Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/aa4f40-d4a2-4a40-bac4-46610094ef9c/1/ebOFsIG1OGOgim4920o9LqO-BlI.roa
File: ebOFsIG1OGOgim4920o9LqO-BlI.roa (raw, json)
Hash identifier: YjDFvQyjZCwRfXdi9F2MmSPn043cUQ2H08FDCmY2b0k=
Subject key identifier: 79:B3:85:B0:81:B5:38:63:A0:8A:6E:3D:DB:4A:3D:2E:A3:BE:06:52
Certificate issuer: /CN=8e5c18bfb9a5395dceab8cdd58bf1a6b993b1bd0
Certificate serial: 018A031F1AE419DCDA31ABC9F5BED23C97EB
Authority key identifier: 8E:5C:18:BF:B9:A5:39:5D:CE:AB:8C:DD:58:BF:1A:6B:99:3B:1B:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jlwYv7mlOV3Oq4zdWL8aa5k7G9A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/aa4f40-d4a2-4a40-bac4-46610094ef9c/1/ebOFsIG1OGOgim4920o9LqO-BlI.roa
Signing time: Thu 17 Aug 2023 10:51:24 +0000
ROA not before: Thu 17 Aug 2023 10:51:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43581
IP address blocks: 193.17.92.0/24 maxlen: 24
2a11:1940::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:03:1f:1a:e4:19:dc:da:31:ab:c9:f5:be:d2:3c:97:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e5c18bfb9a5395dceab8cdd58bf1a6b993b1bd0
Validity
Not Before: Aug 17 10:51:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=79b385b081b53863a08a6e3ddb4a3d2ea3be0652
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:b4:c7:11:d9:06:ae:00:6e:76:1a:a4:a9:50:
03:42:85:22:76:3c:4d:0a:a2:10:27:13:ad:7e:6d:
f9:6c:25:ad:12:b3:1e:a0:35:00:40:6b:d9:2d:90:
58:36:c2:c5:c4:49:40:ab:2f:d8:fc:de:ec:a8:d4:
e9:de:a0:81:30:5e:5a:02:dc:1b:10:42:0c:10:b6:
66:3c:f5:dd:14:ca:f0:64:fa:45:ab:eb:b0:82:bc:
af:b0:d8:91:19:02:fd:00:74:70:a5:50:d3:b7:88:
02:74:4b:e8:be:d2:17:3f:f2:79:d4:bc:27:02:a6:
4d:76:01:e1:f2:65:e4:1b:f4:31:8c:42:19:18:8b:
bf:e5:09:62:4f:1e:aa:99:50:70:1b:68:ac:41:01:
2f:27:89:d3:1e:65:60:b1:12:f9:3c:cb:0e:ee:f0:
21:28:60:e6:64:a4:64:d1:ee:c1:8e:b0:3c:1d:48:
a8:34:95:79:c8:14:05:23:a9:90:fe:31:31:21:51:
d7:03:87:77:b8:29:ae:74:00:1c:f7:9a:72:7d:a9:
43:ee:d7:32:7a:90:46:ba:4d:b8:60:eb:b7:26:32:
16:5e:84:61:a3:9b:4e:95:f8:c3:0c:d8:32:cd:fe:
ac:ee:80:b7:86:eb:04:b4:8a:67:5f:b6:fd:f8:ea:
19:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:B3:85:B0:81:B5:38:63:A0:8A:6E:3D:DB:4A:3D:2E:A3:BE:06:52
X509v3 Authority Key Identifier:
keyid:8E:5C:18:BF:B9:A5:39:5D:CE:AB:8C:DD:58:BF:1A:6B:99:3B:1B:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jlwYv7mlOV3Oq4zdWL8aa5k7G9A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/aa4f40-d4a2-4a40-bac4-46610094ef9c/1/ebOFsIG1OGOgim4920o9LqO-BlI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/aa4f40-d4a2-4a40-bac4-46610094ef9c/1/jlwYv7mlOV3Oq4zdWL8aa5k7G9A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.17.92.0/24
IPv6:
2a11:1940::/29
Signature Algorithm: sha256WithRSAEncryption
4d:1d:95:2f:c2:dd:c0:73:aa:ca:23:62:33:fa:11:0d:fe:8a:
1d:d0:bc:6b:85:e7:d3:39:2c:d8:0e:e0:67:7a:55:5e:9c:bc:
05:37:76:99:07:a7:a6:bb:7f:ab:7e:3a:7d:06:29:8b:3e:71:
9b:7e:06:f1:97:8b:48:a8:f4:f5:52:14:29:c9:91:c2:45:42:
aa:be:1d:ef:0e:1e:4a:ec:98:ac:3b:e3:ae:1a:4c:e6:4e:e4:
b7:1d:3b:a8:b4:dd:50:80:53:45:57:67:81:95:c4:0f:39:a5:
7d:ec:4d:63:f2:e3:98:f9:bd:73:c9:02:14:c3:1b:55:58:4a:
6b:63:63:ca:a8:ff:11:67:34:cb:c9:bf:d8:3b:69:91:67:f2:
ec:c7:06:57:a6:6b:7d:ef:f3:0e:03:3b:25:e3:5b:b8:44:fd:
fc:f9:b1:a0:36:35:29:bf:e1:44:42:f9:61:1b:4e:af:9c:2b:
44:73:d6:05:e1:93:81:5a:ff:b6:fd:e3:f8:fd:2c:14:9d:81:
2f:0f:eb:6a:b0:e0:c5:8e:0e:ea:ff:7b:ac:12:91:2f:8b:8f:
0c:ea:58:00:60:86:85:d2:ce:15:69:5f:8b:b3:d4:f5:ca:2e:
e8:04:63:01:18:4b:26:13:c5:00:b7:22:6f:46:14:5d:90:2b:
d3:79:d7:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:13:35 2025 by rpki-client