Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/50b205-8f21-46f5-a3f6-bca0a8f2f78c/1/1JRmPjjw2eEyAEj7-d9EaoFd8tQ.roa
File: 1JRmPjjw2eEyAEj7-d9EaoFd8tQ.roa (raw, json)
Hash identifier: qUFNGxht8SatseV7uTcgdf36n0Wje2HhZXA6lIEPzt8=
Subject key identifier: D4:94:66:3E:38:F0:D9:E1:32:00:48:FB:F9:DF:44:6A:81:5D:F2:D4
Certificate issuer: /CN=c340909aec320a8c2ee1cabce1302cbb7d4e0486
Certificate serial: 019422FBEE84121B458365F56E41EFE493CC
Authority key identifier: C3:40:90:9A:EC:32:0A:8C:2E:E1:CA:BC:E1:30:2C:BB:7D:4E:04:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w0CQmuwyCowu4cq84TAsu31OBIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/50b205-8f21-46f5-a3f6-bca0a8f2f78c/1/1JRmPjjw2eEyAEj7-d9EaoFd8tQ.roa
Signing time: Wed 01 Jan 2025 17:48:43 +0000
ROA not before: Wed 01 Jan 2025 17:48:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204599
IP address blocks: 193.105.18.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:ee:84:12:1b:45:83:65:f5:6e:41:ef:e4:93:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c340909aec320a8c2ee1cabce1302cbb7d4e0486
Validity
Not Before: Jan 1 17:48:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d494663e38f0d9e1320048fbf9df446a815df2d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:74:25:25:4a:8e:28:65:50:d8:8e:f7:b5:f6:
da:74:da:a1:bc:5e:e5:18:df:00:48:fe:01:c4:a0:
cc:57:c2:e9:36:74:b5:73:bb:a3:37:8a:e0:0a:65:
3d:5d:08:d3:23:48:d2:5b:c8:b8:ef:1b:9f:e9:b1:
bf:41:ff:be:2b:55:3c:5d:cf:0d:c9:41:8d:47:c9:
20:a5:95:79:01:fa:5f:58:30:79:c5:59:f4:e8:18:
26:ea:65:59:d9:27:2c:00:74:69:08:4b:73:f4:71:
99:5b:92:9e:0d:9d:4d:76:da:b4:04:df:fc:ba:8a:
ca:3f:fb:f6:9a:80:59:6d:a8:40:1d:63:71:01:ba:
ff:2e:8c:ac:88:8a:4d:8b:68:30:d1:6f:d8:9f:23:
c1:e7:ed:23:40:c0:48:2d:0e:65:15:b2:f5:f1:bb:
2c:2b:91:35:37:82:97:8d:69:fc:e2:f6:5b:fa:87:
5d:c3:ef:ac:35:58:68:c1:d0:e6:ad:b9:18:fb:aa:
95:a2:f0:02:f3:b3:ed:c7:08:8f:ca:77:bb:52:9f:
c8:f7:9a:70:26:d1:c3:f7:06:e9:d4:8a:2e:3c:53:
90:2d:13:59:06:78:80:a3:96:7a:25:1c:82:48:c1:
60:48:b6:a5:31:e7:30:be:0a:f6:a5:5e:b8:ac:5f:
e5:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:94:66:3E:38:F0:D9:E1:32:00:48:FB:F9:DF:44:6A:81:5D:F2:D4
X509v3 Authority Key Identifier:
keyid:C3:40:90:9A:EC:32:0A:8C:2E:E1:CA:BC:E1:30:2C:BB:7D:4E:04:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w0CQmuwyCowu4cq84TAsu31OBIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/50b205-8f21-46f5-a3f6-bca0a8f2f78c/1/1JRmPjjw2eEyAEj7-d9EaoFd8tQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/50b205-8f21-46f5-a3f6-bca0a8f2f78c/1/w0CQmuwyCowu4cq84TAsu31OBIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.105.18.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:aa:44:87:78:99:c6:4e:15:52:dc:82:32:0f:c7:86:b8:34:
9a:5d:bd:b7:11:8a:39:39:bf:ac:64:f1:dd:6a:40:ca:ee:3f:
f9:5e:f2:57:2a:d5:dd:21:26:e3:87:3a:31:4f:e0:5c:1d:d8:
3a:34:c4:e9:96:92:5d:db:fb:1d:c6:51:6c:c5:69:24:05:59:
e1:01:41:cf:ee:ea:fe:cc:cf:ff:53:82:8e:dc:0b:6e:34:2c:
e0:9a:b8:a6:c6:19:aa:3a:00:01:4e:b3:63:20:85:71:c2:80:
42:85:39:19:f3:da:b7:b2:3a:d9:a5:5a:08:08:68:b2:8d:46:
be:78:eb:71:77:02:c2:f1:57:7a:12:dc:0e:a8:ed:43:b8:94:
ca:1c:5f:2e:77:bd:aa:b8:4d:47:75:ed:74:38:47:c7:b0:de:
70:f2:c5:43:1b:3d:9c:06:96:0c:4f:29:45:b0:ec:3d:3e:72:
14:bf:b9:28:cf:01:d6:2a:92:72:c6:a9:2a:e2:49:e2:90:67:
fd:1e:1d:3f:2e:45:a9:a2:0d:c5:d4:39:bd:1f:1e:c8:bf:a8:
14:14:f2:43:02:dc:ea:7b:48:88:27:14:d1:bb:4e:64:80:e0:
6f:bc:94:40:40:22:4d:ff:13:b2:04:c3:c2:11:48:ed:f3:a1:
e1:70:cf:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 17:56:46 2025 by rpki-client