Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/32779d-3656-44c0-8ab5-981fbb3442dd/1/1-YiE0zD6bdHHxyrrtrH0MPpWMjk.roa
File: 1-YiE0zD6bdHHxyrrtrH0MPpWMjk.roa (raw, json)
Hash identifier: XJcU+t3QaDJvlCxOS1ialUKrIkBR/f23WGzBhACpW8s=
Subject key identifier: F9:88:84:D3:30:FA:6D:D1:C7:C7:2A:EB:B6:B1:F4:30:FA:56:32:39
Certificate issuer: /CN=ecf7ca9ffafe72a30966f7e43d92b58e774ce741
Certificate serial: 01942747C7FB86752EBACDE2C5D168D192F7
Authority key identifier: EC:F7:CA:9F:FA:FE:72:A3:09:66:F7:E4:3D:92:B5:8E:77:4C:E7:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7PfKn_r-cqMJZvfkPZK1jndM50E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/32779d-3656-44c0-8ab5-981fbb3442dd/1/1-YiE0zD6bdHHxyrrtrH0MPpWMjk.roa
Signing time: Thu 02 Jan 2025 13:50:03 +0000
ROA not before: Thu 02 Jan 2025 13:50:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215540
IP address blocks: 193.32.176.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:c7:fb:86:75:2e:ba:cd:e2:c5:d1:68:d1:92:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecf7ca9ffafe72a30966f7e43d92b58e774ce741
Validity
Not Before: Jan 2 13:50:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f98884d330fa6dd1c7c72aebb6b1f430fa563239
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:86:b2:70:4a:18:7f:3c:85:7a:2b:6f:59:e7:
2c:60:86:74:a3:8a:c8:29:49:4c:ea:98:b7:8b:52:
80:c5:68:14:65:e8:de:63:c7:7a:fe:b3:ba:5e:d0:
3a:40:e1:9a:f1:fa:5d:35:34:54:b4:0a:72:87:3b:
fe:d4:5d:bf:d2:6b:d5:d3:80:e2:75:0f:62:ca:66:
f5:71:ec:c4:3d:cf:47:f3:89:41:73:ff:39:fe:40:
7d:bd:fe:d4:56:48:c1:8a:81:1c:b7:41:e0:4d:6d:
dd:cd:be:89:0f:da:66:5a:97:7c:24:a4:a4:24:ea:
2d:51:c2:b4:63:38:25:f9:7a:9b:6c:6e:f8:00:c6:
30:4b:55:a5:c5:eb:d7:ad:de:b8:e2:c4:43:9d:f1:
b5:c6:25:2f:24:16:52:4d:ec:16:d1:da:e2:08:71:
c3:83:d4:82:47:5f:03:95:94:79:f6:32:f6:dc:2b:
7c:8d:77:6b:c3:3c:7c:9b:18:bd:67:0e:5c:09:6e:
96:83:56:85:35:96:27:90:79:14:b8:a8:e5:cb:0b:
d5:5e:f4:9f:85:39:43:4a:43:2d:72:bc:12:e7:0f:
4e:9e:f8:78:5e:1d:85:74:04:dd:9e:96:cc:d0:a0:
1b:22:84:22:6d:8a:e2:ff:84:02:1b:4a:0d:85:a9:
35:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:88:84:D3:30:FA:6D:D1:C7:C7:2A:EB:B6:B1:F4:30:FA:56:32:39
X509v3 Authority Key Identifier:
keyid:EC:F7:CA:9F:FA:FE:72:A3:09:66:F7:E4:3D:92:B5:8E:77:4C:E7:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7PfKn_r-cqMJZvfkPZK1jndM50E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/32779d-3656-44c0-8ab5-981fbb3442dd/1/1-YiE0zD6bdHHxyrrtrH0MPpWMjk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/32779d-3656-44c0-8ab5-981fbb3442dd/1/7PfKn_r-cqMJZvfkPZK1jndM50E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.32.176.0/24
Signature Algorithm: sha256WithRSAEncryption
21:54:3e:62:80:8c:4c:7c:ec:d4:32:1d:90:de:75:b5:74:d6:
e2:3a:cc:02:f5:c0:82:d9:26:91:97:d6:3c:11:22:56:d3:fd:
e8:90:60:7b:2f:e6:fb:9a:ed:64:6f:b9:6b:8a:84:8a:56:a8:
c2:fc:b1:e2:be:92:62:d1:f2:a6:f9:ed:a1:1c:65:7a:cc:a0:
2c:97:02:2c:8d:fe:a1:d8:be:68:11:ff:56:b6:1b:e5:0a:58:
a5:f8:96:4c:80:4c:70:4d:fe:8a:ed:5f:32:18:e9:32:1a:21:
66:45:3c:63:82:50:36:b7:17:30:fb:73:87:4a:ae:b2:48:3b:
ab:9d:cd:e5:9b:0a:72:7c:da:0b:d9:72:7c:69:b0:18:16:4a:
82:37:a1:71:37:d6:c4:83:86:bf:cd:ba:34:31:aa:90:51:16:
3c:d8:b1:84:d0:20:b7:3c:e0:37:cf:74:bb:fc:5c:47:79:09:
19:62:15:b2:60:d3:25:87:d8:81:52:93:14:bd:ae:6b:1e:d2:
7e:c4:59:f0:f2:0a:bf:96:a6:27:88:41:5a:5c:a9:da:6a:bd:
48:bc:5a:15:a0:c6:0d:48:6d:b6:b5:9b:d3:a7:e0:ac:af:b8:
bc:f9:ff:38:b8:b6:c5:8c:81:2f:62:c9:e9:f5:92:a1:d2:7e:
3b:ec:d0:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:59:30 2025 by rpki-client