Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/SSjFs2aHA6qQi9kXITgdvJ2J93s.roa
File: SSjFs2aHA6qQi9kXITgdvJ2J93s.roa (raw, json)
Hash identifier: tGyDippNG8D/Q3eggz2kLEFyIa6TtKflqInJpENZHmo=
Subject key identifier: 49:28:C5:B3:66:87:03:AA:90:8B:D9:17:21:38:1D:BC:9D:89:F7:7B
Certificate issuer: /CN=44fc887c977393575de6257e75fa99cde2037c6c
Certificate serial: 0190C98460E56088CF6C1AA83CAE14AA1246
Authority key identifier: 44:FC:88:7C:97:73:93:57:5D:E6:25:7E:75:FA:99:CD:E2:03:7C:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RPyIfJdzk1dd5iV-dfqZzeIDfGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/SSjFs2aHA6qQi9kXITgdvJ2J93s.roa
Signing time: Fri 19 Jul 2024 05:43:34 +0000
ROA not before: Fri 19 Jul 2024 05:43:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 193.43.138.0/24 maxlen: 24
193.43.142.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:c9:84:60:e5:60:88:cf:6c:1a:a8:3c:ae:14:aa:12:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44fc887c977393575de6257e75fa99cde2037c6c
Validity
Not Before: Jul 19 05:43:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4928c5b3668703aa908bd91721381dbc9d89f77b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:c9:ea:47:38:5f:26:cf:5a:1b:16:7d:90:54:
10:cc:48:ff:07:d2:cb:d2:bb:c4:3b:25:ac:24:16:
b5:ad:a6:6f:15:f1:62:ec:e8:9d:57:ef:bd:02:1e:
10:73:58:a4:15:4f:79:74:ff:34:1a:d2:fd:b6:7a:
3f:a2:92:af:3e:1b:4b:93:50:bb:ba:08:0c:c5:7d:
c9:fd:f6:0c:cf:3d:61:cf:42:2f:f4:78:56:63:02:
1b:1e:47:ee:fd:62:6f:6d:a9:aa:18:9e:b2:75:46:
7a:c3:cd:f5:95:50:f3:81:16:d6:52:c0:34:6c:c3:
49:24:86:2d:6a:e7:df:10:3b:9b:1f:11:3c:d8:82:
05:0e:ca:92:43:7a:a3:b6:3c:61:01:cf:cf:ee:c1:
72:1d:84:2f:40:1c:0c:2b:ce:a4:31:f0:cf:43:45:
68:5b:ad:79:2a:e8:0e:f9:48:2a:6b:98:dd:70:f8:
64:5b:c2:d0:71:0f:01:42:1c:0c:36:c1:31:16:1d:
a7:83:30:72:3e:0d:03:2a:d6:ea:bc:57:5f:95:90:
ed:86:a0:8b:84:19:fc:c4:5c:c3:2c:0f:a4:3f:62:
63:04:a7:00:b6:a5:04:43:ae:d3:1d:09:02:77:99:
7f:bc:db:2a:fa:c7:80:29:2f:e2:a2:1e:9c:5f:2c:
88:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:28:C5:B3:66:87:03:AA:90:8B:D9:17:21:38:1D:BC:9D:89:F7:7B
X509v3 Authority Key Identifier:
keyid:44:FC:88:7C:97:73:93:57:5D:E6:25:7E:75:FA:99:CD:E2:03:7C:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RPyIfJdzk1dd5iV-dfqZzeIDfGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/SSjFs2aHA6qQi9kXITgdvJ2J93s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.43.138.0/24
193.43.142.0/24
Signature Algorithm: sha256WithRSAEncryption
54:9c:71:4b:99:40:a1:a8:ce:46:40:5b:5a:17:00:61:e7:35:
f8:ce:d2:f5:d1:93:e3:21:02:e9:7c:4e:06:88:ba:b1:60:7a:
8f:e3:22:68:c2:cd:2d:f1:5b:8b:10:dc:93:e5:a8:8b:f0:1b:
92:ae:e4:eb:1d:ff:92:1f:05:22:74:99:ec:d0:82:1d:d4:b8:
73:8c:95:62:48:87:9a:9d:df:dc:1f:be:90:08:d7:6a:17:6e:
02:8d:01:5c:fa:55:b1:dd:e4:11:bd:cb:7e:0e:dd:cb:7c:8e:
28:d4:e6:19:7b:ff:c2:b1:9a:78:75:78:6b:1b:62:17:5b:34:
c2:49:58:f0:87:d7:44:54:c5:3f:49:be:c7:64:b6:15:1f:54:
d0:a8:e0:65:cc:97:9f:2a:11:ec:3e:23:b5:6d:07:23:58:8f:
2d:f6:56:4b:88:dd:8c:3e:c5:33:db:27:d5:aa:6c:f4:b6:e0:
6b:d2:59:ba:be:92:f4:b0:87:77:ff:fc:23:7c:da:3d:0a:43:
c7:2f:5c:87:d0:a8:64:a6:4e:74:ad:36:d9:6f:dc:67:97:cd:
c8:88:5b:14:86:16:37:34:36:03:85:bd:26:4c:d1:6d:31:c8:
93:a0:a3:df:fe:5e:9f:80:47:7c:ed:26:a9:c3:76:f3:2f:2c:
6e:8f:ff:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:30:47 2025 by rpki-client