Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/e43f47-4307-45e1-ac7a-5907735d391c/1/cBXBrcSBLkqpoqJ2hkSKO-3y03g.roa
File: cBXBrcSBLkqpoqJ2hkSKO-3y03g.roa (raw, json)
Hash identifier: TRlnncpswCXCrVUHBAm+UKD9X7LoznLpA9CeMZZ7kV0=
Subject key identifier: 70:15:C1:AD:C4:81:2E:4A:A9:A2:A2:76:86:44:8A:3B:ED:F2:D3:78
Certificate issuer: /CN=13a5bdd2d61eba8efc9ca9cc632d802ae1f3d2c1
Certificate serial: 0185714C1C0E9711F5CC6E43CECF65A7D99C
Authority key identifier: 13:A5:BD:D2:D6:1E:BA:8E:FC:9C:A9:CC:63:2D:80:2A:E1:F3:D2:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E6W90tYeuo78nKnMYy2AKuHz0sE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/e43f47-4307-45e1-ac7a-5907735d391c/1/cBXBrcSBLkqpoqJ2hkSKO-3y03g.roa
Signing time: Mon 02 Jan 2023 07:04:51 +0000
ROA not before: Mon 02 Jan 2023 07:04:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 193.163.95.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:4c:1c:0e:97:11:f5:cc:6e:43:ce:cf:65:a7:d9:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13a5bdd2d61eba8efc9ca9cc632d802ae1f3d2c1
Validity
Not Before: Jan 2 07:04:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7015c1adc4812e4aa9a2a27686448a3bedf2d378
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:89:09:73:c9:e8:ff:cd:d6:de:9f:01:79:26:
86:e4:c8:33:1c:29:07:a5:57:7c:76:78:ce:48:a2:
7c:51:6d:60:63:22:10:b6:5a:39:cd:d1:c2:42:57:
09:5a:6a:17:7c:57:6a:c6:ac:bb:eb:5a:7b:fb:f7:
af:3c:49:5e:64:65:08:bc:b1:79:9a:2f:e4:be:ec:
35:9f:10:02:a2:84:cd:0d:1c:84:57:a9:2c:47:9e:
92:84:91:94:97:09:1a:19:cc:05:01:25:7d:d1:03:
c6:d7:ed:f8:2a:7b:af:24:f5:3d:55:1b:cd:78:9d:
93:92:d3:44:ad:9c:fd:9c:c9:d7:76:f6:17:ee:0f:
a9:aa:56:1b:83:2c:ef:fd:41:bc:dc:d8:b2:2a:20:
69:da:a8:93:7a:17:de:db:19:c5:c3:90:96:0d:a5:
2a:ee:b9:3f:4f:e3:70:60:53:f0:6b:1e:7a:3f:df:
47:20:c8:b1:fb:ca:b0:78:f6:a5:e9:2f:f8:c8:33:
b9:cd:d4:61:aa:d8:6c:ca:22:24:dd:68:b7:f8:f8:
be:ef:82:63:3f:56:f2:e5:36:86:7e:dd:eb:54:57:
f5:a1:17:be:3f:00:f6:87:2b:7e:3b:df:d3:c1:df:
ba:9b:14:44:f9:7e:32:97:03:a9:9a:b4:78:34:e3:
23:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:15:C1:AD:C4:81:2E:4A:A9:A2:A2:76:86:44:8A:3B:ED:F2:D3:78
X509v3 Authority Key Identifier:
keyid:13:A5:BD:D2:D6:1E:BA:8E:FC:9C:A9:CC:63:2D:80:2A:E1:F3:D2:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E6W90tYeuo78nKnMYy2AKuHz0sE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/e43f47-4307-45e1-ac7a-5907735d391c/1/cBXBrcSBLkqpoqJ2hkSKO-3y03g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/e43f47-4307-45e1-ac7a-5907735d391c/1/E6W90tYeuo78nKnMYy2AKuHz0sE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.163.95.0/24
Signature Algorithm: sha256WithRSAEncryption
81:5e:3a:4f:bd:97:7a:c7:6a:78:7c:6e:03:fc:65:f0:d8:bd:
15:21:3c:24:ae:c6:49:2b:cf:a5:b7:9c:e3:f7:36:76:a2:f6:
5e:76:95:5f:35:17:16:80:c4:24:e3:13:81:7c:b3:28:31:6d:
f2:10:46:76:fb:cd:11:d4:36:f9:1c:fb:e5:a9:a7:3f:74:0c:
93:59:76:87:b2:b2:df:ee:be:21:68:b6:e3:85:89:76:fe:c9:
c0:7d:06:cc:31:36:79:be:68:ff:af:06:54:1b:47:58:ef:86:
99:d0:a0:2b:3c:88:41:19:05:8c:8c:6d:58:b5:76:60:12:06:
47:2f:93:e5:f1:35:9a:52:58:34:e5:ef:a2:5c:de:c8:d9:23:
88:e2:b3:9a:89:a2:cb:06:bb:36:60:b6:3d:be:b1:66:c4:fa:
42:73:a8:23:e0:87:07:e0:5c:2d:fd:40:5b:06:59:a8:55:d3:
c7:17:74:9d:be:e0:35:0d:d4:72:b5:01:70:01:c8:ab:94:df:
4a:84:c3:a2:1b:1f:d3:32:f3:86:1b:33:a6:dd:dd:b7:53:df:
4c:a8:9e:d0:95:8e:fb:59:03:04:53:80:5b:50:8e:30:55:1c:
17:dc:b5:4e:91:79:9f:a6:0f:c2:2b:d0:c1:09:54:1f:d6:4a:
0e:35:6c:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:44:35 2025 by rpki-client