Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/584yOVeS4oyabLizAkaG7pPUY5Y.roa
File: 584yOVeS4oyabLizAkaG7pPUY5Y.roa (raw, json)
Hash identifier: fVHqq9WRd9turce9ObKFB2HXSMmM46QztnuoCC2qLk4=
Subject key identifier: E7:CE:32:39:57:92:E2:8C:9A:6C:B8:B3:02:46:86:EE:93:D4:63:96
Certificate issuer: /CN=ba67bff7bad1eb8384b585df7bef1206f7f19f7e
Certificate serial: 0194266C187E7D7058B0EDD90285A8C20499
Authority key identifier: BA:67:BF:F7:BA:D1:EB:83:84:B5:85:DF:7B:EF:12:06:F7:F1:9F:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ume_97rR64OEtYXfe-8SBvfxn34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/584yOVeS4oyabLizAkaG7pPUY5Y.roa
Signing time: Thu 02 Jan 2025 09:50:05 +0000
ROA not before: Thu 02 Jan 2025 09:50:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215140
IP address blocks: 193.22.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:18:7e:7d:70:58:b0:ed:d9:02:85:a8:c2:04:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba67bff7bad1eb8384b585df7bef1206f7f19f7e
Validity
Not Before: Jan 2 09:50:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e7ce32395792e28c9a6cb8b3024686ee93d46396
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:2a:c8:ee:d4:90:d8:2d:81:97:c5:93:70:48:
56:39:08:a1:d6:61:55:b8:0a:d6:25:2d:96:f6:91:
26:c2:11:1a:03:d5:f9:d2:c0:85:95:39:ae:69:ab:
ec:43:ef:f3:26:a6:9b:e4:67:4c:2c:c4:03:72:ed:
01:ae:27:bb:f8:c5:04:4b:01:72:78:6c:79:19:e3:
a9:90:d8:a8:cc:97:32:77:ee:a1:f9:3b:da:97:35:
49:fe:f6:73:a4:d4:46:89:48:35:ee:dd:bf:0f:49:
f1:5a:66:ee:e7:33:ff:5b:43:72:a3:fe:5d:b8:e0:
e0:bc:57:34:81:36:b2:3d:2c:99:50:5b:df:ee:90:
11:d0:e6:11:58:47:09:e9:75:3a:e1:72:3f:37:01:
8a:a7:ab:40:46:ba:79:77:fc:53:38:55:b9:87:92:
1d:2c:79:f7:b0:9d:95:11:ef:01:40:32:b8:6e:1a:
f5:d9:d6:40:0f:9a:7d:f6:e5:49:a1:98:56:b9:51:
8f:50:53:bd:0f:0a:ae:64:65:f9:cd:71:ba:8d:88:
ee:47:d6:23:35:ec:4c:46:4c:1d:11:1c:85:de:29:
20:ae:e9:eb:92:82:9f:af:27:97:8f:af:ef:28:a9:
7e:b5:e7:f1:c0:f2:7d:ef:a6:c9:bb:5f:2d:f0:5d:
ec:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:CE:32:39:57:92:E2:8C:9A:6C:B8:B3:02:46:86:EE:93:D4:63:96
X509v3 Authority Key Identifier:
keyid:BA:67:BF:F7:BA:D1:EB:83:84:B5:85:DF:7B:EF:12:06:F7:F1:9F:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ume_97rR64OEtYXfe-8SBvfxn34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/584yOVeS4oyabLizAkaG7pPUY5Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.22.129.0/24
Signature Algorithm: sha256WithRSAEncryption
37:7d:7c:d9:ef:6b:09:f7:54:53:43:ca:c0:ba:27:3c:27:6d:
81:2d:64:7e:6b:be:8b:74:49:45:72:fe:7f:9c:bb:fa:91:df:
13:ef:4d:9c:af:23:6b:11:02:4e:08:f6:3b:ce:5a:60:eb:a8:
8d:29:b4:7e:71:90:cf:2f:f3:99:fa:95:3c:82:79:9d:50:1e:
3a:09:f1:eb:65:cb:73:59:f3:a8:a2:e3:e7:4a:52:ba:19:58:
79:d2:66:17:54:37:90:0a:d1:81:65:0e:a8:b6:17:ee:43:70:
92:08:a9:fe:cc:a1:66:9a:b6:0e:93:90:0e:e4:a9:30:3e:20:
f5:86:19:e0:58:36:9f:fc:7b:94:77:12:f1:99:54:b0:f6:b9:
f7:97:05:11:5f:7b:da:1a:30:8f:9f:48:5c:3c:2d:ae:2c:f5:
e1:cd:1c:00:db:3a:80:95:e2:eb:b9:4a:6a:e6:a5:4d:52:d8:
0e:2b:b9:69:46:ed:33:d4:f2:22:49:39:05:06:57:c8:b1:1a:
f7:b1:8e:5e:ab:77:7d:30:22:47:14:f4:15:08:36:b7:bf:1b:
f1:a4:1a:27:cd:93:7a:60:e9:35:29:82:b0:2c:e3:cd:75:67:
20:ae:9c:8b:69:d5:f4:63:68:13:a6:99:ba:09:c2:b6:a8:74:
2f:70:2c:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:44:26 2025 by rpki-client