Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/dcf9b7-6d72-475a-baa7-646ee6dfa6b6/1/Vc2DYnTkl8e6VG_7qyXjn1yvUqg.roa
File: Vc2DYnTkl8e6VG_7qyXjn1yvUqg.roa (raw, json)
Hash identifier: S5Mw4KsEyV+yIM/8XssJwS1ndxLAY/uwrPjkANgxyb0=
Subject key identifier: 55:CD:83:62:74:E4:97:C7:BA:54:6F:FB:AB:25:E3:9F:5C:AF:52:A8
Certificate issuer: /CN=fd89381307ae5e3b1ba8658cda7ee2ada4141447
Certificate serial: 019421442726E1D936DE61947DD6A847F82C
Authority key identifier: FD:89:38:13:07:AE:5E:3B:1B:A8:65:8C:DA:7E:E2:AD:A4:14:14:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Yk4EweuXjsbqGWM2n7iraQUFEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/dcf9b7-6d72-475a-baa7-646ee6dfa6b6/1/Vc2DYnTkl8e6VG_7qyXjn1yvUqg.roa
Signing time: Wed 01 Jan 2025 09:48:22 +0000
ROA not before: Wed 01 Jan 2025 09:48:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58349
IP address blocks: 193.42.23.0/24 maxlen: 24
2a10:e5c0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:27:26:e1:d9:36:de:61:94:7d:d6:a8:47:f8:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd89381307ae5e3b1ba8658cda7ee2ada4141447
Validity
Not Before: Jan 1 09:48:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=55cd836274e497c7ba546ffbab25e39f5caf52a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:47:3b:34:34:34:14:99:16:78:91:fa:4a:be:
de:32:bb:0a:ee:3f:d0:35:c0:d2:55:b2:8d:e8:76:
26:00:80:c8:53:82:95:98:58:6c:6f:9f:e1:6b:9d:
ce:89:1a:34:5e:e0:7d:c1:26:8c:af:b6:c2:70:6d:
dd:c5:96:25:2a:3f:58:a5:9d:36:f8:37:cf:6e:f3:
72:ab:9c:4c:ba:f2:b6:77:89:5b:72:03:e1:75:00:
69:ab:ba:c0:41:17:ef:4f:86:af:11:5c:83:43:15:
08:ea:55:b7:79:27:34:ba:ad:d8:3b:0d:c6:00:43:
ee:d6:93:37:ba:fe:b7:57:d9:c4:7e:ca:a6:5f:e6:
23:6a:3a:f2:98:b3:4d:b6:51:50:18:1f:15:6f:4f:
45:d2:41:06:02:a4:6a:b9:2f:4e:f7:da:0d:b5:a7:
d1:68:3c:cf:95:f1:9e:40:cf:21:fe:83:f8:eb:81:
f8:dd:ec:bb:3e:1b:87:2f:9c:e4:16:0d:6c:9f:4e:
c6:a6:9c:37:11:76:ee:e5:52:99:d6:cd:3b:5f:f1:
f9:a7:dc:f9:2c:8a:de:bf:1d:e9:86:74:95:26:65:
fb:93:4f:1a:cc:ac:55:36:42:b1:5c:4d:db:7a:98:
5f:2b:cf:bd:a6:bf:dc:53:87:3a:99:92:48:b9:4d:
5d:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:CD:83:62:74:E4:97:C7:BA:54:6F:FB:AB:25:E3:9F:5C:AF:52:A8
X509v3 Authority Key Identifier:
keyid:FD:89:38:13:07:AE:5E:3B:1B:A8:65:8C:DA:7E:E2:AD:A4:14:14:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Yk4EweuXjsbqGWM2n7iraQUFEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/dcf9b7-6d72-475a-baa7-646ee6dfa6b6/1/Vc2DYnTkl8e6VG_7qyXjn1yvUqg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/dcf9b7-6d72-475a-baa7-646ee6dfa6b6/1/_Yk4EweuXjsbqGWM2n7iraQUFEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.42.23.0/24
IPv6:
2a10:e5c0::/48
Signature Algorithm: sha256WithRSAEncryption
5a:b5:c3:c1:27:6f:e6:66:1e:22:78:d3:77:56:26:5e:0a:40:
94:55:46:eb:37:17:21:f1:0e:43:b0:a2:09:62:2f:d2:94:0d:
32:c2:f9:65:2e:6c:35:30:38:a0:83:6f:0b:93:88:42:06:f8:
1e:dd:97:85:22:b2:90:ad:87:54:52:6a:4a:b3:fa:68:d8:81:
a7:6b:01:81:fc:52:48:f5:75:f6:85:ac:e0:08:89:55:ea:f1:
86:e1:8a:3c:ac:37:58:31:43:88:6e:c4:cd:46:26:72:e3:48:
7d:fd:9a:a2:81:24:d3:04:cd:66:16:96:c3:fa:8b:fe:8c:59:
9b:ab:c2:8a:60:3c:97:0c:e7:81:ed:ed:3c:0e:08:8b:fd:05:
a9:2e:da:3d:fe:e5:d9:69:78:12:fc:57:57:29:db:37:df:9a:
17:de:b6:95:89:2e:1b:e2:e3:06:3b:6e:5c:28:17:fb:36:0d:
32:87:5c:99:57:d7:f7:6c:39:75:8a:a9:1a:65:4d:f9:77:62:
9a:a1:00:bb:0d:a5:a3:8a:f7:f4:15:f7:03:61:fa:7f:bf:00:
1e:3d:c3:e9:62:d3:5a:2b:97:5f:3b:b7:9d:8e:72:08:33:cd:
c3:5f:1e:13:75:a9:b9:5f:84:10:4b:73:0c:93:1f:0d:5c:52:
e9:5c:73:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:53:21 2025 by rpki-client