Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/d5eb6f-b781-4d52-8283-d2e10c97645f/1/e906IBwj4MSiW-e8owQAWsQ_4Jo.roa
File: e906IBwj4MSiW-e8owQAWsQ_4Jo.roa (raw, json)
Hash identifier: P83ELX1oAyr6YQ0Ab0RC6iwmwrr6PxLhv5UjiehFQxc=
Subject key identifier: 7B:DD:3A:20:1C:23:E0:C4:A2:5B:E7:BC:A3:04:00:5A:C4:3F:E0:9A
Certificate issuer: /CN=8079afcba5a8762fb79f4e5e0d7a35ee84cd3df4
Certificate serial: 01942522268E30CE4D6430299991FE42D54E
Authority key identifier: 80:79:AF:CB:A5:A8:76:2F:B7:9F:4E:5E:0D:7A:35:EE:84:CD:3D:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gHmvy6Wodi-3n05eDXo17oTNPfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/d5eb6f-b781-4d52-8283-d2e10c97645f/1/e906IBwj4MSiW-e8owQAWsQ_4Jo.roa
Signing time: Thu 02 Jan 2025 03:49:42 +0000
ROA not before: Thu 02 Jan 2025 03:49:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21346
IP address blocks: 193.19.196.0/24 maxlen: 24
193.19.197.0/24 maxlen: 24
194.125.246.0/24 maxlen: 24
194.125.247.0/24 maxlen: 24
195.22.158.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:26:8e:30:ce:4d:64:30:29:99:91:fe:42:d5:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8079afcba5a8762fb79f4e5e0d7a35ee84cd3df4
Validity
Not Before: Jan 2 03:49:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7bdd3a201c23e0c4a25be7bca304005ac43fe09a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:24:31:2b:8b:b7:ce:66:1e:16:fb:32:85:8c:
07:05:df:75:4f:f0:36:75:5a:54:a3:67:95:30:ce:
6e:59:87:bd:67:4e:5b:a7:c9:5e:d4:1b:c4:51:a9:
ec:5a:92:4c:11:fe:81:96:c8:69:fc:b8:89:5d:f6:
46:f3:c2:89:18:6a:24:52:4a:70:2c:e5:f5:63:7f:
15:06:07:2f:93:8e:5e:0c:f0:03:30:2e:19:fd:96:
27:b8:f7:45:2e:a3:ca:74:72:5e:e9:64:ac:b5:44:
6d:42:fb:0a:e2:02:35:a8:a9:83:15:b0:8d:e1:d1:
1a:70:41:3f:91:5f:2d:f2:46:c5:29:bd:bb:5f:ea:
2a:72:67:43:98:b9:e4:bb:06:28:a4:f9:db:81:f6:
0d:57:16:e5:f8:aa:b3:dd:1a:ba:4d:c4:c8:47:0c:
df:5b:ba:5c:48:94:66:9d:c1:c3:ea:f6:87:6f:c6:
92:1d:76:58:ff:d4:ed:c7:13:ca:9a:65:f2:0c:8f:
bf:15:1e:ad:5c:46:c8:a9:45:e4:1f:f4:e5:75:77:
13:dd:6f:29:d7:5c:ec:5e:d7:13:f8:67:a2:4a:53:
ab:ce:70:b0:38:56:a1:d7:86:44:7e:9f:a4:c4:e2:
c0:2d:94:ac:99:1f:f7:c1:16:18:4b:1f:d0:e8:60:
15:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:DD:3A:20:1C:23:E0:C4:A2:5B:E7:BC:A3:04:00:5A:C4:3F:E0:9A
X509v3 Authority Key Identifier:
keyid:80:79:AF:CB:A5:A8:76:2F:B7:9F:4E:5E:0D:7A:35:EE:84:CD:3D:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gHmvy6Wodi-3n05eDXo17oTNPfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/d5eb6f-b781-4d52-8283-d2e10c97645f/1/e906IBwj4MSiW-e8owQAWsQ_4Jo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/d5eb6f-b781-4d52-8283-d2e10c97645f/1/gHmvy6Wodi-3n05eDXo17oTNPfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.19.196.0/23
194.125.246.0/23
195.22.158.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:02:cf:c7:fa:e6:52:e0:8e:fc:d1:47:d0:a0:5a:9f:58:c6:
eb:1d:82:d9:a6:87:39:56:2a:46:ac:ae:6b:65:c3:16:ca:d1:
3e:9a:b8:8a:c2:71:f0:0f:08:b6:a0:d0:49:a3:3d:b7:9b:1e:
11:18:da:e4:c1:5e:8a:0f:3a:9a:77:51:37:98:05:ce:0c:12:
a5:2b:13:f0:85:9e:e8:ac:5f:40:11:d1:77:5f:03:0f:95:8b:
52:75:df:64:41:3a:ea:c9:ca:6e:da:97:14:ea:17:8d:99:34:
b7:36:6c:5b:40:07:9f:fb:57:3e:37:4c:19:8b:08:45:97:db:
4f:a8:dd:72:2a:66:b3:72:b7:24:eb:a9:1b:f9:f7:91:fd:9c:
a0:00:c6:8f:9f:04:9c:bd:98:e3:b4:7b:5f:34:6c:69:a0:fd:
fd:52:e4:da:cb:0d:75:e7:78:d0:95:0b:2d:23:73:af:23:20:
d0:ef:5c:9f:71:db:53:9d:df:6e:be:de:d2:93:40:40:b7:1f:
6d:6a:c3:36:b0:6a:4c:40:4a:c3:8f:67:26:54:ab:d7:e1:c0:
ed:44:73:41:d7:c5:65:ce:86:ca:97:97:72:22:0f:be:06:24:
bb:61:8a:f2:38:d5:67:3b:ec:24:e5:3a:ed:e4:de:d2:eb:bc:
5d:6d:47:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:06:50 2025 by rpki-client