Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/a52ceb-c8c8-4236-a037-60a5743e6e1f/1/1-x-3ccNzP71eAFgXPav3YRKbPc0.roa
File: 1-x-3ccNzP71eAFgXPav3YRKbPc0.roa (raw, json)
Hash identifier: gcNVzNBHfGC67t/xgrOBlYz2dVPSnS4yGm9+O2azC54=
Subject key identifier: FB:1F:B7:71:C3:73:3F:BD:5E:00:58:17:3D:AB:F7:61:12:9B:3D:CD
Certificate issuer: /CN=ef4e1ea65287a24e20c663b5161c1513f00c8a8d
Certificate serial: 019422203A1A7A9D48EEABC6C968E598CEEA
Authority key identifier: EF:4E:1E:A6:52:87:A2:4E:20:C6:63:B5:16:1C:15:13:F0:0C:8A:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/704eplKHok4gxmO1FhwVE_AMio0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/a52ceb-c8c8-4236-a037-60a5743e6e1f/1/1-x-3ccNzP71eAFgXPav3YRKbPc0.roa
Signing time: Wed 01 Jan 2025 13:48:44 +0000
ROA not before: Wed 01 Jan 2025 13:48:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1273
IP address blocks: 193.33.108.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:3a:1a:7a:9d:48:ee:ab:c6:c9:68:e5:98:ce:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef4e1ea65287a24e20c663b5161c1513f00c8a8d
Validity
Not Before: Jan 1 13:48:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fb1fb771c3733fbd5e0058173dabf761129b3dcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:53:6b:87:d4:1e:02:1d:dc:a7:73:bc:34:7b:
56:8c:9e:76:cb:3a:4f:69:22:8c:e2:4e:d8:bc:23:
04:48:04:93:35:e4:98:24:bb:a8:87:df:1e:d2:a2:
85:f2:51:4b:22:11:f9:34:4f:e5:29:60:1e:37:dc:
dc:38:21:50:6a:63:67:40:1c:f4:d0:ee:7e:8d:d7:
94:ff:f2:3e:f5:82:78:60:65:27:d2:27:92:2e:d9:
1d:a4:88:a0:ab:e8:35:e4:39:60:24:31:11:e8:42:
bf:4f:ff:55:5b:aa:53:ae:d9:3e:53:60:df:88:bc:
db:1a:d6:8c:aa:be:12:eb:fb:17:e6:b2:6d:8d:f3:
e8:56:fd:86:7b:53:bd:d1:61:10:98:be:68:bf:be:
94:79:ff:25:ec:24:ee:6e:f0:e0:07:23:77:30:5d:
65:a7:bc:c9:c6:70:9e:be:d3:86:ae:b9:34:2c:fd:
0b:28:be:30:9d:e3:47:ca:17:1f:24:90:d3:0d:b5:
66:26:a4:79:e1:32:d8:66:3d:36:f3:42:2e:e9:fe:
58:4c:28:26:66:ab:cc:d2:91:a1:ac:30:c4:0a:8f:
c3:c1:0c:c8:ab:c1:10:32:2c:d5:c3:f1:12:72:3c:
4c:df:fe:12:9b:54:fd:4e:01:c5:e0:5a:d0:c3:64:
e9:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:1F:B7:71:C3:73:3F:BD:5E:00:58:17:3D:AB:F7:61:12:9B:3D:CD
X509v3 Authority Key Identifier:
keyid:EF:4E:1E:A6:52:87:A2:4E:20:C6:63:B5:16:1C:15:13:F0:0C:8A:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/704eplKHok4gxmO1FhwVE_AMio0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/a52ceb-c8c8-4236-a037-60a5743e6e1f/1/1-x-3ccNzP71eAFgXPav3YRKbPc0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/a52ceb-c8c8-4236-a037-60a5743e6e1f/1/704eplKHok4gxmO1FhwVE_AMio0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.33.108.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:29:76:d2:cc:9a:25:c1:ef:0b:ca:f6:53:fa:af:2c:ee:f2:
05:30:a7:7e:5d:6e:fb:80:8e:cf:41:81:49:6c:43:ef:01:4d:
be:89:d5:c1:6e:b0:cd:9e:7b:2e:d5:23:3f:11:5d:e1:82:63:
82:a3:44:8d:18:06:20:d9:8f:d8:5b:81:69:3d:19:2b:16:61:
d2:c2:8e:47:0e:70:1c:cb:28:ad:24:67:7f:bb:25:ac:1b:cd:
97:4e:85:58:0d:b4:a4:88:7b:a6:22:f0:da:35:4b:de:cb:eb:
c9:d1:7c:41:ca:3e:b6:90:de:a8:0a:e6:4d:cb:52:8a:48:87:
e3:64:28:1f:07:11:75:db:85:a1:ae:07:57:70:64:2d:c3:f3:
2c:1c:c6:c5:c7:d1:26:35:dd:60:29:7f:12:cc:4e:a6:cb:c8:
3d:9c:38:36:f9:c6:ba:9e:5f:6b:c4:7f:ac:ce:b3:a5:27:82:
13:87:1b:81:35:5d:23:1f:b1:c7:a0:89:34:66:22:32:33:f6:
33:a5:a6:e1:af:5c:cb:c2:a7:e3:23:2b:a8:fa:8e:da:30:ee:
df:6c:7b:90:f6:9f:03:09:00:3a:5a:d3:47:5a:51:71:43:10:
d7:af:f4:74:e4:df:9f:a1:e9:90:be:ea:a4:e8:1f:f9:94:37:
12:3c:39:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:08:22 2025 by rpki-client