Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/e0ed97-3944-4690-8918-e04a9e705ca2/1/X7lUVnnI6AzFzXK_zjdFIpWFrQY.roa
File: X7lUVnnI6AzFzXK_zjdFIpWFrQY.roa (raw, json)
Hash identifier: /XtQLTMU6qa2I03wRnMDyZ6KPA+RzqQSkxNk1owRazg=
Subject key identifier: 5F:B9:54:56:79:C8:E8:0C:C5:CD:72:BF:CE:37:45:22:95:85:AD:06
Certificate issuer: /CN=0ac03b130a07e030b083c8a1aabbf5a15c1b0640
Certificate serial: 0188916D30A2AE5A8BB68EE3AA69BE685E94
Authority key identifier: 0A:C0:3B:13:0A:07:E0:30:B0:83:C8:A1:AA:BB:F5:A1:5C:1B:06:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CsA7EwoH4DCwg8ihqrv1oVwbBkA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/e0ed97-3944-4690-8918-e04a9e705ca2/1/X7lUVnnI6AzFzXK_zjdFIpWFrQY.roa
Signing time: Tue 06 Jun 2023 15:57:12 +0000
ROA not before: Tue 06 Jun 2023 15:57:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51765
IP address blocks: 193.163.92.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:91:6d:30:a2:ae:5a:8b:b6:8e:e3:aa:69:be:68:5e:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ac03b130a07e030b083c8a1aabbf5a15c1b0640
Validity
Not Before: Jun 6 15:57:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5fb9545679c8e80cc5cd72bfce3745229585ad06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:11:ca:c4:49:68:c9:9f:99:48:a8:4d:89:64:
04:91:26:ee:7d:c4:5c:61:42:b5:1d:5c:a8:89:6b:
7e:06:07:94:46:ab:a7:26:23:81:8a:7e:d9:02:86:
00:75:e3:8c:70:dc:89:67:6d:59:35:f7:59:a6:09:
4e:a5:18:2f:c2:b8:c9:75:01:25:a0:8e:4d:3a:83:
7c:e4:48:3b:5c:14:8e:7f:21:6a:b3:b4:27:a1:a6:
4f:b2:93:4b:a4:9e:0a:12:d6:52:91:8b:8d:fd:81:
4d:0f:92:dc:a7:33:b7:fb:b1:a0:6e:8f:f6:29:ab:
fb:57:27:8c:cd:8d:ad:94:a1:b8:64:2a:f6:5c:03:
fb:d4:75:1d:d6:0b:49:49:5b:90:22:cc:1f:87:d2:
27:88:4c:87:9d:5f:84:16:45:5a:9e:33:fa:76:02:
89:d0:15:80:58:05:83:b3:63:12:a6:a4:cb:ec:9e:
23:1e:50:e8:8f:4d:6c:76:d3:67:95:26:f1:7b:54:
2d:45:f0:82:64:95:f8:3e:71:20:5b:12:b2:56:b1:
09:96:a3:f7:d5:51:96:af:f4:61:8d:6a:20:c8:43:
ba:4b:ea:89:e1:e0:ee:76:06:64:0d:6b:83:67:ae:
cc:58:1d:9a:9e:44:4d:0c:4e:40:a8:b4:e7:55:6c:
47:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:B9:54:56:79:C8:E8:0C:C5:CD:72:BF:CE:37:45:22:95:85:AD:06
X509v3 Authority Key Identifier:
keyid:0A:C0:3B:13:0A:07:E0:30:B0:83:C8:A1:AA:BB:F5:A1:5C:1B:06:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CsA7EwoH4DCwg8ihqrv1oVwbBkA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/e0ed97-3944-4690-8918-e04a9e705ca2/1/X7lUVnnI6AzFzXK_zjdFIpWFrQY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/e0ed97-3944-4690-8918-e04a9e705ca2/1/CsA7EwoH4DCwg8ihqrv1oVwbBkA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.163.92.0/24
Signature Algorithm: sha256WithRSAEncryption
d3:61:17:d4:78:39:0e:01:18:46:ba:34:2e:58:91:41:63:41:
9d:ec:b4:7e:d5:3e:aa:8b:6e:46:67:40:67:50:e2:78:76:62:
d7:eb:8d:fd:38:e8:76:7a:c8:4b:b9:8f:2c:2b:7e:4d:64:a2:
b5:ab:c7:9f:cb:7d:a0:57:98:6f:cb:d3:48:b0:57:a9:10:6f:
0a:6c:2b:56:83:a2:92:39:bc:dc:f3:18:86:ff:8a:3b:45:e3:
c3:f8:66:87:48:60:69:2d:06:ee:17:ca:8a:9b:5a:e5:39:93:
83:83:88:6b:a1:c8:fd:33:3b:22:a8:c0:70:53:bb:09:d2:ac:
a4:43:b6:46:f9:a8:a6:ca:52:a4:55:0e:a5:24:27:f9:26:db:
6e:ac:ae:b8:88:58:a4:75:02:ac:dc:fe:52:1a:63:86:91:a0:
6f:08:ae:7d:f5:de:f3:12:ec:97:64:00:6c:90:36:5a:2a:12:
04:9a:05:9f:af:68:e4:3b:f5:1c:4f:92:81:93:7c:8c:19:c7:
2f:cb:34:87:d1:09:e8:16:8e:71:6f:07:61:f1:cb:98:12:67:
0a:2e:38:ed:d8:4c:9a:a1:50:6a:f7:7b:a0:ce:0b:66:4c:59:
6e:60:da:3c:3a:c9:1c:66:a4:13:64:3f:ac:e9:ea:ce:15:33:
e9:a0:3f:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:14:32 2025 by rpki-client