Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/tRodOgnL36df6pXBFG2GZ0IejYU.roa
File: tRodOgnL36df6pXBFG2GZ0IejYU.roa (raw, json)
Hash identifier: 4pktUYMVjKwvHeUTkVY/uWSV34oA6w6H5+4NxssBrac=
Subject key identifier: B5:1A:1D:3A:09:CB:DF:A7:5F:EA:95:C1:14:6D:86:67:42:1E:8D:85
Certificate issuer: /CN=7ee053cb9cb4f41c1e4773e7f16e84bb57522033
Certificate serial: 01941F8C6300E5E90F47AAA948FA598AFA41
Authority key identifier: 7E:E0:53:CB:9C:B4:F4:1C:1E:47:73:E7:F1:6E:84:BB:57:52:20:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fuBTy5y09BweR3Pn8W6Eu1dSIDM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/tRodOgnL36df6pXBFG2GZ0IejYU.roa
Signing time: Wed 01 Jan 2025 01:48:01 +0000
ROA not before: Wed 01 Jan 2025 01:48:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49556
IP address blocks: 193.228.91.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:63:00:e5:e9:0f:47:aa:a9:48:fa:59:8a:fa:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ee053cb9cb4f41c1e4773e7f16e84bb57522033
Validity
Not Before: Jan 1 01:48:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b51a1d3a09cbdfa75fea95c1146d8667421e8d85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c1:90:d3:1d:d1:9e:0f:22:2a:3c:71:33:c9:
f0:91:d9:7a:e3:99:77:54:ad:a2:47:84:eb:63:d5:
5d:d8:50:ae:a6:ad:25:5b:44:43:b7:c2:ba:0f:cf:
ea:b7:b8:2e:5d:be:83:37:fb:c3:9f:84:47:4c:6f:
73:7c:c5:47:d5:97:18:35:0f:1d:87:f2:c9:ee:52:
7f:2e:0e:21:76:b6:05:9e:e5:12:e7:1c:6b:b0:40:
5b:ee:e8:71:14:bf:5f:cd:15:78:22:e2:c9:58:6d:
b3:8a:cc:87:f4:20:cf:e8:d4:ef:c7:b7:22:ac:22:
2f:19:d0:98:11:5c:38:ea:e5:1a:5d:90:f6:23:9a:
f4:de:04:23:bb:ba:a0:ba:94:c6:ee:97:aa:59:a3:
f3:9f:cc:e6:59:a5:f5:e5:46:fd:ad:0f:9b:c1:4d:
c9:31:bf:72:31:79:5a:8c:e6:d6:01:d4:ad:5c:44:
4c:3a:62:6e:70:4f:85:8b:61:1a:1d:7d:75:b2:1d:
6f:57:bc:13:39:fa:15:3b:30:49:9f:73:a5:c7:f9:
79:2b:9c:e4:2d:97:c9:0a:32:f4:f5:c4:3f:e4:b9:
cc:61:b1:f2:ec:94:48:a2:69:b5:5f:f0:44:f3:92:
9b:85:5b:11:a5:c3:1d:50:5d:e5:62:f8:e6:07:76:
2b:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:1A:1D:3A:09:CB:DF:A7:5F:EA:95:C1:14:6D:86:67:42:1E:8D:85
X509v3 Authority Key Identifier:
keyid:7E:E0:53:CB:9C:B4:F4:1C:1E:47:73:E7:F1:6E:84:BB:57:52:20:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fuBTy5y09BweR3Pn8W6Eu1dSIDM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/tRodOgnL36df6pXBFG2GZ0IejYU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/fuBTy5y09BweR3Pn8W6Eu1dSIDM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.228.91.0/24
Signature Algorithm: sha256WithRSAEncryption
73:49:46:07:d5:50:d0:af:d2:d0:e4:8b:55:6e:80:2f:b9:57:
af:02:5d:82:bb:aa:05:ac:43:5a:4f:5f:00:3c:d5:2c:ea:3a:
a7:09:9b:98:e8:1a:a0:b4:98:94:4c:93:1d:fa:54:70:38:31:
6f:57:bb:28:ef:eb:a2:f6:fc:dc:f6:18:bc:31:8c:7b:9d:2a:
5e:9a:3e:53:13:88:6f:56:d3:54:ee:3e:c8:c5:cc:a7:ff:27:
d1:62:b3:c8:46:0d:ba:aa:70:e0:60:22:f9:01:fc:73:02:5e:
bc:0e:d1:2c:87:df:3e:dd:96:e8:f5:23:a2:4e:ed:bb:84:c0:
a4:89:32:0c:8a:52:e1:8c:2a:ab:ae:17:3e:35:4e:a6:39:6a:
2b:ef:02:bb:55:89:8b:97:e5:2f:69:2b:16:34:53:74:5d:f2:
cc:cb:d1:a1:a3:d2:3b:63:f6:3a:a4:4f:3b:74:25:de:ba:2e:
e3:c0:e7:2f:36:c5:d7:c3:7d:29:0e:1c:9f:05:4a:81:4a:69:
b9:34:ed:6c:91:36:7c:bb:7d:d0:88:e0:09:b1:98:81:1b:b4:
31:63:bd:cc:ea:61:96:df:4e:92:0f:89:6f:a7:06:2d:8a:86:
81:1e:66:38:57:b4:3f:2b:18:94:91:ef:ab:94:53:4c:51:e1:
16:99:0e:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:39:06 2025 by rpki-client