Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/626fb4-e8cd-45f0-8dc8-765e9c203be3/1/NHvBrQG5YnzgdzSKZ5hggmhl7Xk.roa
File: NHvBrQG5YnzgdzSKZ5hggmhl7Xk.roa (raw, json)
Hash identifier: DyZXFkFBZ3TjHZcSDoVDhCGDJj3juQTuNOexz8QHFtk=
Subject key identifier: 34:7B:C1:AD:01:B9:62:7C:E0:77:34:8A:67:98:60:82:68:65:ED:79
Certificate issuer: /CN=773016f962b5bfb0ce0eadba7f0873096501e123
Certificate serial: 01942747971DB55FDCF3AD30484EA85E2288
Authority key identifier: 77:30:16:F9:62:B5:BF:B0:CE:0E:AD:BA:7F:08:73:09:65:01:E1:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dzAW-WK1v7DODq26fwhzCWUB4SM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/626fb4-e8cd-45f0-8dc8-765e9c203be3/1/NHvBrQG5YnzgdzSKZ5hggmhl7Xk.roa
Signing time: Thu 02 Jan 2025 13:49:50 +0000
ROA not before: Thu 02 Jan 2025 13:49:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205826
IP address blocks: 193.24.113.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:97:1d:b5:5f:dc:f3:ad:30:48:4e:a8:5e:22:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=773016f962b5bfb0ce0eadba7f0873096501e123
Validity
Not Before: Jan 2 13:49:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=347bc1ad01b9627ce077348a679860826865ed79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:74:16:f5:02:46:c8:0b:0b:46:8e:db:90:39:
82:56:4a:f2:d3:a4:22:64:b6:84:d8:37:d5:54:d0:
6d:81:ef:b5:4a:e3:1c:ef:6b:5a:8c:c3:c5:f6:d2:
a7:90:51:ef:aa:19:02:1b:8c:e6:1e:52:45:8f:4f:
95:0c:7e:cf:51:37:1c:89:80:af:51:4d:b0:61:49:
bc:5e:2a:ec:46:40:cb:f3:17:14:47:44:9a:15:36:
02:30:e4:00:ab:3b:9c:bd:fb:01:70:08:88:4b:89:
d3:e2:9f:9b:ce:66:b6:07:00:5a:6f:6c:ee:2a:0d:
30:83:23:30:42:7f:90:60:4c:ef:02:6e:c3:c9:b0:
ab:6d:b8:55:f5:8c:9d:9d:37:94:2c:ae:67:7b:c1:
ab:af:15:fd:1d:11:dc:cd:c2:ed:16:1a:dd:73:e2:
fc:0d:50:12:4e:ec:f1:4e:cc:92:a8:dd:1a:16:57:
e8:ef:ee:07:0b:20:d2:90:65:e7:50:28:66:53:7b:
13:07:8f:08:35:5e:89:1d:7c:36:07:97:85:5a:fc:
e4:5a:c4:1e:ff:b5:0c:b4:70:33:4f:d7:42:a2:d1:
18:fb:25:f5:31:4b:6d:7a:21:d0:bf:a8:42:12:3b:
e7:83:eb:72:11:09:8a:9a:e4:8e:6d:77:30:8c:77:
6c:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:7B:C1:AD:01:B9:62:7C:E0:77:34:8A:67:98:60:82:68:65:ED:79
X509v3 Authority Key Identifier:
keyid:77:30:16:F9:62:B5:BF:B0:CE:0E:AD:BA:7F:08:73:09:65:01:E1:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dzAW-WK1v7DODq26fwhzCWUB4SM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/626fb4-e8cd-45f0-8dc8-765e9c203be3/1/NHvBrQG5YnzgdzSKZ5hggmhl7Xk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/626fb4-e8cd-45f0-8dc8-765e9c203be3/1/dzAW-WK1v7DODq26fwhzCWUB4SM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.24.113.0/24
Signature Algorithm: sha256WithRSAEncryption
56:df:37:d2:31:8c:30:5c:0f:c8:28:c2:b1:b3:c8:2f:9a:2d:
10:a6:2e:95:0d:00:69:60:a7:87:82:d2:44:93:ae:3b:ec:d5:
5b:03:e4:a3:a3:9b:47:3f:4f:48:02:91:98:c9:c6:73:e8:0f:
06:cd:62:41:17:fa:d1:aa:bd:b2:13:b2:04:f5:2e:c3:76:5a:
14:99:e1:33:eb:1b:ac:04:71:93:9f:f7:c4:b3:94:2d:12:73:
3c:5e:a1:40:46:f3:d7:d2:5b:61:7c:d2:e8:21:9f:fa:77:91:
2d:8b:aa:b7:7c:cb:93:73:55:ea:c1:8b:84:76:da:bc:b0:83:
7b:9c:be:67:8c:d7:16:5f:0b:47:52:05:f0:43:0a:85:31:6e:
d7:66:c8:48:00:d3:ac:d0:aa:a3:4b:36:7f:5f:0f:e7:06:31:
2a:50:02:41:1d:1a:8b:ad:17:96:bc:80:5b:bb:6e:5e:e5:7c:
24:f5:d2:7a:60:cb:b7:b3:f4:2b:69:fa:59:90:4d:78:ec:72:
1d:a0:c7:af:62:01:3b:59:9f:8e:c7:3e:bc:f0:6a:54:ff:d4:
be:f6:b8:09:e5:13:c1:64:c6:7f:d4:ee:d9:a0:60:80:a3:dd:
2c:aa:ae:c0:58:9d:bb:01:af:69:48:b7:78:0d:d8:d4:6c:59:
0d:f5:4e:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:15:07 2025 by rpki-client