Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f2700b-9853-4172-9a61-a691448b2ec4/1/D5eci654E86WgV4QeWe0mVBSIQA.roa
File: D5eci654E86WgV4QeWe0mVBSIQA.roa (raw, json)
Hash identifier: 9EDx7nuNfSAVu4VJ7kFsnukQOFsHdN+PaVjNZkLYUS0=
Subject key identifier: 0F:97:9C:8B:AE:78:13:CE:96:81:5E:10:79:67:B4:99:50:52:21:00
Certificate issuer: /CN=a5a975239fdd443b7d3d82e392a9e4ae39218ef6
Certificate serial: 019422FC474F3B350CDE738EAA5C246AFC5E
Authority key identifier: A5:A9:75:23:9F:DD:44:3B:7D:3D:82:E3:92:A9:E4:AE:39:21:8E:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pal1I5_dRDt9PYLjkqnkrjkhjvY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f2700b-9853-4172-9a61-a691448b2ec4/1/D5eci654E86WgV4QeWe0mVBSIQA.roa
Signing time: Wed 01 Jan 2025 17:49:06 +0000
ROA not before: Wed 01 Jan 2025 17:49:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 193.36.66.0/24 maxlen: 24
193.36.67.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:47:4f:3b:35:0c:de:73:8e:aa:5c:24:6a:fc:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5a975239fdd443b7d3d82e392a9e4ae39218ef6
Validity
Not Before: Jan 1 17:49:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0f979c8bae7813ce96815e107967b49950522100
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a9:e6:1d:aa:ed:c2:7c:a8:90:3f:0e:39:89:
88:4a:18:6f:8b:d6:b6:9a:04:1f:1c:4f:d3:05:a9:
20:2f:cf:bc:6d:6e:26:bc:19:cb:ec:33:50:a2:23:
a8:35:26:ed:be:65:96:26:cc:c4:bc:a2:36:a4:81:
73:1e:fb:f5:68:60:44:83:b8:6e:ba:e5:17:bf:75:
6b:3d:dd:89:97:7f:8a:58:00:d2:fc:23:5d:16:bf:
f1:45:6c:87:e6:3a:64:6d:f6:e5:17:68:d2:37:5f:
23:6b:e5:b9:db:1c:0f:50:58:fe:65:17:f8:12:5a:
7e:92:f0:34:d8:86:48:d5:00:1b:1b:da:aa:0e:c4:
c1:0f:f0:c2:1c:fc:a1:66:ad:11:57:d2:3c:14:d2:
6a:3d:c0:76:4e:0b:c2:10:d3:33:6c:a6:d2:1a:0c:
70:65:6d:57:0b:cb:07:e8:84:8d:9d:ba:2a:7e:03:
bd:fc:e2:cd:2b:56:af:95:83:0f:b0:eb:25:2f:96:
ea:7b:bf:f5:6d:4e:42:9b:e5:7f:4d:eb:7e:d6:98:
a7:8e:fe:aa:5c:11:43:88:02:0a:1f:c0:a9:7c:f4:
09:e9:51:f7:84:58:6a:27:54:55:70:b6:47:93:f7:
46:80:06:cd:3b:81:59:87:8d:c8:84:ca:42:ff:d8:
08:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:97:9C:8B:AE:78:13:CE:96:81:5E:10:79:67:B4:99:50:52:21:00
X509v3 Authority Key Identifier:
keyid:A5:A9:75:23:9F:DD:44:3B:7D:3D:82:E3:92:A9:E4:AE:39:21:8E:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pal1I5_dRDt9PYLjkqnkrjkhjvY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f2700b-9853-4172-9a61-a691448b2ec4/1/D5eci654E86WgV4QeWe0mVBSIQA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f2700b-9853-4172-9a61-a691448b2ec4/1/pal1I5_dRDt9PYLjkqnkrjkhjvY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.36.66.0/23
Signature Algorithm: sha256WithRSAEncryption
40:1b:1b:40:e4:cc:05:21:47:5f:ac:d0:28:1e:c5:27:c5:f4:
87:5f:14:88:94:a4:ac:e1:01:19:47:08:4e:e9:c4:bb:7b:d5:
1f:3b:1a:ba:00:08:d0:25:c0:34:ff:26:64:9b:19:04:07:3e:
a3:ba:ba:41:75:a9:7a:8a:32:b0:de:e2:9f:bb:78:fe:86:d3:
26:36:16:12:2d:ea:72:e0:35:c9:80:02:7b:41:f0:a5:aa:3c:
09:e9:bb:23:6a:52:d5:93:5b:53:30:5a:58:3b:02:ec:ae:4b:
77:a4:b2:14:6c:95:f5:39:49:24:b4:dc:7e:8a:46:4e:89:e5:
50:28:12:34:cd:9d:d6:1c:0a:e9:8c:53:9b:f3:72:e7:1f:aa:
e5:5b:3a:74:e4:32:d7:b9:c0:1b:87:bf:f4:7a:e2:29:b8:1f:
db:9a:52:fd:b5:65:f7:67:6c:16:10:20:ce:72:3c:b5:b7:c4:
53:81:95:a2:52:12:c7:02:11:80:36:53:80:3f:75:7e:d7:7a:
65:46:bf:d3:31:f1:c8:29:e4:7b:63:5d:0e:70:45:f6:0f:e7:
c8:11:40:59:ff:fa:d3:a2:fc:57:89:90:45:4e:db:43:bb:bb:
af:c4:c6:a5:f0:f9:54:15:00:d3:64:7e:d6:16:63:ed:20:5f:
ba:cb:51:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 22:04:20 2025 by rpki-client