Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/1face1-9e28-4d89-bf52-91795319845c/1/bNgvelwVPVFr3h5RMUdr0LrSObg.roa
File: bNgvelwVPVFr3h5RMUdr0LrSObg.roa (raw, json)
Hash identifier: 8+lwoJWYw+/prpcpMbrRUmfEGjzLktOqFPr4MMdHS+M=
Subject key identifier: 6C:D8:2F:7A:5C:15:3D:51:6B:DE:1E:51:31:47:6B:D0:BA:D2:39:B8
Certificate issuer: /CN=8336ca151ed4c323d498f06dd7c5ae394ceac59f
Certificate serial: 01942368EBD433D1C98F2E0316400997D0A6
Authority key identifier: 83:36:CA:15:1E:D4:C3:23:D4:98:F0:6D:D7:C5:AE:39:4C:EA:C5:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gzbKFR7UwyPUmPBt18WuOUzqxZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/1face1-9e28-4d89-bf52-91795319845c/1/bNgvelwVPVFr3h5RMUdr0LrSObg.roa
Signing time: Wed 01 Jan 2025 19:47:46 +0000
ROA not before: Wed 01 Jan 2025 19:47:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210790
IP address blocks: 193.3.0.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:68:eb:d4:33:d1:c9:8f:2e:03:16:40:09:97:d0:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8336ca151ed4c323d498f06dd7c5ae394ceac59f
Validity
Not Before: Jan 1 19:47:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6cd82f7a5c153d516bde1e5131476bd0bad239b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:8d:7f:72:9a:7e:74:9e:e3:d5:4f:51:61:dc:
37:4c:d0:15:6c:5b:ee:79:bd:3f:6c:78:3e:80:5f:
48:f7:e9:cf:86:70:c1:63:08:90:b5:bc:b9:ec:d0:
de:28:54:83:51:24:7b:97:7f:58:1d:af:c5:64:8d:
99:4c:ca:68:c8:91:cc:ab:cc:3a:26:4a:42:3a:26:
ed:cb:3a:1e:ad:b4:0f:1e:17:ad:52:02:fc:a8:ad:
68:a3:64:5d:7d:43:79:07:5e:11:01:7b:2f:0a:10:
4b:9f:94:cd:94:c3:4a:22:96:32:93:b1:64:33:4e:
8a:a8:72:8f:cd:26:ae:28:ff:ce:d4:93:4a:67:6d:
da:ab:40:8a:f4:70:57:e6:aa:89:bc:d0:4d:72:0f:
fc:30:46:a0:75:97:54:01:0b:08:9d:6c:09:ac:71:
bf:f8:1d:da:f2:15:f4:1a:11:a1:59:6b:fc:cc:b0:
61:30:5f:8b:09:69:eb:30:24:6c:84:95:6d:8a:06:
17:3e:3e:8f:bb:35:48:82:96:0d:2a:b4:06:33:4b:
48:85:72:69:8f:e2:2f:02:0b:16:53:ee:49:12:b9:
eb:77:db:7c:73:6f:79:67:ba:79:55:09:14:e3:3d:
d2:48:73:e2:a0:8b:dd:9e:d8:62:68:de:58:a2:5d:
47:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:D8:2F:7A:5C:15:3D:51:6B:DE:1E:51:31:47:6B:D0:BA:D2:39:B8
X509v3 Authority Key Identifier:
keyid:83:36:CA:15:1E:D4:C3:23:D4:98:F0:6D:D7:C5:AE:39:4C:EA:C5:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gzbKFR7UwyPUmPBt18WuOUzqxZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/1face1-9e28-4d89-bf52-91795319845c/1/bNgvelwVPVFr3h5RMUdr0LrSObg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/1face1-9e28-4d89-bf52-91795319845c/1/gzbKFR7UwyPUmPBt18WuOUzqxZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.3.0.0/24
Signature Algorithm: sha256WithRSAEncryption
20:fa:06:c0:a1:61:67:2d:96:85:8c:d7:43:73:f1:63:ac:bc:
f1:33:86:2a:ca:b8:34:d0:3c:97:c1:2a:78:ea:39:d1:b3:32:
92:43:79:54:5e:4a:19:47:9b:04:08:a9:f8:d6:63:18:e1:87:
34:dd:43:5e:5e:2d:ca:93:60:9a:cd:dd:13:29:28:91:40:83:
9b:71:78:f9:d5:11:48:03:70:1b:00:3c:68:02:27:10:16:a1:
a7:3b:79:25:65:8e:20:f5:26:ec:43:c5:fa:35:10:c6:1d:d3:
ba:bf:cd:91:64:fa:09:6b:d6:25:a8:92:b3:7a:24:ec:f7:a4:
1c:2b:26:d2:7f:a4:98:ee:0a:82:79:37:38:05:c8:5b:dc:9b:
08:7a:21:dc:5b:d0:71:7b:f9:39:e9:74:76:e2:94:38:b4:e3:
50:27:d1:a3:2e:97:fc:79:53:18:97:d0:1e:a9:f3:07:c9:34:
e3:4a:9f:3d:20:a5:b2:f8:94:ac:56:71:10:71:98:0a:1d:57:
62:d3:c3:58:8f:3f:ea:26:f8:52:71:73:36:48:b9:4c:50:64:
fd:47:cb:8c:a7:8e:43:82:aa:1a:71:65:58:0b:0b:fe:ae:3e:
c4:c2:43:73:eb:6e:2d:62:bf:6e:ef:c3:87:03:43:fe:74:75:
f4:b9:74:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:00:49 2025 by rpki-client