Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/k-J_l6_pk_UamR67wx7DsI8yW3k.roa
File: k-J_l6_pk_UamR67wx7DsI8yW3k.roa (raw, json)
Hash identifier: wTswHPItChLXHbk0nImah1MpQ05xA0FPMSI4Iw7V5m8=
Subject key identifier: 93:E2:7F:97:AF:E9:93:F5:1A:99:1E:BB:C3:1E:C3:B0:8F:32:5B:79
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 01942143FA12CD125B956494AC026A1B22EC
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/k-J_l6_pk_UamR67wx7DsI8yW3k.roa
Signing time: Wed 01 Jan 2025 09:48:10 +0000
ROA not before: Wed 01 Jan 2025 09:48:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 38974
IP address blocks: 195.216.152.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:fa:12:cd:12:5b:95:64:94:ac:02:6a:1b:22:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Jan 1 09:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=93e27f97afe993f51a991ebbc31ec3b08f325b79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f2:d5:06:d5:72:d9:1e:9b:47:52:92:41:44:
34:44:df:72:fd:40:d6:41:1f:81:e3:05:bf:b0:be:
d0:e0:cc:b3:88:81:9b:f6:dc:5e:fb:cd:59:d3:cb:
f0:87:f9:09:99:18:8c:88:bd:f1:40:19:38:09:70:
1f:7d:e5:9a:f3:4a:c8:53:93:43:59:1f:e8:6e:7b:
bd:95:50:fb:11:7c:29:c6:99:3e:25:44:af:07:38:
84:06:9e:aa:eb:89:53:11:30:7d:28:5e:ef:0a:5c:
5e:5f:c3:ca:fe:06:33:b3:2b:b8:e7:c2:c6:c0:fb:
dd:dd:65:48:d8:b6:a4:03:d5:b1:c2:c0:4a:4b:8b:
a1:b1:8b:12:18:a9:36:f0:bb:3b:73:fb:58:90:c1:
06:b8:8d:cf:8d:c6:c9:94:3d:1e:d3:c0:a9:e1:46:
63:6b:4b:1f:01:50:18:eb:2c:24:df:04:62:6a:85:
a9:9a:b0:65:34:61:18:f7:b4:2c:f0:0f:27:d7:b2:
3e:98:25:b5:79:52:71:53:71:3a:f7:43:68:ab:15:
f2:e6:1c:e7:64:27:64:c4:1c:1c:af:af:04:cf:c6:
60:38:32:b5:c0:be:01:06:75:ec:8b:66:aa:ab:74:
ed:e0:44:ee:18:46:0c:61:e7:36:72:72:68:80:7a:
95:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:E2:7F:97:AF:E9:93:F5:1A:99:1E:BB:C3:1E:C3:B0:8F:32:5B:79
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/k-J_l6_pk_UamR67wx7DsI8yW3k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.216.152.0/24
Signature Algorithm: sha256WithRSAEncryption
95:cb:8e:84:d1:68:a3:e9:8c:bf:62:59:92:54:a5:c1:2a:87:
28:ed:3f:9b:85:bd:b7:ef:6d:2b:d3:24:de:e6:76:46:4c:94:
b0:22:e9:9a:77:27:ef:06:a8:67:15:46:a6:51:4d:b6:dc:c9:
5d:21:27:05:70:ba:3e:59:95:86:bf:22:f8:06:35:0c:c4:09:
1d:47:7d:6d:1a:fb:f0:09:42:a0:2e:4c:e5:8f:9e:5b:60:0e:
e6:ea:05:82:f6:6c:4b:43:c2:61:8f:da:77:65:9a:f3:a5:06:
3e:ef:a2:51:17:7f:da:e8:3a:22:df:75:9b:ef:c9:0d:46:37:
f7:23:ad:8c:42:3a:8d:ef:34:5b:eb:3b:7c:35:b5:5e:4b:68:
53:ae:27:f1:df:a3:ce:b5:ed:51:96:58:cf:ec:85:31:94:0a:
c7:9a:b1:7c:c0:6c:21:f9:58:35:3f:40:46:eb:cb:d6:08:02:
0d:02:6a:21:02:e1:5d:a3:82:21:d1:05:77:68:c3:87:8a:71:
22:f4:ac:7f:f9:48:96:81:14:db:b0:82:68:95:c9:a6:91:3e:
77:d7:69:47:ce:4b:cf:2e:74:6c:fd:ff:ec:21:b8:65:5c:89:
4b:30:c9:28:2d:7f:ac:d7:da:1b:8a:c5:84:8c:cb:3c:f4:f0:
67:9c:27:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:43:30 2025 by rpki-client