Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/1fcb59-405e-40c3-a630-c5d13e88e4de/1/0yOggjDqNy10C3OKz3C0rIr3a-c.roa
File: 0yOggjDqNy10C3OKz3C0rIr3a-c.roa (raw, json)
Hash identifier: caWl/Q44QQWpPzxLX9RAZwZuiCmuzzxKu+jqUXyZ8ec=
Subject key identifier: D3:23:A0:82:30:EA:37:2D:74:0B:73:8A:CF:70:B4:AC:8A:F7:6B:E7
Certificate issuer: /CN=ccd35790830ce7469a94c59b2e2ccbbf5e36d13f
Certificate serial: 01942067E861A027A4817A52E23E9C746E3C
Authority key identifier: CC:D3:57:90:83:0C:E7:46:9A:94:C5:9B:2E:2C:CB:BF:5E:36:D1:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zNNXkIMM50aalMWbLizLv1420T8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/1fcb59-405e-40c3-a630-c5d13e88e4de/1/0yOggjDqNy10C3OKz3C0rIr3a-c.roa
Signing time: Wed 01 Jan 2025 05:47:47 +0000
ROA not before: Wed 01 Jan 2025 05:47:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 193.47.187.0/24 maxlen: 24
193.200.156.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:e8:61:a0:27:a4:81:7a:52:e2:3e:9c:74:6e:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccd35790830ce7469a94c59b2e2ccbbf5e36d13f
Validity
Not Before: Jan 1 05:47:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d323a08230ea372d740b738acf70b4ac8af76be7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:0c:09:cb:cf:8f:14:30:1d:ca:9c:39:ba:90:
d4:a8:cc:54:7c:14:38:0d:8d:ed:ea:d1:a8:a1:45:
c9:6b:04:4b:d0:a3:f4:13:4a:c8:69:05:06:0a:5b:
8a:d5:27:44:23:cc:aa:bb:31:10:49:3f:c9:2e:11:
36:53:86:eb:fe:42:8c:a1:83:a4:19:d8:d9:12:9a:
b4:02:d8:dc:de:2f:97:9a:36:58:56:b2:c1:d2:43:
bd:f8:44:05:b7:82:47:12:46:9a:85:99:5f:b7:76:
4f:78:55:af:76:22:cb:8a:70:62:da:3f:48:c6:11:
5e:60:f2:72:37:70:cc:46:20:9f:d0:a9:51:d9:17:
73:8a:80:bc:f9:9a:54:ba:a0:0b:3c:1c:e7:8c:8d:
89:43:6d:6e:5f:95:cc:15:cb:45:4e:82:10:aa:57:
b3:80:97:74:60:43:2e:5f:8d:b3:92:97:57:29:14:
01:6c:ab:9b:18:eb:75:ae:83:8d:f2:8c:d5:30:c5:
23:af:56:52:a3:23:3b:e1:f3:b3:66:4e:de:6f:5a:
0f:56:e0:a5:30:a6:28:81:e1:f9:2b:40:93:b0:25:
56:ce:7e:7a:9b:59:d4:b2:79:73:21:f4:60:3d:d7:
63:40:df:92:3e:cf:2c:e1:a9:1d:85:ed:27:1e:8c:
c3:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:23:A0:82:30:EA:37:2D:74:0B:73:8A:CF:70:B4:AC:8A:F7:6B:E7
X509v3 Authority Key Identifier:
keyid:CC:D3:57:90:83:0C:E7:46:9A:94:C5:9B:2E:2C:CB:BF:5E:36:D1:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNNXkIMM50aalMWbLizLv1420T8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/1fcb59-405e-40c3-a630-c5d13e88e4de/1/0yOggjDqNy10C3OKz3C0rIr3a-c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/1fcb59-405e-40c3-a630-c5d13e88e4de/1/zNNXkIMM50aalMWbLizLv1420T8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.47.187.0/24
193.200.156.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:3a:af:65:19:ee:dc:2e:8d:18:bc:fe:e2:6e:cc:17:a3:60:
42:0e:c4:fa:16:ff:34:eb:2e:a0:fd:39:e7:d0:04:0a:92:4b:
73:64:ad:1e:ad:46:75:2b:e5:47:7e:de:9d:be:e8:e2:ed:03:
2c:95:05:29:1b:e9:3e:dc:b3:b4:41:63:89:e6:06:72:b2:9a:
5a:0d:1b:ee:88:9b:07:3a:35:f8:85:97:ef:f8:52:d2:83:95:
6e:ad:d7:65:b1:20:dd:0a:86:ab:d7:3b:89:04:47:8c:3d:5e:
ff:2d:5d:53:60:24:b0:f7:b1:9d:4b:13:fa:b2:e2:00:dd:cc:
47:0b:2b:05:74:ec:5a:74:7f:97:8b:a4:ec:3f:26:78:12:f7:
4b:c2:e8:4d:7f:7b:4d:71:ce:bb:a8:db:19:3c:bb:ae:b7:58:
72:55:a8:3f:fc:ae:01:cd:00:03:68:ed:d1:d0:8e:b5:0a:dd:
83:81:53:95:f2:e1:91:2c:f6:5e:b3:a1:9c:b2:8f:79:30:60:
f6:04:ec:63:22:5e:8f:91:35:8d:b9:e5:1c:5c:dd:aa:1a:73:
95:7c:f6:17:4b:de:10:6d:47:61:c1:15:17:15:44:01:db:60:
21:08:1e:cf:29:c1:a4:37:02:8d:04:1f:4d:34:d0:34:8b:4f:
a1:18:40:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:26:54 2025 by rpki-client