Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/0eb852-af34-4cb9-872e-4b5d5d5f8699/1/fU3MlRUECyf8Mob8gpdjGa0WFt0.roa
File: fU3MlRUECyf8Mob8gpdjGa0WFt0.roa (raw, json)
Hash identifier: 1bRjiSyIpRcT6gpZZI2DT+oOrLLRlf7RVwqkDF08rbw=
Subject key identifier: 7D:4D:CC:95:15:04:0B:27:FC:32:86:FC:82:97:63:19:AD:16:16:DD
Certificate issuer: /CN=74d7da63929999603395877448ce50ac6e0213a9
Certificate serial: 01942746D92E9BFE0901771105C72B4F0E08
Authority key identifier: 74:D7:DA:63:92:99:99:60:33:95:87:74:48:CE:50:AC:6E:02:13:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dNfaY5KZmWAzlYd0SM5QrG4CE6k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/0eb852-af34-4cb9-872e-4b5d5d5f8699/1/fU3MlRUECyf8Mob8gpdjGa0WFt0.roa
Signing time: Thu 02 Jan 2025 13:49:02 +0000
ROA not before: Thu 02 Jan 2025 13:49:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8220
IP address blocks: 193.16.48.0/21 maxlen: 21
193.16.56.0/22 maxlen: 22
193.16.60.0/23 maxlen: 23
193.16.62.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:46:d9:2e:9b:fe:09:01:77:11:05:c7:2b:4f:0e:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74d7da63929999603395877448ce50ac6e0213a9
Validity
Not Before: Jan 2 13:49:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7d4dcc9515040b27fc3286fc82976319ad1616dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:60:59:8c:11:ce:c9:b3:cf:a7:85:93:c1:f9:
5e:a8:23:7b:60:2d:44:68:a6:f6:c0:9c:c1:93:cb:
51:8b:53:3d:7f:80:c1:50:5a:79:bd:7a:89:d3:38:
a1:e8:dd:25:cb:4b:63:15:94:14:e1:86:51:54:6d:
5c:45:8d:ce:59:36:2e:62:96:bf:74:0c:52:c3:b4:
a1:42:03:4f:1b:93:ec:9f:5a:c8:49:cd:54:7a:9f:
93:29:41:37:aa:1d:e2:42:fd:aa:12:2f:24:b0:60:
86:55:ff:52:15:a9:2f:47:c0:98:cf:bc:be:67:7a:
7d:29:07:2e:83:ae:3c:7f:f1:47:91:55:bd:a4:3e:
30:9f:02:cb:cf:7c:94:d5:d5:6d:1f:36:61:6a:6d:
eb:b3:1a:09:9d:e9:c5:f0:80:b6:45:b6:1e:d5:41:
c2:e1:b7:c8:22:43:9c:6a:ca:2c:0a:15:22:d2:2b:
96:4b:ca:66:b0:1f:98:7f:92:dd:c9:13:57:7f:3d:
6a:98:11:71:9c:8a:b1:8e:6f:6e:6d:d7:c4:75:90:
c0:76:f3:df:dd:0e:27:01:82:8c:3d:d3:40:48:c6:
cb:cd:ec:ef:62:4f:b7:16:7d:e8:46:4e:c0:2c:3c:
95:66:98:1f:18:48:79:48:a4:41:14:50:10:3c:bf:
54:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:4D:CC:95:15:04:0B:27:FC:32:86:FC:82:97:63:19:AD:16:16:DD
X509v3 Authority Key Identifier:
keyid:74:D7:DA:63:92:99:99:60:33:95:87:74:48:CE:50:AC:6E:02:13:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dNfaY5KZmWAzlYd0SM5QrG4CE6k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/0eb852-af34-4cb9-872e-4b5d5d5f8699/1/fU3MlRUECyf8Mob8gpdjGa0WFt0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/0eb852-af34-4cb9-872e-4b5d5d5f8699/1/dNfaY5KZmWAzlYd0SM5QrG4CE6k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.16.48.0-193.16.62.255
Signature Algorithm: sha256WithRSAEncryption
89:e4:c0:0c:52:a1:ef:21:ca:31:f3:12:57:a7:16:9d:b8:b7:
2b:b5:13:c4:44:91:e8:04:a0:b0:13:be:f3:16:0f:05:40:e9:
74:fa:c3:63:d7:a2:7b:52:84:e2:51:9f:f8:3e:1b:7e:b6:dd:
ed:13:0d:4b:a4:9e:23:d2:ea:00:24:00:ec:9c:7a:a4:d7:38:
3c:6e:ff:fb:a4:a8:8c:83:aa:6f:8f:b7:9d:73:81:0d:8c:c2:
bb:e9:d7:76:f1:3f:0c:ff:13:7d:27:51:52:86:53:a0:b8:77:
9c:20:ee:26:fc:f0:e6:01:b2:1a:f5:17:17:f5:42:39:e2:36:
df:55:7c:ba:38:12:73:98:d1:e0:6f:29:a7:94:06:ce:59:06:
51:5b:10:2e:b8:17:04:f5:f9:0f:6c:58:35:9d:e0:79:4b:ad:
53:02:96:48:65:67:a3:85:aa:f7:7b:7e:a2:d2:ee:1f:5d:ae:
3b:f1:fd:b2:b4:5e:4e:fa:1f:87:04:00:fc:51:95:66:f3:de:
62:6c:91:b7:6e:c4:6d:a2:25:cb:ce:fa:a3:0f:f0:2d:2e:20:
7c:73:73:d2:c9:f6:ef:35:3e:3f:a0:96:61:a5:3f:43:e8:26:
70:41:2e:93:9a:e0:cb:55:72:05:16:c0:bc:cc:09:a4:b7:c6:
db:fe:a0:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:40:45 2025 by rpki-client