Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/aa4f40-d4a2-4a40-bac4-46610094ef9c/1/1-r2SqQew3ozByHkcRJ-e0xmRPPo.roa
File: 1-r2SqQew3ozByHkcRJ-e0xmRPPo.roa (raw, json)
Hash identifier: Ra5okfX6HAWpqtj6F90Y7Ux5eVTIoDNcACSdu+Nxgj8=
Subject key identifier: FA:BD:92:A9:07:B0:DE:8C:C1:C8:79:1C:44:9F:9E:D3:19:91:3C:FA
Certificate issuer: /CN=8e5c18bfb9a5395dceab8cdd58bf1a6b993b1bd0
Certificate serial: 01856F5486A4F0F044FB82FC8D14C91E7167
Authority key identifier: 8E:5C:18:BF:B9:A5:39:5D:CE:AB:8C:DD:58:BF:1A:6B:99:3B:1B:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jlwYv7mlOV3Oq4zdWL8aa5k7G9A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/aa4f40-d4a2-4a40-bac4-46610094ef9c/1/1-r2SqQew3ozByHkcRJ-e0xmRPPo.roa
Signing time: Sun 01 Jan 2023 21:54:48 +0000
ROA not before: Sun 01 Jan 2023 21:54:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43581
IP address blocks: 193.17.92.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:54:86:a4:f0:f0:44:fb:82:fc:8d:14:c9:1e:71:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e5c18bfb9a5395dceab8cdd58bf1a6b993b1bd0
Validity
Not Before: Jan 1 21:54:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fabd92a907b0de8cc1c8791c449f9ed319913cfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:2d:2a:44:2e:38:c3:d1:a9:75:76:e4:a7:f9:
1c:0a:37:a5:ed:93:e4:a4:d5:13:d7:9c:f5:c0:9d:
74:d2:05:f6:1e:5a:ff:1e:2d:33:4d:d3:ba:c9:1f:
1f:e9:bd:2b:2e:47:63:b3:6e:87:43:27:32:ae:3e:
0b:96:79:6e:37:90:0a:3f:21:ee:55:e2:2c:d5:f3:
67:e4:9a:17:f9:0b:20:ec:a9:4d:e3:86:48:5e:1a:
e4:12:c0:c6:79:d0:43:e7:a0:e2:93:79:92:18:65:
5d:40:78:75:a7:6d:3c:72:55:b3:7d:e5:4a:c4:16:
31:ac:e9:3b:ee:0a:fa:5b:62:2f:f1:33:91:29:68:
cf:fb:47:b0:ef:6f:9e:9c:69:56:4e:15:f6:2b:d5:
19:d2:e3:bc:4a:ec:4e:d9:ea:0f:d9:59:83:86:83:
83:f9:c7:81:c1:ec:f2:ab:6b:f2:2f:c9:fe:75:b0:
90:42:1b:8b:37:17:86:32:e5:5c:7b:4b:af:53:4e:
c7:c9:f1:14:a0:89:5e:11:e4:dd:d6:3a:59:59:d4:
42:54:ba:2f:e8:23:cd:ae:72:4d:0e:34:ba:d8:fa:
de:18:61:01:70:8b:8c:98:4a:e9:ee:e1:84:23:56:
03:cf:22:4a:97:d6:ef:8b:f5:15:3c:22:18:5d:3c:
82:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:BD:92:A9:07:B0:DE:8C:C1:C8:79:1C:44:9F:9E:D3:19:91:3C:FA
X509v3 Authority Key Identifier:
keyid:8E:5C:18:BF:B9:A5:39:5D:CE:AB:8C:DD:58:BF:1A:6B:99:3B:1B:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jlwYv7mlOV3Oq4zdWL8aa5k7G9A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/aa4f40-d4a2-4a40-bac4-46610094ef9c/1/1-r2SqQew3ozByHkcRJ-e0xmRPPo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/aa4f40-d4a2-4a40-bac4-46610094ef9c/1/jlwYv7mlOV3Oq4zdWL8aa5k7G9A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.17.92.0/24
Signature Algorithm: sha256WithRSAEncryption
db:39:02:7f:4e:eb:f9:36:9e:95:e6:a4:2a:58:b2:d3:18:46:
1b:a1:3a:c0:dd:db:17:95:2a:64:cf:7e:39:09:3f:9d:35:91:
09:62:7b:2b:44:84:0e:ed:92:62:a6:69:b6:23:dc:ef:8c:29:
d4:15:31:95:87:55:32:a1:c9:43:b5:38:71:ad:81:cb:32:91:
a8:24:45:03:9c:67:f5:4e:4c:d3:ac:96:0c:0e:7f:aa:dc:4e:
c4:2d:46:f9:06:3f:f7:47:3e:fa:5e:c1:16:bb:d6:6c:99:ca:
f7:17:2a:ff:de:05:fa:49:a6:a9:52:d8:b8:73:67:c1:5f:1c:
96:e1:19:cc:39:cf:6e:3e:0c:d4:01:9a:bb:ed:fa:43:f1:2d:
5b:04:91:77:86:79:ea:24:e3:19:cd:b4:67:43:5d:16:83:78:
3e:6d:28:85:af:4f:d1:55:bb:24:8a:9b:f6:75:b9:c4:18:2e:
a6:38:25:fa:0e:10:1b:97:6a:4a:fa:ae:40:5f:04:9c:28:b3:
aa:1f:db:86:46:b6:93:5f:d7:12:8f:48:f0:d6:9d:e4:97:63:
20:43:20:3d:6a:44:5f:5e:ae:de:43:df:ac:7f:10:ee:00:49:
a2:3a:98:ef:7e:25:87:26:7d:bc:4c:e0:64:ac:1e:9d:e5:d5:
94:38:a8:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:01:47 2025 by rpki-client