Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/52cf99-e798-4cab-a303-a3b06d4e4775/1/K79jAuNL4y91z3YYrxbmadc1H3A.roa
File: K79jAuNL4y91z3YYrxbmadc1H3A.roa (raw, json)
Hash identifier: Ce4Ha+miko3MGw4iNBYx8goUwnDzuBC5+eb8kUBjaGo=
Subject key identifier: 2B:BF:63:02:E3:4B:E3:2F:75:CF:76:18:AF:16:E6:69:D7:35:1F:70
Certificate issuer: /CN=e46a3f838688843758d28057007dc6cd2898ecca
Certificate serial: 01941FFA129DED866FC8B16482D4A027AB14
Authority key identifier: E4:6A:3F:83:86:88:84:37:58:D2:80:57:00:7D:C6:CD:28:98:EC:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Go_g4aIhDdY0oBXAH3GzSiY7Mo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/52cf99-e798-4cab-a303-a3b06d4e4775/1/K79jAuNL4y91z3YYrxbmadc1H3A.roa
Signing time: Wed 01 Jan 2025 03:47:49 +0000
ROA not before: Wed 01 Jan 2025 03:47:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 193.243.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:12:9d:ed:86:6f:c8:b1:64:82:d4:a0:27:ab:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e46a3f838688843758d28057007dc6cd2898ecca
Validity
Not Before: Jan 1 03:47:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2bbf6302e34be32f75cf7618af16e669d7351f70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:74:59:11:db:06:62:5b:5d:8b:d5:9a:eb:2d:
67:ac:62:93:35:3f:a8:e1:15:3c:dd:ff:0a:77:b3:
40:d7:d9:7d:d6:48:cc:ef:32:aa:db:79:8a:19:7c:
fc:9c:ad:d3:fd:8e:30:34:42:be:21:55:07:76:80:
a3:a1:e1:b1:a4:42:bc:a5:6d:8d:b6:1a:ed:f9:18:
23:80:07:89:2d:ba:34:d9:7a:f4:6d:80:9a:87:a6:
89:6a:47:32:ba:93:a9:48:c7:b6:75:75:a4:14:ef:
e0:96:83:ae:ba:d8:ce:c6:e3:cd:d7:4b:e4:65:fe:
c3:ae:35:e1:9a:16:10:cb:cf:90:5e:53:5f:f5:53:
a3:4b:08:3a:c4:1a:fe:a8:29:fa:1f:ab:2a:12:40:
a4:88:c9:f7:b7:5c:f7:e0:f1:24:82:b2:3a:62:58:
83:f3:1f:4b:31:c0:e1:e8:00:8a:7b:16:fe:fa:82:
95:93:3e:4e:98:74:3b:0d:20:4d:bb:cc:d1:5e:1e:
67:b1:35:0c:47:56:53:9c:8c:00:f9:fb:23:59:4d:
bd:ab:f9:be:ff:ed:e0:f0:0b:66:48:79:48:11:b2:
92:69:11:a1:f3:1e:8f:c3:36:13:7a:19:e5:95:e2:
8b:f9:e6:59:25:77:b4:ab:3b:cb:25:41:cb:2f:d3:
c8:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:BF:63:02:E3:4B:E3:2F:75:CF:76:18:AF:16:E6:69:D7:35:1F:70
X509v3 Authority Key Identifier:
keyid:E4:6A:3F:83:86:88:84:37:58:D2:80:57:00:7D:C6:CD:28:98:EC:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Go_g4aIhDdY0oBXAH3GzSiY7Mo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/52cf99-e798-4cab-a303-a3b06d4e4775/1/K79jAuNL4y91z3YYrxbmadc1H3A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/52cf99-e798-4cab-a303-a3b06d4e4775/1/5Go_g4aIhDdY0oBXAH3GzSiY7Mo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.243.129.0/24
Signature Algorithm: sha256WithRSAEncryption
73:d2:32:4a:0c:e5:c5:e4:23:84:a4:f0:75:65:aa:a7:ab:e8:
a5:91:12:1a:b5:b3:72:ed:b9:d4:40:5c:67:91:99:61:6a:d0:
09:03:a7:f8:af:44:ee:99:60:15:98:1d:67:19:a5:39:3a:5a:
85:2a:a3:0f:c2:d1:5d:73:b8:e2:4c:fc:1b:4c:70:62:f5:f5:
f9:ce:f6:83:b7:89:7d:c1:be:b9:5c:92:75:26:8b:39:e8:28:
ae:bd:be:05:87:73:71:3b:57:b8:54:cf:da:4a:89:96:b1:81:
b8:ac:55:9f:2f:e1:32:75:62:2f:f4:b5:2e:c9:92:f2:42:e7:
58:cf:8a:7f:fa:96:60:a1:9d:85:c5:98:10:fb:e6:ac:3a:6a:
81:7a:b2:1f:c4:5d:11:f3:08:eb:5f:46:a8:28:77:77:ca:2f:
88:c5:bb:4c:19:e5:93:fa:bb:9d:45:a4:8c:73:89:64:5d:2e:
3d:9b:a7:8b:bb:36:e8:d0:b0:fe:a2:53:e6:56:17:02:80:54:
9d:56:22:33:e1:2a:5a:24:4e:ea:18:bc:11:28:d0:2a:3f:40:
4b:b6:9b:08:d4:07:ab:1a:ed:bd:a2:9e:b5:87:6e:a3:48:76:
c7:b1:52:f3:a4:a7:93:b5:b1:19:ee:09:ff:d5:93:b5:dc:5c:
38:8a:62:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:59:54 2025 by rpki-client