Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/tNS8wUbAisdXbYEolEz0i9gW2Ic.roa
File: tNS8wUbAisdXbYEolEz0i9gW2Ic.roa (raw, json)
Hash identifier: 4lbzalww/WB1GWB2Fykeys7F4y2S57Pw5NJMyzi/NB4=
Subject key identifier: B4:D4:BC:C1:46:C0:8A:C7:57:6D:81:28:94:4C:F4:8B:D8:16:D8:87
Certificate issuer: /CN=44fc887c977393575de6257e75fa99cde2037c6c
Certificate serial: 019251EB01D053C92E289EE9B7A16A8EB1FA
Authority key identifier: 44:FC:88:7C:97:73:93:57:5D:E6:25:7E:75:FA:99:CD:E2:03:7C:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RPyIfJdzk1dd5iV-dfqZzeIDfGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/tNS8wUbAisdXbYEolEz0i9gW2Ic.roa
Signing time: Thu 03 Oct 2024 10:26:48 +0000
ROA not before: Thu 03 Oct 2024 10:26:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16276
IP address blocks: 193.43.138.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:51:eb:01:d0:53:c9:2e:28:9e:e9:b7:a1:6a:8e:b1:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44fc887c977393575de6257e75fa99cde2037c6c
Validity
Not Before: Oct 3 10:26:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b4d4bcc146c08ac7576d8128944cf48bd816d887
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:9b:73:31:d7:0c:07:61:48:b2:e8:40:ff:02:
72:0d:5e:94:1f:61:b1:a6:32:07:be:44:5f:cb:78:
ba:38:cc:14:86:10:82:c7:d4:08:0c:2b:5a:85:1c:
fc:98:23:77:9a:e9:bc:fd:79:9b:79:7a:37:c8:0b:
59:89:e2:ed:a7:a9:7b:2e:fa:3d:19:09:e9:29:90:
a3:1d:59:18:45:71:37:03:41:97:77:fa:12:8a:10:
6d:50:fa:7c:5a:a0:8e:c8:22:0a:ad:a5:de:8b:97:
a6:cc:87:53:67:1d:64:17:13:ae:51:89:b9:19:a6:
a4:1c:9d:81:d2:7b:83:7a:fe:cd:a6:80:95:db:b7:
81:dc:8d:99:33:4c:39:2a:9f:68:1b:4e:82:cb:59:
fa:fd:89:71:dd:5a:86:a7:5d:d7:9c:75:9c:c7:13:
90:7b:24:1f:0c:69:d3:bb:62:a7:45:0a:05:51:1c:
6a:d7:3f:fc:7e:b3:be:ea:6b:e6:3c:f6:1f:64:1f:
a7:fd:e4:14:fc:b9:4a:c7:87:81:43:93:c0:5b:d8:
8b:3d:e7:15:53:a3:d5:b9:86:5c:b1:d2:14:46:3c:
52:8a:5a:64:8a:d1:f4:28:21:c3:70:cf:e9:bb:d5:
c7:19:09:95:a4:e0:13:e5:5d:95:35:c1:d8:ba:5b:
0a:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:D4:BC:C1:46:C0:8A:C7:57:6D:81:28:94:4C:F4:8B:D8:16:D8:87
X509v3 Authority Key Identifier:
keyid:44:FC:88:7C:97:73:93:57:5D:E6:25:7E:75:FA:99:CD:E2:03:7C:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RPyIfJdzk1dd5iV-dfqZzeIDfGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/tNS8wUbAisdXbYEolEz0i9gW2Ic.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.43.138.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:e4:31:55:ab:79:d7:fd:2d:5e:1a:da:04:9a:ab:40:ff:d8:
19:9b:87:62:b8:a5:d6:6b:c8:d3:e3:61:9d:ea:c0:f0:6b:46:
33:51:60:65:df:4b:20:ed:0b:9c:64:58:e3:4d:7c:30:b7:8b:
d4:99:e8:eb:37:04:0c:08:f2:eb:0d:df:d6:57:87:38:14:5f:
8f:30:c1:b0:55:27:f1:fb:4b:72:97:ea:be:62:67:63:c2:69:
79:26:86:a5:73:48:a5:5d:fe:80:ab:da:06:16:d8:6e:5a:d9:
d2:7d:f9:e1:94:b1:20:37:1e:22:5d:39:52:4d:1f:c6:ff:9b:
f2:da:b2:77:41:39:fd:72:d7:cb:34:37:15:49:b9:32:62:b4:
99:39:54:a7:6f:5f:9e:60:55:f4:63:81:39:69:03:b6:1a:fb:
5f:f2:f3:33:9c:9c:70:44:13:db:b6:36:36:de:6b:87:0b:03:
ce:a1:85:f6:77:b5:07:64:86:75:25:cc:5e:c5:2c:49:82:e0:
0c:ee:79:5f:b4:3e:77:b2:23:0a:d1:7e:06:47:49:45:9d:39:
b4:6e:56:df:f7:3f:ff:c9:82:f3:93:6f:e5:87:6b:65:29:14:
9a:be:82:5c:67:29:86:c0:3e:9f:a8:7a:c6:6b:47:5e:56:69:
14:84:58:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:29:14 2025 by rpki-client