Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/5aacf3-bbc9-43c4-86f0-54f6e52f547b/1/b2BAgaG8ZkGeLnckcaFEi0j2mVY.roa
File: b2BAgaG8ZkGeLnckcaFEi0j2mVY.roa (raw, json)
Hash identifier: nqJUbxNd5Cs7qDLe3NFl6lDNgDokBTfNZGlG/zcswzE=
Subject key identifier: 6F:60:40:81:A1:BC:66:41:9E:2E:77:24:71:A1:44:8B:48:F6:99:56
Certificate issuer: /CN=4b23b06d60ec3e76b4920b2b64141fa3af6e5fbb
Certificate serial: 018CC86F25EC4BD9EBE75A1DD59366F9FA34
Authority key identifier: 4B:23:B0:6D:60:EC:3E:76:B4:92:0B:2B:64:14:1F:A3:AF:6E:5F:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SyOwbWDsPna0kgsrZBQfo69uX7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/5aacf3-bbc9-43c4-86f0-54f6e52f547b/1/b2BAgaG8ZkGeLnckcaFEi0j2mVY.roa
Signing time: Tue 02 Jan 2024 04:29:36 +0000
ROA not before: Tue 02 Jan 2024 04:29:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20983
IP address blocks: 193.109.244.0/23 maxlen: 24
195.242.183.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:25:ec:4b:d9:eb:e7:5a:1d:d5:93:66:f9:fa:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b23b06d60ec3e76b4920b2b64141fa3af6e5fbb
Validity
Not Before: Jan 2 04:29:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6f604081a1bc66419e2e772471a1448b48f69956
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e9:72:bf:ca:ad:90:0f:14:cf:96:36:4d:1a:
f6:9a:b4:d3:8a:1a:27:29:0d:da:57:ee:dc:bc:3d:
2d:ef:cc:de:d5:42:c1:b5:aa:8d:54:41:ae:c1:ee:
ff:bd:c8:23:f0:e8:0a:9b:36:26:da:70:7d:dd:d4:
34:ee:ec:a2:ff:b0:23:67:29:17:99:4c:c8:18:42:
27:03:0e:c5:1f:63:93:19:d0:69:18:9a:5d:fa:bb:
3e:86:c2:87:4a:24:25:e4:26:b4:bc:6d:60:4c:9a:
16:5a:4c:b0:0e:bf:06:46:9b:ed:cd:44:f3:42:78:
11:8f:8c:76:9d:73:94:fc:a6:3f:37:ce:d3:4c:f7:
34:e6:c8:a9:81:af:28:dc:e0:89:c2:38:67:af:54:
ac:63:d6:7f:9a:5b:5a:a5:9f:6f:36:d7:90:b5:f0:
e8:37:7b:68:fd:25:9b:7c:7a:f2:5a:9b:ba:de:ab:
55:2e:9a:f6:98:42:b6:c3:53:0a:90:13:24:f4:bc:
24:17:0c:b9:73:7d:10:1b:c3:a8:d0:6f:b6:60:ef:
98:7e:69:6e:4a:83:9d:f9:00:7d:c9:68:1d:c7:89:
27:d8:ed:05:77:20:cf:ef:b3:05:ee:d7:d2:41:46:
fa:92:2a:b2:31:b3:94:13:bd:92:64:cb:8b:32:ad:
d3:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:60:40:81:A1:BC:66:41:9E:2E:77:24:71:A1:44:8B:48:F6:99:56
X509v3 Authority Key Identifier:
keyid:4B:23:B0:6D:60:EC:3E:76:B4:92:0B:2B:64:14:1F:A3:AF:6E:5F:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SyOwbWDsPna0kgsrZBQfo69uX7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/5aacf3-bbc9-43c4-86f0-54f6e52f547b/1/b2BAgaG8ZkGeLnckcaFEi0j2mVY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/5aacf3-bbc9-43c4-86f0-54f6e52f547b/1/SyOwbWDsPna0kgsrZBQfo69uX7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.109.244.0/23
195.242.183.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:1f:06:08:84:d3:57:e5:28:ba:2e:17:93:3b:15:91:a5:97:
99:0a:d7:7a:88:bb:db:a3:38:18:53:ea:3a:2f:f0:46:14:1d:
33:cf:5a:22:a9:c9:05:0b:9f:76:14:39:98:23:a3:26:a9:bb:
6e:e0:56:1f:25:7b:61:41:9a:8d:1b:44:80:38:a1:4b:22:4a:
5e:f1:7e:f1:2c:ff:ad:72:b9:d9:45:5e:16:7b:7b:b3:21:5d:
5e:da:eb:4f:83:94:c9:ee:29:50:af:83:94:c3:fb:30:73:5c:
a2:26:96:2a:08:8a:82:72:dd:c5:22:4b:92:ac:69:e7:01:79:
4c:5b:d4:d5:b8:e2:0d:52:2c:1e:1f:c6:a1:c9:4c:36:67:69:
12:12:c6:9a:8a:3b:57:8e:25:3d:1e:b7:12:98:7e:67:e4:c2:
8a:01:bf:04:b5:a7:95:b9:be:0a:1d:92:3f:b3:b5:60:1b:1b:
af:53:37:50:fe:43:9e:ab:f6:71:e3:a2:07:0f:6e:70:4e:e3:
74:e1:63:a1:24:4e:2c:7f:bd:4d:78:9b:13:ef:8e:36:7e:06:
ac:13:0d:47:2d:96:49:82:1b:a6:6f:64:1a:36:8c:33:f9:01:
9e:b7:5f:f2:f7:e5:40:fb:50:1a:22:14:77:88:fc:5d:8a:0f:
39:78:8d:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:39:37 2025 by rpki-client