Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/533596-2176-47d8-bbda-48a70d3f72f8/1/oF4oDEYDH18AQXb2hFw0ME0A9wU.roa
File: oF4oDEYDH18AQXb2hFw0ME0A9wU.roa (raw, json)
Hash identifier: JTfQMii4pFWAlavs6KlRPHxk8Q8IE3ymVaJbS7oIXTk=
Subject key identifier: A0:5E:28:0C:46:03:1F:5F:00:41:76:F6:84:5C:34:30:4D:00:F7:05
Certificate issuer: /CN=a53e46ed04730d15c9d74eac410dde9cdc363cf0
Certificate serial: B74550
Authority key identifier: A5:3E:46:ED:04:73:0D:15:C9:D7:4E:AC:41:0D:DE:9C:DC:36:3C:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pT5G7QRzDRXJ106sQQ3enNw2PPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/533596-2176-47d8-bbda-48a70d3f72f8/1/oF4oDEYDH18AQXb2hFw0ME0A9wU.roa
Signing time: Sat 01 Jan 2022 06:06:30 +0000
ROA not before: Sat 01 Jan 2022 06:06:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34471
IP address blocks: 193.111.170.0/23 maxlen: 24
193.111.196.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12010832 (0xb74550)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a53e46ed04730d15c9d74eac410dde9cdc363cf0
Validity
Not Before: Jan 1 06:06:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a05e280c46031f5f004176f6845c34304d00f705
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:26:df:5a:29:94:c4:89:2a:36:19:eb:e5:4f:
33:2f:95:b1:cd:2b:0a:17:13:0c:cb:44:47:a1:54:
ff:5d:f1:61:c2:e0:7b:6b:cc:3a:20:ab:92:82:48:
1a:85:75:8f:08:6e:8d:17:e8:89:00:d9:20:30:91:
e8:aa:ee:18:5b:dd:a4:28:9f:57:af:7d:77:f6:45:
a2:21:4c:0f:b3:29:8d:b6:a0:93:48:45:2f:10:ba:
d8:68:39:a2:ed:d2:50:ab:01:31:0c:fa:dd:2b:84:
45:dd:c0:2c:6a:30:49:7b:d6:85:1d:93:df:f6:2c:
d7:7c:22:03:d9:32:e3:62:95:56:81:c0:a2:eb:99:
52:68:da:19:bf:51:5f:64:81:d2:fb:02:d9:51:18:
44:c8:47:fa:d7:71:6a:46:1b:f1:b5:31:d4:05:9e:
98:7c:bc:6f:21:42:71:cd:ec:07:34:4d:be:25:6c:
4e:37:87:79:4f:a8:27:71:82:b1:dc:56:0e:2e:ff:
e9:a2:3f:93:20:d6:c8:f3:e2:09:ab:83:e3:45:3b:
31:02:25:97:ff:0b:65:f4:f4:a8:64:3b:f7:61:b6:
eb:02:a0:52:6b:15:a0:b5:e9:ac:75:91:85:5d:3a:
b3:37:88:43:87:89:fb:f0:a4:01:3f:1b:0c:ed:be:
4e:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:5E:28:0C:46:03:1F:5F:00:41:76:F6:84:5C:34:30:4D:00:F7:05
X509v3 Authority Key Identifier:
keyid:A5:3E:46:ED:04:73:0D:15:C9:D7:4E:AC:41:0D:DE:9C:DC:36:3C:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pT5G7QRzDRXJ106sQQ3enNw2PPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/533596-2176-47d8-bbda-48a70d3f72f8/1/oF4oDEYDH18AQXb2hFw0ME0A9wU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/533596-2176-47d8-bbda-48a70d3f72f8/1/pT5G7QRzDRXJ106sQQ3enNw2PPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.111.170.0/23
193.111.196.0/23
Signature Algorithm: sha256WithRSAEncryption
37:8d:5b:52:ea:5f:88:e4:fa:7e:5e:fa:f7:fb:25:91:92:30:
ab:19:ce:59:05:74:29:0a:7f:4e:fd:cd:ea:bd:fe:00:3f:34:
bd:4f:c0:75:cc:a5:d0:49:63:00:58:23:3a:bc:cf:46:18:8b:
d0:76:3b:51:51:10:31:7c:bb:b4:56:c4:91:46:80:6d:a0:70:
7a:9a:71:7e:d1:fc:8b:3c:80:e4:05:a4:00:1c:2d:f3:78:c0:
5e:0f:f6:51:e8:7f:80:da:d3:f2:63:ae:32:83:c0:60:1c:68:
2c:e7:8e:9f:03:34:44:1f:36:6e:74:e3:84:3b:ac:03:f7:d4:
e3:00:b7:6f:af:44:a7:cd:16:30:92:54:5d:39:fa:87:04:a6:
44:ef:18:49:cf:cb:58:d9:c8:5e:96:b3:7d:87:65:1b:a8:6d:
27:1d:a9:19:c5:7c:f7:2f:4d:71:1f:60:d8:ba:c4:4e:f6:da:
a8:75:03:11:79:9d:3e:b5:87:e0:83:a1:c3:ff:29:25:69:97:
a9:f2:dd:96:d1:8f:9d:83:42:d5:13:65:d6:f4:46:27:e3:15:
24:2c:35:b9:50:d9:37:fc:96:58:b7:52:d1:55:66:48:61:5e:
02:cf:ec:cc:37:1f:b7:2a:b0:f6:1d:e8:c0:c5:8c:35:85:c4:
eb:5c:3b:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:28:13 2025 by rpki-client