Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/454d35-a80c-4ddb-966d-a0fdf6f2e72d/1/4tZgzewzCNyHfWkcGiARgf-2Q24.roa
File: 4tZgzewzCNyHfWkcGiARgf-2Q24.roa (raw, json)
Hash identifier: TPrXnEOQ+eTvTkhMetwAtP5AXbAXKtvNnWlfJXJ5qXM=
Subject key identifier: E2:D6:60:CD:EC:33:08:DC:87:7D:69:1C:1A:20:11:81:FF:B6:43:6E
Certificate issuer: /CN=8fb17426e77745a6887b6e2c8a110dadb7194bc7
Certificate serial: 0187819DE4ABF3C292A950E4DFA1A013C3B5
Authority key identifier: 8F:B1:74:26:E7:77:45:A6:88:7B:6E:2C:8A:11:0D:AD:B7:19:4B:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j7F0Jud3RaaIe24sihENrbcZS8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/454d35-a80c-4ddb-966d-a0fdf6f2e72d/1/4tZgzewzCNyHfWkcGiARgf-2Q24.roa
Signing time: Fri 14 Apr 2023 21:13:41 +0000
ROA not before: Fri 14 Apr 2023 21:13:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 193.227.246.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:81:9d:e4:ab:f3:c2:92:a9:50:e4:df:a1:a0:13:c3:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fb17426e77745a6887b6e2c8a110dadb7194bc7
Validity
Not Before: Apr 14 21:13:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e2d660cdec3308dc877d691c1a201181ffb6436e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:fd:fa:e4:63:d9:d0:a1:e0:01:4b:7a:87:7a:
e5:66:25:0f:1d:55:ef:43:28:e3:dd:5d:d4:87:e3:
e9:9c:71:f9:c8:2b:43:e3:45:72:a1:15:7e:8a:46:
86:9f:c2:61:e7:a8:2f:1e:43:5b:cb:66:fa:a5:5a:
54:5e:0c:02:37:5f:49:a4:03:51:d2:62:38:77:a0:
56:70:aa:cb:6f:06:33:44:84:ee:ee:d8:17:6c:c7:
f4:26:29:fb:ad:8a:59:21:4f:aa:a8:3b:7d:e5:70:
11:71:cb:b0:29:cb:fa:f6:7d:0c:2b:dd:51:67:aa:
62:40:b2:8d:99:7b:0d:b5:fb:19:93:2d:f1:e8:b7:
e2:90:78:de:0b:db:fa:ff:e5:d9:07:b7:c0:44:14:
de:e9:a1:3c:47:69:6b:5d:6b:d9:6f:42:f7:7c:93:
68:73:f5:d5:4b:84:5a:19:68:42:4b:4d:c9:84:95:
ed:37:29:26:26:fa:ef:32:9a:11:dd:31:85:38:f0:
72:73:a5:8c:1b:b7:ab:02:21:85:aa:62:de:80:c2:
26:f3:81:3f:92:8c:07:cc:29:c4:9f:c3:a7:7a:b1:
2c:eb:11:2e:fe:6e:6b:cf:1f:e7:66:a0:25:19:c7:
c9:7c:ed:ee:3c:09:5b:82:3a:97:a1:a9:49:26:b4:
e9:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:D6:60:CD:EC:33:08:DC:87:7D:69:1C:1A:20:11:81:FF:B6:43:6E
X509v3 Authority Key Identifier:
keyid:8F:B1:74:26:E7:77:45:A6:88:7B:6E:2C:8A:11:0D:AD:B7:19:4B:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j7F0Jud3RaaIe24sihENrbcZS8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/454d35-a80c-4ddb-966d-a0fdf6f2e72d/1/4tZgzewzCNyHfWkcGiARgf-2Q24.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/454d35-a80c-4ddb-966d-a0fdf6f2e72d/1/j7F0Jud3RaaIe24sihENrbcZS8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.227.246.0/23
Signature Algorithm: sha256WithRSAEncryption
08:33:15:06:19:a8:13:a2:f4:6e:d5:a2:6c:35:61:40:ac:6c:
fc:f7:5e:85:95:04:6f:0e:6a:87:99:2a:76:82:67:60:e4:e1:
3c:14:49:78:0b:90:16:28:c5:73:d8:ec:90:32:aa:b0:02:23:
89:e2:b6:ce:97:81:b5:fa:0a:35:fd:21:6b:dc:af:7c:8f:52:
74:3f:e9:ca:b5:09:9e:20:f8:af:60:c4:a4:35:20:c9:98:fe:
84:e9:7d:4b:d4:8c:f0:64:b2:69:e5:07:fb:f7:54:a7:de:be:
7b:83:a6:15:16:94:51:c9:a0:62:f2:93:54:bf:71:f6:a1:f3:
e6:ce:18:0c:01:8f:c8:34:16:89:72:43:78:72:e3:59:2e:ea:
ef:18:65:19:0c:8e:84:af:b9:22:95:ba:eb:17:7e:86:9b:3f:
fe:06:56:dc:45:87:fa:6b:bb:f9:68:2a:ff:1f:ef:94:32:c5:
0c:3f:06:0f:a9:33:06:e1:b7:0c:f7:e1:d3:d1:7e:77:1b:71:
1a:1c:1d:3e:42:d0:b6:93:4e:08:62:31:ca:7e:94:ac:14:a1:
8b:f9:13:d2:62:7c:df:91:d0:65:dc:f9:8c:e9:40:d1:82:99:
b5:ed:06:64:87:21:4a:7f:40:3d:76:39:c7:fa:08:4e:f7:25:
b2:93:1d:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:18:04 2025 by rpki-client