Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/dd6518-bf35-4c58-b81b-94b1493df1f2/1/Szhjvm0y4QI0uwIjWJbCdPZPvps.roa
File: Szhjvm0y4QI0uwIjWJbCdPZPvps.roa (raw, json)
Hash identifier: Y0iaHG2LAJbIgjzTxyOFn6Uuz+FyO1yYuNhr0qnz3To=
Subject key identifier: 4B:38:63:BE:6D:32:E1:02:34:BB:02:23:58:96:C2:74:F6:4F:BE:9B
Certificate issuer: /CN=3ca6a9d4b59246b4e33614e1a4b591b6118e8a15
Certificate serial: 01941F8C82EC65AC1F40AE6E8E3C011CBC85
Authority key identifier: 3C:A6:A9:D4:B5:92:46:B4:E3:36:14:E1:A4:B5:91:B6:11:8E:8A:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PKap1LWSRrTjNhThpLWRthGOihU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/dd6518-bf35-4c58-b81b-94b1493df1f2/1/Szhjvm0y4QI0uwIjWJbCdPZPvps.roa
Signing time: Wed 01 Jan 2025 01:48:09 +0000
ROA not before: Wed 01 Jan 2025 01:48:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212404
IP address blocks: 193.163.112.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:82:ec:65:ac:1f:40:ae:6e:8e:3c:01:1c:bc:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ca6a9d4b59246b4e33614e1a4b591b6118e8a15
Validity
Not Before: Jan 1 01:48:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4b3863be6d32e10234bb02235896c274f64fbe9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:0d:a1:d1:69:28:62:77:5a:cc:60:72:1c:c2:
49:b5:92:e3:18:89:6e:ae:9e:c0:03:a9:dd:89:a2:
58:73:23:c6:5f:a0:59:df:2e:bf:23:df:f8:61:18:
54:79:29:5c:d8:36:c0:10:d6:6b:46:aa:46:4b:de:
8b:d0:bb:a2:1a:3a:45:9e:70:6b:e0:84:a6:9c:cb:
ed:8f:be:97:c7:93:97:90:e3:d6:73:90:f5:31:04:
75:ee:6f:33:3a:c3:a0:7a:ba:52:21:f0:ca:d5:4e:
7f:6e:fb:2c:6e:f7:b4:0a:3d:b1:fa:df:92:85:6a:
e0:6d:d6:73:2a:1e:6e:15:99:67:de:d6:0e:04:b4:
36:7d:5f:c5:b9:e4:fe:df:e4:c2:fe:69:8a:5b:91:
f6:f3:36:a5:60:a9:02:59:ab:01:33:7f:ec:58:b3:
f5:fe:c8:2b:69:d4:15:25:b0:24:2e:67:6a:e9:54:
73:5d:42:f4:d2:95:7e:ec:e6:6e:21:9a:73:a0:fb:
70:44:3f:fe:ef:f0:2b:c3:80:83:09:9d:45:2e:c9:
8e:4a:b9:09:6a:7b:1c:27:3e:68:63:e8:eb:fb:bc:
b0:9e:0f:97:4d:f8:b0:f0:0d:50:5f:c6:21:5b:50:
10:1b:17:52:08:93:81:cc:2e:f5:a0:1a:6c:cb:66:
55:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:38:63:BE:6D:32:E1:02:34:BB:02:23:58:96:C2:74:F6:4F:BE:9B
X509v3 Authority Key Identifier:
keyid:3C:A6:A9:D4:B5:92:46:B4:E3:36:14:E1:A4:B5:91:B6:11:8E:8A:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PKap1LWSRrTjNhThpLWRthGOihU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/dd6518-bf35-4c58-b81b-94b1493df1f2/1/Szhjvm0y4QI0uwIjWJbCdPZPvps.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/dd6518-bf35-4c58-b81b-94b1493df1f2/1/PKap1LWSRrTjNhThpLWRthGOihU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.163.112.0/24
Signature Algorithm: sha256WithRSAEncryption
13:51:31:73:73:0e:25:a1:79:2f:e5:f5:34:8d:4f:5a:fd:ca:
e4:11:5d:3f:c9:53:38:fc:40:56:cf:07:7c:5e:23:4c:42:3b:
db:45:51:23:60:52:46:c6:f4:63:d0:6c:fb:6b:25:f1:9e:75:
9a:f8:5e:6c:12:da:03:7a:2f:ae:b2:ae:5d:79:5e:07:54:fc:
c1:65:b5:00:cb:3b:78:18:8b:55:90:02:ba:4a:27:6f:25:50:
82:b3:77:80:a9:3f:a6:d8:08:13:b1:44:fe:32:60:fb:cd:df:
bb:bb:47:2e:f4:87:77:46:d4:33:7f:ac:80:88:09:4b:69:9b:
ac:f8:7b:2e:08:9e:14:cc:fa:0c:ef:ba:3f:dc:92:e9:33:32:
37:9c:5b:da:ca:df:a8:3f:63:9c:3d:46:bc:d7:e7:e9:c3:8f:
1f:7f:55:a6:ca:4d:bf:6a:aa:9d:0c:62:7e:dc:bf:05:0f:28:
d7:e2:d2:3a:52:db:53:ed:2a:33:f7:e5:83:e6:0a:9b:25:1a:
56:18:69:b9:62:69:6e:cf:dc:a9:ee:9e:da:f5:b6:4c:d4:1a:
5e:c4:3e:b4:3f:91:27:49:00:77:4f:f2:b3:49:9a:22:49:f3:
74:95:8d:e5:9b:56:0c:d6:26:de:a9:df:9e:e6:44:30:6e:10:
cd:28:5d:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:53:13 2025 by rpki-client