Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/a7e55a-2672-4d76-9879-2ee4ff8b0a80/1/dT-7gvUmKAR5WGT1weDf35_tWbk.roa
File: dT-7gvUmKAR5WGT1weDf35_tWbk.roa (raw, json)
Hash identifier: NJOvgAiJEABrTrfoUtz6F99mFqlhlTj/p2CGRz0AC/A=
Subject key identifier: 75:3F:BB:82:F5:26:28:04:79:58:64:F5:C1:E0:DF:DF:9F:ED:59:B9
Certificate issuer: /CN=10759c6a62e278da8311afec8f7677c41363d1f8
Certificate serial: 019425FCBEA8BE51B37A2F5D11A9A5AC824D
Authority key identifier: 10:75:9C:6A:62:E2:78:DA:83:11:AF:EC:8F:76:77:C4:13:63:D1:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EHWcamLieNqDEa_sj3Z3xBNj0fg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/a7e55a-2672-4d76-9879-2ee4ff8b0a80/1/dT-7gvUmKAR5WGT1weDf35_tWbk.roa
Signing time: Thu 02 Jan 2025 07:48:28 +0000
ROA not before: Thu 02 Jan 2025 07:48:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 193.39.100.0/24 maxlen: 24
193.39.101.0/24 maxlen: 24
193.39.102.0/24 maxlen: 24
193.39.103.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:be:a8:be:51:b3:7a:2f:5d:11:a9:a5:ac:82:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10759c6a62e278da8311afec8f7677c41363d1f8
Validity
Not Before: Jan 2 07:48:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=753fbb82f5262804795864f5c1e0dfdf9fed59b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:fc:aa:16:e5:ef:bc:15:40:b6:ed:19:6c:e1:
bd:4f:e7:f9:95:01:4f:cb:af:e2:6a:dc:61:95:b4:
6c:9d:82:92:7a:49:8e:db:fd:fd:f9:11:79:f0:d3:
48:1f:9d:c9:ec:53:f4:2e:46:54:a2:02:d5:a2:4e:
90:92:48:d0:11:e3:84:65:3e:38:8c:69:34:26:f4:
1f:55:d5:b4:20:66:31:2f:a7:93:bc:e3:ef:f2:ef:
c0:0c:a6:bd:cc:34:bb:37:29:b7:93:7c:5a:dd:5d:
b9:75:93:94:26:ec:f7:b0:6f:6d:0f:e6:c6:29:14:
14:a7:5f:f0:72:40:81:38:4e:0b:26:74:92:8b:87:
b4:a3:89:e1:79:6e:9c:a8:da:f4:f2:45:aa:ab:92:
c9:ea:6d:6f:77:a9:2f:58:c3:fa:9f:c8:f8:22:d2:
4e:cd:3d:a4:7c:85:29:db:a5:2d:6e:66:e8:2e:4c:
c4:9d:25:d7:9e:e6:22:e5:fc:a4:d5:f3:71:c4:5f:
30:68:40:9e:7f:b4:08:e6:01:c4:18:29:42:b5:46:
f5:27:e3:09:59:ec:16:e4:02:10:9b:d8:7d:28:51:
44:59:08:8c:ee:9c:13:cc:11:01:68:a7:cb:02:49:
c9:ca:12:89:21:23:47:9f:14:39:bd:63:8b:14:ac:
16:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:3F:BB:82:F5:26:28:04:79:58:64:F5:C1:E0:DF:DF:9F:ED:59:B9
X509v3 Authority Key Identifier:
keyid:10:75:9C:6A:62:E2:78:DA:83:11:AF:EC:8F:76:77:C4:13:63:D1:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHWcamLieNqDEa_sj3Z3xBNj0fg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a7e55a-2672-4d76-9879-2ee4ff8b0a80/1/dT-7gvUmKAR5WGT1weDf35_tWbk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a7e55a-2672-4d76-9879-2ee4ff8b0a80/1/EHWcamLieNqDEa_sj3Z3xBNj0fg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.39.100.0/22
Signature Algorithm: sha256WithRSAEncryption
5c:56:2a:7c:de:25:ca:e7:b2:3e:6b:be:05:2b:8d:9a:2b:1b:
71:97:66:9e:8e:c9:10:81:3a:4b:a1:c2:e2:0a:ba:fc:b1:f4:
b8:1f:49:ec:49:35:43:c0:2d:4c:a5:7c:f0:93:c6:29:32:ed:
a0:85:4e:c9:be:42:67:37:d6:9b:84:e7:7d:88:59:f3:17:7c:
38:ea:73:02:de:c9:e8:58:66:65:cf:94:82:01:6f:1b:8d:ef:
8a:11:13:e5:59:ff:a6:9f:0c:c1:f8:6a:21:1e:c5:be:c4:5a:
fa:7e:e7:2c:c0:ec:25:57:9d:12:9c:a8:0c:bd:16:05:a8:71:
16:e4:da:37:5f:8b:f3:d3:02:4c:14:88:b2:6f:40:b0:ad:1e:
76:3c:9c:c3:a6:65:aa:22:8e:68:9e:8d:3c:86:61:d4:44:34:
68:04:c2:14:6e:77:64:e1:cd:b4:f2:61:42:b8:af:af:df:09:
e7:bf:a4:b6:91:76:2e:5f:06:02:da:e2:3c:a6:8f:01:33:ed:
34:c1:3f:4d:fc:ff:0a:fe:cc:4c:63:9d:d5:6e:e1:c1:51:4a:
7c:55:12:f1:de:af:3d:72:df:5e:14:2f:64:c7:18:c1:0a:f8:
30:63:fd:51:3d:09:b7:b1:1a:d2:db:62:05:aa:63:27:b2:98:
e9:ae:f7:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 15:41:07 2025 by rpki-client