Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/385e1f-2106-4a3c-a68c-0dd96eea7a89/1/RrVeJOnShi_FDESI4UPKHdQJ1vQ.roa
File: RrVeJOnShi_FDESI4UPKHdQJ1vQ.roa (raw, json)
Hash identifier: cVDzHDUBmlRTsIqq2Ef9Ia7Hy9Q78oHxKagEbJ8v91I=
Subject key identifier: 46:B5:5E:24:E9:D2:86:2F:C5:0C:44:88:E1:43:CA:1D:D4:09:D6:F4
Certificate issuer: /CN=9f246632e857f370c3038f75545f122b8eb16d1a
Certificate serial: 01856F9491D3F03743F25D200D266E413E5E
Authority key identifier: 9F:24:66:32:E8:57:F3:70:C3:03:8F:75:54:5F:12:2B:8E:B1:6D:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nyRmMuhX83DDA491VF8SK46xbRo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/385e1f-2106-4a3c-a68c-0dd96eea7a89/1/RrVeJOnShi_FDESI4UPKHdQJ1vQ.roa
Signing time: Sun 01 Jan 2023 23:04:45 +0000
ROA not before: Sun 01 Jan 2023 23:04:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 193.3.186.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:94:91:d3:f0:37:43:f2:5d:20:0d:26:6e:41:3e:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f246632e857f370c3038f75545f122b8eb16d1a
Validity
Not Before: Jan 1 23:04:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=46b55e24e9d2862fc50c4488e143ca1dd409d6f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:37:3d:49:39:a3:58:73:e1:ae:37:f9:fa:d0:
ff:ce:0e:a0:85:bf:a5:4e:ba:55:33:39:eb:59:73:
87:0d:ed:e1:45:99:c3:9f:dc:8c:1d:52:75:74:c6:
7a:b0:98:d4:4c:9c:e6:77:0a:ed:14:e8:75:fc:b8:
86:ff:50:95:0a:d2:66:2e:98:14:a4:dc:cc:79:01:
24:a7:c3:6e:ff:64:d7:d8:0d:69:85:86:9b:b7:72:
69:8a:ab:50:b3:bb:bb:dd:17:c4:4d:a2:36:00:27:
81:63:14:9a:39:15:68:fc:62:37:2e:e0:d6:d4:01:
44:21:3f:25:e3:63:06:db:3b:45:94:ab:bf:c3:e0:
97:4f:87:57:3e:f3:96:82:94:cc:cb:3a:06:8c:44:
53:5a:2f:08:95:08:99:70:f8:57:6b:d0:7b:4f:ad:
ca:0a:b6:3c:a1:ee:27:78:10:68:6a:49:32:ff:03:
66:a4:1d:32:e9:e1:24:d8:f9:85:cb:a6:ed:58:5a:
54:ed:06:49:20:c5:98:e0:dd:4d:41:11:d8:45:dc:
9c:3b:20:7d:a5:c3:9d:e2:56:82:73:f5:38:7e:a4:
f4:b7:47:28:de:6a:1b:90:cd:af:c0:81:9c:f6:ee:
f3:90:1c:59:0d:b8:6f:f9:53:6e:16:1d:f2:04:96:
c9:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:B5:5E:24:E9:D2:86:2F:C5:0C:44:88:E1:43:CA:1D:D4:09:D6:F4
X509v3 Authority Key Identifier:
keyid:9F:24:66:32:E8:57:F3:70:C3:03:8F:75:54:5F:12:2B:8E:B1:6D:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nyRmMuhX83DDA491VF8SK46xbRo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/385e1f-2106-4a3c-a68c-0dd96eea7a89/1/RrVeJOnShi_FDESI4UPKHdQJ1vQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/385e1f-2106-4a3c-a68c-0dd96eea7a89/1/nyRmMuhX83DDA491VF8SK46xbRo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.3.186.0/24
Signature Algorithm: sha256WithRSAEncryption
08:e4:9e:54:82:79:29:9c:47:a0:30:c4:92:65:0a:47:29:fd:
14:f7:aa:4b:68:a8:8d:97:81:9f:56:98:8a:9b:4b:84:8c:a6:
08:6c:cf:08:72:b0:f3:4d:b9:d3:0e:7c:8d:12:40:4f:0f:46:
84:97:f6:ae:d3:d9:35:bf:f0:ea:c0:19:ad:b0:91:7e:3f:1d:
14:9c:63:15:71:43:40:03:c7:1b:e9:df:c6:f4:75:22:95:8b:
d6:7a:14:d5:55:0f:79:db:d6:cc:73:35:7e:af:d8:ea:8b:e5:
f0:7c:ae:d8:e5:35:f3:d5:34:c9:f3:3b:ce:2e:f2:13:c1:a7:
c9:44:cb:57:1a:6f:0c:6a:03:a5:86:ba:d4:b2:f6:2e:b2:47:
b8:16:75:10:78:bf:ea:c8:88:d2:d3:92:f3:88:21:5d:ec:57:
b2:31:60:29:f3:e9:72:68:6a:a6:67:71:e0:4a:2f:f8:ea:6b:
aa:04:de:d3:97:2a:4c:bd:51:27:29:aa:4d:59:52:7f:7c:9d:
99:61:26:68:39:d1:25:f8:41:7c:c6:0d:52:55:c3:58:a4:5a:
4f:25:ab:96:aa:5b:76:e9:20:ae:d1:96:7f:d9:ad:83:6d:4d:
a0:66:17:7f:04:11:8b:14:7f:be:7f:5e:49:b3:b2:21:be:61:
4d:ea:f3:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:26:51 2025 by rpki-client