Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0eeb2f-1aa0-4762-b4e8-b59c2ac951cb/1/Vw6CqLQZk9Zy_JCBHVuSF7EBEJ4.roa
File: Vw6CqLQZk9Zy_JCBHVuSF7EBEJ4.roa (raw, json)
Hash identifier: R2qdpiExquzF6ZRLxVQpvIAfIzQdsD6NWPkWP26CN/Y=
Subject key identifier: 57:0E:82:A8:B4:19:93:D6:72:FC:90:81:1D:5B:92:17:B1:01:10:9E
Certificate issuer: /CN=d1d78826e1717ec993eb64dd1187876b065e8f58
Certificate serial: 0195700CB3F7C3C813183EDA0F6982E07C18
Authority key identifier: D1:D7:88:26:E1:71:7E:C9:93:EB:64:DD:11:87:87:6B:06:5E:8F:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0deIJuFxfsmT62TdEYeHawZej1g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/0eeb2f-1aa0-4762-b4e8-b59c2ac951cb/1/Vw6CqLQZk9Zy_JCBHVuSF7EBEJ4.roa
Signing time: Fri 07 Mar 2025 10:00:35 +0000
ROA not before: Fri 07 Mar 2025 10:00:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 19509
IP address blocks: 193.33.112.0/23 maxlen: 23
193.33.112.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:70:0c:b3:f7:c3:c8:13:18:3e:da:0f:69:82:e0:7c:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1d78826e1717ec993eb64dd1187876b065e8f58
Validity
Not Before: Mar 7 10:00:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=570e82a8b41993d672fc90811d5b9217b101109e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:3f:90:ce:6c:bb:81:82:07:bb:4e:40:bf:0c:
76:8c:3f:0e:84:5c:5e:27:44:55:94:09:08:25:b1:
04:4a:d7:24:75:42:ed:34:e4:05:1b:3b:32:49:0c:
8b:55:b7:2c:43:50:5a:12:8e:c3:bb:e8:1b:83:ca:
0a:4e:ad:7c:01:fb:48:2a:2b:22:70:d4:85:4d:d8:
62:e6:2c:76:aa:6f:3d:e4:af:30:9b:c9:b0:a6:27:
ea:1f:ea:43:34:44:72:bd:e3:ff:3e:43:00:c3:1a:
7d:3d:7e:65:ab:f4:59:75:0c:8f:c0:65:29:fe:fe:
11:6e:75:39:a4:ae:7a:78:e3:69:08:e7:ed:a6:01:
26:b5:7d:53:46:7a:4b:76:56:96:42:68:ff:27:3c:
ed:31:26:1a:73:65:b5:9c:d5:a7:60:17:23:19:6b:
16:94:13:dc:2e:da:8b:a5:dd:22:b1:d7:b1:2e:99:
dc:03:84:55:97:4e:21:6c:19:eb:73:f8:5d:07:c8:
ad:be:c2:54:27:ee:27:3f:9d:77:22:58:4a:da:e5:
af:4e:9b:ac:df:f3:8e:54:47:3b:c2:8f:7c:a8:e9:
b6:de:6b:2e:b8:b0:13:5b:46:88:16:0c:5d:a0:76:
1d:7b:9a:cd:8f:bd:95:04:3e:be:2f:45:35:a5:87:
49:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:0E:82:A8:B4:19:93:D6:72:FC:90:81:1D:5B:92:17:B1:01:10:9E
X509v3 Authority Key Identifier:
keyid:D1:D7:88:26:E1:71:7E:C9:93:EB:64:DD:11:87:87:6B:06:5E:8F:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0deIJuFxfsmT62TdEYeHawZej1g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0eeb2f-1aa0-4762-b4e8-b59c2ac951cb/1/Vw6CqLQZk9Zy_JCBHVuSF7EBEJ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0eeb2f-1aa0-4762-b4e8-b59c2ac951cb/1/0deIJuFxfsmT62TdEYeHawZej1g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.33.112.0/23
Signature Algorithm: sha256WithRSAEncryption
38:0f:9e:12:cf:18:f7:71:51:6c:55:35:9b:48:4b:cb:5d:94:
ba:ec:34:41:34:db:b6:36:65:3c:c5:aa:0a:c1:b5:3c:ed:f0:
4b:6b:e1:8b:16:dc:f8:61:61:41:a7:19:49:ef:d6:29:94:0b:
97:f3:7b:d3:13:4c:81:e8:dc:22:02:73:e8:13:7a:6c:f4:48:
bf:47:31:76:96:35:8a:23:05:10:ec:88:ec:72:9c:2f:e0:5e:
2c:9f:f1:50:fb:6a:53:69:cf:ff:3f:31:06:fa:9d:48:a8:e8:
d0:a0:ba:b0:4e:03:af:e0:bc:28:49:47:fb:69:41:22:fb:1f:
7f:b3:5a:ae:fe:34:70:38:90:6a:97:70:78:7a:cd:2b:e6:fe:
5e:be:df:f1:23:21:94:fc:59:e0:20:cf:1c:5e:ce:23:fd:35:
09:bf:8a:0c:2e:cf:1e:0a:47:13:3b:f3:56:f6:ca:b1:ca:6b:
e4:ae:a3:f3:43:8c:bb:90:ff:40:3d:06:4e:da:16:c8:ec:a7:
33:df:19:21:3b:17:4e:3b:cd:b2:c2:0a:84:90:f7:cc:ff:12:
e5:91:90:40:59:6d:f9:b4:3b:50:16:91:d8:b1:1a:c1:ae:47:
7b:f2:2b:da:1d:a5:90:b2:e1:19:75:24:82:e5:7e:05:27:42:
a8:d3:57:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 12:58:33 2025 by rpki-client