Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/e0ed97-3944-4690-8918-e04a9e705ca2/1/7Xwpfny9_BGWdofGN_Q1TvJEmuI.roa
File: 7Xwpfny9_BGWdofGN_Q1TvJEmuI.roa (raw, json)
Hash identifier: Hsf/1MUSuLTq+HeGToAjlH2E84PAXGJDDb00msUDEik=
Subject key identifier: ED:7C:29:7E:7C:BD:FC:11:96:76:87:C6:37:F4:35:4E:F2:44:9A:E2
Certificate issuer: /CN=0ac03b130a07e030b083c8a1aabbf5a15c1b0640
Certificate serial: 018571CC288CF147AEDAB854F243A42A0147
Authority key identifier: 0A:C0:3B:13:0A:07:E0:30:B0:83:C8:A1:AA:BB:F5:A1:5C:1B:06:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CsA7EwoH4DCwg8ihqrv1oVwbBkA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/e0ed97-3944-4690-8918-e04a9e705ca2/1/7Xwpfny9_BGWdofGN_Q1TvJEmuI.roa
Signing time: Mon 02 Jan 2023 09:24:43 +0000
ROA not before: Mon 02 Jan 2023 09:24:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49453
IP address blocks: 193.163.92.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:cc:28:8c:f1:47:ae:da:b8:54:f2:43:a4:2a:01:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ac03b130a07e030b083c8a1aabbf5a15c1b0640
Validity
Not Before: Jan 2 09:24:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ed7c297e7cbdfc11967687c637f4354ef2449ae2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:47:61:ae:5a:3a:38:d0:63:11:e3:a9:b9:d4:
07:13:47:fd:40:79:e0:1c:20:31:38:95:85:b5:8b:
18:44:e7:51:3f:74:87:80:b6:2d:18:09:5b:10:6c:
e8:6c:bf:1c:dc:92:95:d3:47:cf:e6:ff:08:8d:3c:
b8:2a:ff:c6:9a:dd:71:cb:03:8d:ef:a4:7e:04:af:
0b:94:67:73:f1:1d:05:78:3c:cf:49:8f:a9:3d:e0:
f1:18:eb:fe:02:72:28:1d:e7:aa:95:4c:78:aa:ec:
be:40:3c:31:ff:6c:ce:36:5c:5c:c9:e7:9d:ce:3f:
ee:73:ed:36:9b:9a:98:98:5b:52:52:0d:55:4c:e3:
df:e4:af:37:97:c5:93:02:9d:0b:00:bf:f4:91:a8:
35:cb:b9:93:c0:be:f4:1f:b3:e4:be:fc:c6:b2:2b:
fa:44:b9:d4:bb:63:ea:3c:0a:65:00:c5:96:59:ef:
fe:07:4f:38:3b:4b:00:b8:60:f1:f4:f9:c6:51:8c:
22:17:08:e2:f1:d8:ab:7c:6c:e9:b6:e2:91:3a:86:
c6:07:c2:90:ab:3c:7b:da:b9:3c:6c:29:a3:ea:aa:
68:00:b6:2c:50:7b:be:7e:7f:80:fd:94:42:2d:d7:
6d:04:d6:cc:44:44:18:66:0a:9b:ee:7c:70:65:77:
05:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:7C:29:7E:7C:BD:FC:11:96:76:87:C6:37:F4:35:4E:F2:44:9A:E2
X509v3 Authority Key Identifier:
keyid:0A:C0:3B:13:0A:07:E0:30:B0:83:C8:A1:AA:BB:F5:A1:5C:1B:06:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CsA7EwoH4DCwg8ihqrv1oVwbBkA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/e0ed97-3944-4690-8918-e04a9e705ca2/1/7Xwpfny9_BGWdofGN_Q1TvJEmuI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/e0ed97-3944-4690-8918-e04a9e705ca2/1/CsA7EwoH4DCwg8ihqrv1oVwbBkA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.163.92.0/24
Signature Algorithm: sha256WithRSAEncryption
c6:cf:a4:ad:dd:3f:15:2d:79:7a:de:81:81:a9:ff:2d:28:7a:
b0:60:a4:19:ca:08:be:6b:0e:f2:18:db:0a:a1:10:3b:92:76:
38:36:e1:1b:67:07:b7:10:b8:41:3d:fd:76:33:da:73:b8:05:
b6:b8:cd:8c:b6:d4:fd:48:79:98:3b:66:86:9f:29:3c:91:de:
72:2c:e0:36:c2:b0:45:1a:70:29:6e:dd:2a:2d:86:bb:8f:c1:
ed:14:34:88:bb:ed:f0:75:52:21:d4:b6:a3:89:19:75:84:30:
2a:a1:30:ba:a7:78:a9:a7:34:b7:9a:c2:5d:98:d9:85:35:cd:
27:1b:99:d9:b9:2f:22:33:eb:6e:ec:f8:4d:09:38:26:3d:b5:
7f:18:3a:3c:e1:65:35:e5:18:58:c1:0c:5d:6d:21:7a:7a:eb:
ce:b4:19:b8:f4:71:f6:e8:94:73:ab:f2:8d:67:e4:e4:f3:8e:
5a:fe:4c:32:2b:bf:38:bc:a6:19:96:c0:d3:40:c0:f5:3a:2b:
d7:74:42:d9:74:a0:cd:50:ab:48:8f:4d:c8:34:2c:eb:de:01:
f4:b4:91:bc:a9:32:e8:7b:2d:c5:fa:a4:7f:d6:50:a7:b8:3d:
15:4c:57:1e:3e:96:0e:57:4b:22:45:fc:7d:3a:03:55:23:ca:
33:73:b2:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:57:51 2025 by rpki-client