Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/f20d30-0313-419c-8245-6efbc68c79f6/1/R_r3YW1M26CYHk7Kt7Htcpqi9GI.roa
File: R_r3YW1M26CYHk7Kt7Htcpqi9GI.roa (raw, json)
Hash identifier: 3N6ratMGDOSXKGBuWH2MrKooyrqk6ngrLjikbH1TvwA=
Subject key identifier: 47:FA:F7:61:6D:4C:DB:A0:98:1E:4E:CA:B7:B1:ED:72:9A:A2:F4:62
Certificate issuer: /CN=c0ffaf8ccae3639d9748dddcb833cd088938a901
Certificate serial: 018570302A6DAE3BF7A2A293C7F9E8C22E93
Authority key identifier: C0:FF:AF:8C:CA:E3:63:9D:97:48:DD:DC:B8:33:CD:08:89:38:A9:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wP-vjMrjY52XSN3cuDPNCIk4qQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/f20d30-0313-419c-8245-6efbc68c79f6/1/R_r3YW1M26CYHk7Kt7Htcpqi9GI.roa
Signing time: Mon 02 Jan 2023 01:54:42 +0000
ROA not before: Mon 02 Jan 2023 01:54:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 193.163.6.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:30:2a:6d:ae:3b:f7:a2:a2:93:c7:f9:e8:c2:2e:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0ffaf8ccae3639d9748dddcb833cd088938a901
Validity
Not Before: Jan 2 01:54:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=47faf7616d4cdba0981e4ecab7b1ed729aa2f462
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:40:41:49:74:fc:b3:bb:35:14:24:39:90:67:
e2:6a:f5:81:75:db:3f:ef:8b:41:ed:86:46:58:04:
c2:f3:38:44:d8:18:6c:99:14:2d:af:b7:0a:bd:b7:
dc:ee:bf:fa:da:ac:d1:bc:42:d2:2f:c4:ba:f7:e7:
33:bb:9c:c3:92:a3:e4:3c:63:90:0d:03:a3:72:98:
a5:92:f0:81:24:fe:71:3c:0b:b4:11:00:68:15:44:
c1:08:86:f5:fc:1e:5f:2d:e1:36:ff:ec:a0:81:46:
98:d6:2f:62:b0:5a:58:a4:43:e5:47:52:5f:e1:74:
b9:e1:e1:b0:5f:31:27:0e:2d:92:b7:05:e6:66:cd:
65:f8:6c:b4:a5:63:23:8f:00:a8:03:a4:af:6c:17:
7c:e4:e9:20:3c:59:f7:2b:0b:be:da:c2:1b:ed:67:
05:71:c5:76:25:25:4f:76:d2:a8:0b:17:34:a0:a7:
06:2f:72:19:66:48:0d:b0:da:66:f9:96:a1:20:f9:
81:5a:6c:fa:62:1c:a3:de:8e:f3:a0:64:38:b5:d2:
88:32:fb:59:01:10:6d:6b:b0:eb:94:f9:00:07:43:
d7:3b:9c:9c:6c:16:6e:39:f3:25:5a:39:f7:a7:01:
a7:2e:d1:6d:93:11:28:dc:86:11:69:e5:cb:4b:20:
2f:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:FA:F7:61:6D:4C:DB:A0:98:1E:4E:CA:B7:B1:ED:72:9A:A2:F4:62
X509v3 Authority Key Identifier:
keyid:C0:FF:AF:8C:CA:E3:63:9D:97:48:DD:DC:B8:33:CD:08:89:38:A9:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wP-vjMrjY52XSN3cuDPNCIk4qQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f20d30-0313-419c-8245-6efbc68c79f6/1/R_r3YW1M26CYHk7Kt7Htcpqi9GI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f20d30-0313-419c-8245-6efbc68c79f6/1/wP-vjMrjY52XSN3cuDPNCIk4qQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.163.6.0/24
Signature Algorithm: sha256WithRSAEncryption
95:79:8f:af:21:e6:7b:26:2b:05:e0:de:5c:4e:58:6c:cb:de:
63:fc:2d:dc:1b:42:c6:2d:d2:1b:bf:b2:75:4d:3b:eb:8f:38:
5b:65:43:e3:bc:2f:df:73:61:da:fe:cc:07:30:21:ae:24:6f:
4a:a2:66:17:5c:b3:72:f4:b3:c1:83:ff:30:6a:20:d1:55:71:
7a:78:56:b0:36:5e:19:07:4c:44:cd:ae:cd:2b:26:3e:91:ca:
0d:ac:e7:77:83:81:b1:34:2e:b8:d8:96:c7:4b:e9:f4:f2:25:
a7:46:0e:8a:ae:05:4b:67:f5:71:64:4d:a9:d7:a5:46:2d:c0:
7f:73:89:3f:3d:38:fc:6d:41:1b:4a:ab:fa:2b:df:50:38:12:
85:ba:8b:0a:f8:83:70:e8:55:5b:b8:50:86:9f:50:69:2c:ba:
ad:bf:ea:9c:b7:fb:d5:dc:84:49:75:97:44:60:76:b2:32:e6:
5a:78:3e:88:eb:0e:fa:c4:e9:91:ef:6f:de:36:d2:3b:ed:b6:
18:03:a7:7c:63:df:88:f0:15:e6:f1:db:f2:8a:58:98:c1:99:
d5:63:d3:c8:e5:6a:91:f9:22:0a:8c:1f:25:6e:6a:c6:b5:1b:
1b:2f:32:59:59:e5:9d:58:12:e1:06:e5:64:25:fd:23:6d:ed:
d7:66:a7:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:07:54 2025 by rpki-client