Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/770732-cc5a-42e1-8038-544b9c2e7726/1/s7BYPcFko15wHvOyF3oatSsccyI.roa
File: s7BYPcFko15wHvOyF3oatSsccyI.roa (raw, json)
Hash identifier: 78VX1NSsQyuTClZ7PDZmJ4FVZ65vdHUjOgVNSdaYEok=
Subject key identifier: B3:B0:58:3D:C1:64:A3:5E:70:1E:F3:B2:17:7A:1A:B5:2B:1C:73:22
Certificate issuer: /CN=c42f846f7dab127866ba27bfa964ba7d2de2044c
Certificate serial: 01941FFA00C7AF93CB590BC4341582266195
Authority key identifier: C4:2F:84:6F:7D:AB:12:78:66:BA:27:BF:A9:64:BA:7D:2D:E2:04:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xC-Eb32rEnhmuie_qWS6fS3iBEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/770732-cc5a-42e1-8038-544b9c2e7726/1/s7BYPcFko15wHvOyF3oatSsccyI.roa
Signing time: Wed 01 Jan 2025 03:47:45 +0000
ROA not before: Wed 01 Jan 2025 03:47:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 33853
IP address blocks: 193.26.216.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:00:c7:af:93:cb:59:0b:c4:34:15:82:26:61:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c42f846f7dab127866ba27bfa964ba7d2de2044c
Validity
Not Before: Jan 1 03:47:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b3b0583dc164a35e701ef3b2177a1ab52b1c7322
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:06:e7:2f:60:cb:62:73:3a:a3:8b:7a:d8:e5:
98:76:a1:52:5b:03:79:b6:e3:00:0b:17:6a:cf:40:
b1:8c:08:c0:30:57:11:2d:b5:4c:a4:16:ed:5c:23:
7d:a0:94:8e:8a:8d:a8:58:73:0d:c9:8a:eb:b1:c8:
14:2d:ae:59:57:f8:10:a3:23:7e:1a:1e:e2:1b:d5:
8e:0a:b9:d0:83:cd:98:3a:92:f5:94:f9:5a:0e:e1:
be:6d:8c:71:91:6a:3a:15:bf:f0:ad:6f:61:17:f3:
c4:aa:55:5b:b3:42:64:9e:fd:f1:0b:1b:fc:7b:f4:
a7:ec:bd:77:31:58:b1:b1:48:76:30:5a:95:c9:95:
f4:77:b1:8c:7d:27:e9:19:4e:1f:d6:77:c2:0f:0a:
d2:62:fa:d7:45:6b:91:f5:4a:e1:20:be:70:94:4e:
d4:dc:a1:f2:d8:2f:41:89:62:02:a5:d9:bc:a4:aa:
24:f9:b4:38:f7:af:ed:88:c3:87:ce:ac:c7:f6:e3:
60:d9:4c:e7:10:8f:e8:4c:ba:80:79:9e:11:30:65:
35:5d:9b:0c:31:17:f8:fd:08:10:5c:a4:d6:97:5a:
bb:42:a3:2d:94:36:1c:24:db:42:27:f4:f0:7d:37:
11:d4:bb:2f:57:f8:9b:b4:cf:1c:d4:bc:50:63:bd:
42:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:B0:58:3D:C1:64:A3:5E:70:1E:F3:B2:17:7A:1A:B5:2B:1C:73:22
X509v3 Authority Key Identifier:
keyid:C4:2F:84:6F:7D:AB:12:78:66:BA:27:BF:A9:64:BA:7D:2D:E2:04:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xC-Eb32rEnhmuie_qWS6fS3iBEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/770732-cc5a-42e1-8038-544b9c2e7726/1/s7BYPcFko15wHvOyF3oatSsccyI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/770732-cc5a-42e1-8038-544b9c2e7726/1/xC-Eb32rEnhmuie_qWS6fS3iBEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.26.216.0/24
Signature Algorithm: sha256WithRSAEncryption
31:1d:5d:d7:7e:8e:e3:f6:79:07:3b:4c:66:84:6c:70:d4:9f:
e6:18:4d:45:e0:21:36:96:eb:4a:3a:ba:37:3c:f7:5a:a1:2f:
a2:04:73:84:d9:24:31:d5:0e:0f:4f:f9:c6:ba:b8:7c:b2:d8:
90:e8:dc:6e:22:55:40:2f:66:a7:8e:f6:2a:42:29:fe:68:29:
92:63:ac:b5:20:fc:0e:c6:83:62:7d:d4:cf:cc:26:2f:a5:48:
73:b2:f6:4a:9d:c1:5e:6b:f4:10:6b:99:64:32:7c:de:5f:08:
ee:47:11:f0:ef:fe:9c:3b:1f:2d:df:f8:ee:00:8d:12:6d:40:
ab:5b:97:fe:70:37:46:d1:eb:41:aa:6b:ab:5c:00:7e:a9:fb:
0f:91:57:40:23:0d:0b:58:cc:9d:ce:b2:b9:93:85:92:41:6d:
1a:74:63:b5:de:62:8c:91:11:ba:2f:51:78:f3:a4:2a:67:99:
fd:b1:3d:8e:c9:b7:88:cf:6b:54:7b:36:ce:6c:c1:98:4d:84:
78:1c:28:9c:ae:cc:10:dd:33:2d:78:d8:d3:d8:f4:57:50:b0:
9d:42:6a:65:74:78:72:6f:b3:44:78:6d:9e:46:1b:be:46:f7:
f0:4e:32:3e:13:78:99:f0:fb:81:01:3c:c2:dc:74:ba:ce:b2:
26:ba:02:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:51:52 2025 by rpki-client