Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/EwUX6o8KINZat_vIkH7IiVc5RFk.roa
File: EwUX6o8KINZat_vIkH7IiVc5RFk.roa (raw, json)
Hash identifier: boU6lvYgq7nzb/YQf90RVvPeIrt2vTO+RTEIWPWzHXE=
Subject key identifier: 13:05:17:EA:8F:0A:20:D6:5A:B7:FB:C8:90:7E:C8:89:57:39:44:59
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 01942068517BECB29E4FD800C9067BEF7A22
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/EwUX6o8KINZat_vIkH7IiVc5RFk.roa
Signing time: Wed 01 Jan 2025 05:48:14 +0000
ROA not before: Wed 01 Jan 2025 05:48:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205628
IP address blocks: 193.233.148.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:51:7b:ec:b2:9e:4f:d8:00:c9:06:7b:ef:7a:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Jan 1 05:48:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=130517ea8f0a20d65ab7fbc8907ec88957394459
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:5c:69:0a:0a:5e:96:05:38:28:df:ca:7f:7a:
12:02:d8:1e:ec:94:92:1b:03:40:b4:12:43:63:6d:
5e:a6:64:e5:23:bf:f2:72:9e:a8:80:ab:a0:71:6d:
2b:cd:b0:9e:21:d0:1f:ea:9b:f8:00:1b:3c:34:22:
28:2f:86:f5:b1:3d:0e:f6:a5:fc:3f:7a:2e:3a:db:
4b:e6:55:b3:b6:58:be:9f:ce:95:3d:00:f1:02:92:
ea:1e:f5:a7:7c:d8:2e:f0:86:61:07:96:d6:cb:36:
96:3e:66:3c:15:fb:d3:be:a1:42:e5:13:c9:83:8c:
bf:ef:4a:6e:26:f1:96:a2:73:97:10:9a:8a:67:bd:
cd:90:93:42:59:50:ae:c3:ef:53:9d:24:e8:1f:28:
a4:ab:66:13:1d:7a:29:9b:b7:91:7e:c8:56:95:1f:
31:d0:81:2d:c0:db:29:89:32:f6:fd:f4:13:1e:6c:
48:3a:f0:4d:a9:a0:95:24:0b:fa:40:04:1a:51:ec:
25:5b:67:6e:ea:65:ff:97:ed:2e:08:60:cd:1f:50:
aa:8d:4d:b3:26:68:a8:63:03:7f:1b:a0:a1:60:43:
a4:08:18:cf:5c:8f:bf:0d:d4:84:2f:1b:8f:3f:58:
37:8d:b1:2c:9f:1b:a0:02:5e:3d:db:0e:a4:27:c2:
ff:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:05:17:EA:8F:0A:20:D6:5A:B7:FB:C8:90:7E:C8:89:57:39:44:59
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/EwUX6o8KINZat_vIkH7IiVc5RFk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.233.148.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:af:73:8a:9a:9f:4e:15:c1:1e:c7:d7:b2:89:2c:35:03:dd:
35:62:ae:aa:17:c2:12:fc:c8:ed:d9:f6:de:96:08:0d:9f:75:
af:c4:21:45:bd:88:f1:b7:08:82:0d:66:0c:8f:ab:8b:1b:b0:
58:be:69:b0:e5:1f:41:9c:c4:a0:46:ff:40:06:ca:da:6e:57:
e9:42:f8:44:8d:9c:ff:e0:d5:d1:da:f7:d3:2d:0c:9e:08:c1:
2c:f2:4c:a1:a3:4f:3d:4c:22:8d:73:53:34:ca:d0:77:e0:b8:
9b:10:31:97:11:6b:32:7b:b7:9a:75:24:e4:15:8c:14:b3:af:
0b:1b:f9:39:a8:2f:a2:b5:f8:c1:66:46:d3:ab:ef:1c:8c:77:
d6:83:ce:08:49:90:db:1d:87:19:67:7a:34:10:e8:81:a3:39:
a5:0a:38:3a:61:72:dc:66:7f:06:09:20:8c:a3:1b:c1:1f:ba:
f8:59:88:2e:63:d0:25:9f:a1:56:58:b9:2a:d6:45:72:71:c5:
01:de:c6:7e:e7:e3:08:6f:20:b1:3f:2a:eb:73:76:d8:b8:53:
65:91:02:2e:78:37:f8:b2:1f:5f:2b:0c:9c:51:37:d8:71:bf:
6f:b5:29:25:8c:b7:10:0f:c2:30:11:99:de:e9:c0:83:bf:a8:
3e:85:36:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:59:30 2025 by rpki-client