Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/4NbkXu89FXOyQLhXi76KTLRS_8U.roa
File: 4NbkXu89FXOyQLhXi76KTLRS_8U.roa (raw, json)
Hash identifier: /R0anYXR39TgZMh7wTdh79H3PAU+bV4gIhm7ONZyMQ8=
Subject key identifier: E0:D6:E4:5E:EF:3D:15:73:B2:40:B8:57:8B:BE:8A:4C:B4:52:FF:C5
Certificate issuer: /CN=bde636ff523e5f3734227f33c44c2e50ff8d1ee2
Certificate serial: 0194258F19F7AC574DC0C7584481D677B2D1
Authority key identifier: BD:E6:36:FF:52:3E:5F:37:34:22:7F:33:C4:4C:2E:50:FF:8D:1E:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/veY2_1I-Xzc0In8zxEwuUP-NHuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/4NbkXu89FXOyQLhXi76KTLRS_8U.roa
Signing time: Thu 02 Jan 2025 05:48:42 +0000
ROA not before: Thu 02 Jan 2025 05:48:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 33965
IP address blocks: 193.228.197.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:19:f7:ac:57:4d:c0:c7:58:44:81:d6:77:b2:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bde636ff523e5f3734227f33c44c2e50ff8d1ee2
Validity
Not Before: Jan 2 05:48:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e0d6e45eef3d1573b240b8578bbe8a4cb452ffc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:48:41:9c:16:f2:34:c6:82:db:3b:74:18:fa:
d6:e2:4f:22:84:c3:37:14:e6:06:c6:a0:6f:3c:f1:
93:bc:f9:f3:f1:f2:36:3a:c5:78:85:6c:79:48:e1:
cb:bc:a7:55:71:e4:70:dd:27:90:ea:a9:b1:78:35:
c5:30:9a:4d:bb:57:3b:6a:43:c3:cb:ee:27:6c:6f:
66:d4:2b:1a:43:e0:dc:0e:74:8c:b5:28:0b:b4:35:
f8:ef:0c:0c:6b:2c:bd:86:1e:9c:d8:b2:62:45:19:
13:46:44:c8:23:5b:37:56:a1:f9:d7:e2:6e:8b:58:
0f:38:20:6c:f5:b8:1a:80:43:79:95:be:8d:db:3b:
12:5d:b7:4d:a1:9f:28:03:70:d6:af:ff:a6:05:1c:
8c:79:72:80:0f:b5:5d:a9:b8:cd:2e:4d:ee:0a:1e:
9b:b7:78:14:b1:16:69:89:40:aa:73:53:fe:14:77:
5a:51:b9:50:8c:ad:d7:b1:60:0b:92:66:2b:f1:b4:
90:84:e9:c8:70:d5:35:9c:74:e0:2d:c5:8a:e2:73:
36:ba:87:f5:00:fb:2e:ea:c3:fc:7e:95:29:4e:fb:
09:bd:66:9c:f9:e5:3d:12:f8:6b:fe:70:ad:98:71:
20:77:f6:5c:3a:50:f1:e2:bf:15:47:3b:ee:d4:03:
9a:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:D6:E4:5E:EF:3D:15:73:B2:40:B8:57:8B:BE:8A:4C:B4:52:FF:C5
X509v3 Authority Key Identifier:
keyid:BD:E6:36:FF:52:3E:5F:37:34:22:7F:33:C4:4C:2E:50:FF:8D:1E:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/veY2_1I-Xzc0In8zxEwuUP-NHuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/4NbkXu89FXOyQLhXi76KTLRS_8U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/veY2_1I-Xzc0In8zxEwuUP-NHuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.228.197.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:61:f2:f3:ce:99:40:fe:c3:d8:b9:6d:93:79:e4:51:ea:3e:
42:8a:d7:a8:14:00:4a:a1:14:19:e0:d7:a0:82:d6:3f:ac:41:
ea:3f:88:95:03:8d:1e:11:23:a9:1f:83:1e:e4:38:2a:a1:39:
8a:b8:89:b6:d1:3d:5c:51:3e:b2:08:61:16:15:5c:7a:e2:a0:
bd:24:01:b6:89:f2:fa:79:46:35:55:07:39:10:5d:7e:f4:cb:
96:f8:6b:fd:b2:60:c5:76:4e:17:27:a1:34:5f:e2:3f:2a:70:
74:b4:93:43:3c:6f:21:9b:61:f5:31:cd:e4:bc:42:36:b4:f8:
e0:41:73:38:55:d3:1d:88:da:68:55:1c:bb:1d:81:69:54:ae:
ee:38:9b:c7:9d:a8:e4:18:e9:4b:01:e0:03:fa:40:ac:c6:e4:
6c:0f:99:8b:35:3f:89:e5:74:49:b8:78:d2:d0:b9:c5:46:f4:
cf:14:53:aa:fe:12:d5:4a:ff:60:54:24:c4:41:45:d7:02:78:
51:8f:3e:b6:9c:86:f3:16:2e:8b:a2:e1:0f:52:b4:e8:87:d0:
60:01:81:50:bd:f5:8e:6d:17:b1:52:c1:33:77:24:fa:f4:0e:
fd:e7:98:07:05:f0:64:b7:7f:97:6d:a5:f9:aa:aa:83:ff:2c:
90:b3:93:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:04:05 2025 by rpki-client