fd:e6:75:39:da:98:67:0f:72:
84:e6:bd:61:18:7b:49:47:b8:00:fc:04:d0:4e:47:af:7e:c2:
fe:13:53:91:fb:56:75:19:29:13:60:3d:9a:d2:ca:f5:82:25:
25:1b:3f:a0:e7:fc:40:d9:29:1a:d6:83:ec:57:e1:93:b6:46:
d6:f1:0f:37:73:33:8f:99:c6:3b:03:61:09:b0:2d:5c:39:00:
49:a2:0b:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 18:06:32 2025 by rpki-client