Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/289b8d-78de-4160-90d3-61d26603c37c/1/cCgr35XwpirOi5T2NC-QhUoK0mY.roa
File: cCgr35XwpirOi5T2NC-QhUoK0mY.roa (raw, json)
Hash identifier: aPFc2y18XhdFxhdVyRug+HbV1BK/ZT7q4hdqYZuvICQ=
Subject key identifier: 70:28:2B:DF:95:F0:A6:2A:CE:8B:94:F6:34:2F:90:85:4A:0A:D2:66
Certificate issuer: /CN=f638947ddb892f5f3a48a69af97a8fb52103a0d6
Certificate serial: 019423D77F3AB8ACA34AE04746D3A8CA082C
Authority key identifier: F6:38:94:7D:DB:89:2F:5F:3A:48:A6:9A:F9:7A:8F:B5:21:03:A0:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9jiUfduJL186SKaa-XqPtSEDoNY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/289b8d-78de-4160-90d3-61d26603c37c/1/cCgr35XwpirOi5T2NC-QhUoK0mY.roa
Signing time: Wed 01 Jan 2025 21:48:32 +0000
ROA not before: Wed 01 Jan 2025 21:48:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 193.35.157.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:7f:3a:b8:ac:a3:4a:e0:47:46:d3:a8:ca:08:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f638947ddb892f5f3a48a69af97a8fb52103a0d6
Validity
Not Before: Jan 1 21:48:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=70282bdf95f0a62ace8b94f6342f90854a0ad266
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:fc:38:4c:81:02:1a:13:80:ad:1c:4c:20:40:
12:42:0c:c4:33:6f:9c:e8:e7:79:4d:47:22:db:5a:
58:09:23:84:09:bf:0c:39:d2:fd:90:75:de:83:c4:
9b:08:f6:5c:c2:5c:3d:16:2d:27:56:5b:74:24:ea:
1e:e1:6f:68:63:7b:e3:a5:e0:24:a2:5d:dc:13:2e:
a0:ed:0b:ea:23:72:ab:a0:c9:eb:bf:b1:b2:f7:b8:
8b:a9:cb:0e:82:b7:77:47:b8:07:70:ba:a8:df:41:
8d:6f:09:f0:ca:e6:8c:13:f0:4b:26:fe:b3:13:ee:
5b:14:b6:52:ec:db:c9:4a:a7:40:01:dd:49:38:4d:
5a:13:92:4d:bd:2f:89:84:9f:25:a9:29:1d:07:76:
1c:30:57:24:0a:c0:37:56:eb:53:ab:18:77:58:d2:
25:80:04:49:9e:dc:8e:b4:b3:b8:6f:e3:b9:90:74:
a6:a2:3d:40:3c:19:49:e7:c6:e3:23:34:10:06:d4:
c9:04:fb:3b:e8:88:49:3c:8d:fa:5d:46:02:b9:49:
bf:37:a5:40:bd:1c:94:34:42:0f:7c:49:7a:a3:9e:
b3:dd:05:18:62:f1:ce:b1:e7:a3:69:91:bb:b8:5c:
9c:36:f3:c9:7d:0c:ef:c1:b8:38:2c:c4:e9:63:18:
28:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:28:2B:DF:95:F0:A6:2A:CE:8B:94:F6:34:2F:90:85:4A:0A:D2:66
X509v3 Authority Key Identifier:
keyid:F6:38:94:7D:DB:89:2F:5F:3A:48:A6:9A:F9:7A:8F:B5:21:03:A0:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9jiUfduJL186SKaa-XqPtSEDoNY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/289b8d-78de-4160-90d3-61d26603c37c/1/cCgr35XwpirOi5T2NC-QhUoK0mY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/289b8d-78de-4160-90d3-61d26603c37c/1/9jiUfduJL186SKaa-XqPtSEDoNY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.35.157.0/24
Signature Algorithm: sha256WithRSAEncryption
28:c9:ec:f4:ca:f8:ab:cd:80:34:dd:40:65:63:c3:10:81:9c:
c0:95:e0:23:d2:2c:50:7d:9f:b0:a9:5e:2f:91:33:81:5f:5a:
2a:1e:6e:53:30:5d:9c:d5:34:48:be:c6:58:15:37:7b:68:19:
35:70:8e:7b:0d:e2:56:82:2c:3c:f0:d7:d2:b7:4d:7f:e0:17:
6c:16:28:14:ef:c0:67:f9:0b:26:b1:8b:6b:92:38:1d:68:2a:
c6:ca:8c:0a:36:f0:26:00:0e:11:fd:ea:e2:0a:f5:eb:d1:11:
03:85:e6:dd:61:54:a8:92:75:db:54:6a:4b:d4:d3:a8:cc:fe:
93:78:7e:d5:38:78:ac:ea:5c:67:26:99:bb:4b:5b:33:a9:a1:
2b:75:14:8e:2e:92:1e:a7:b1:3f:30:0f:b5:cc:f8:c8:85:f6:
6a:65:b2:ec:db:de:fb:00:89:13:fa:16:c0:c3:57:08:40:75:
4b:86:de:58:ce:03:bc:e9:b9:87:21:3c:33:8d:ef:64:9d:ba:
8f:9e:59:6b:48:64:3a:8d:85:cd:ff:62:16:42:42:89:77:7f:
27:dc:73:22:8a:d5:1c:66:f7:ed:31:54:65:47:91:93:7b:74:
94:5e:d6:89:95:7f:13:ac:b3:45:19:c3:2b:d4:2e:41:89:cd:
2f:ee:23:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:24:24 2025 by rpki-client