Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/e23847-6f30-4daf-b2a3-340fac3f6baf/1/yF648HmKSc8efL0XMtipmpiaVnM.roa
File: yF648HmKSc8efL0XMtipmpiaVnM.roa (raw, json)
Hash identifier: UDCEoeXTHrEK5NMAkbLD0UGR3wavVXcw5jHo/SSMwWE=
Subject key identifier: C8:5E:B8:F0:79:8A:49:CF:1E:7C:BD:17:32:D8:A9:9A:98:9A:56:73
Certificate issuer: /CN=cf5bf0f19a994c7f686d55abfc16875d39e5d4e2
Certificate serial: 019427B59F7C4F7FC2BBAE8BBA63586583C9
Authority key identifier: CF:5B:F0:F1:9A:99:4C:7F:68:6D:55:AB:FC:16:87:5D:39:E5:D4:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z1vw8ZqZTH9obVWr_BaHXTnl1OI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/e23847-6f30-4daf-b2a3-340fac3f6baf/1/yF648HmKSc8efL0XMtipmpiaVnM.roa
Signing time: Thu 02 Jan 2025 15:50:01 +0000
ROA not before: Thu 02 Jan 2025 15:50:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6730
IP address blocks: 193.47.104.0/22 maxlen: 22
193.47.108.0/24 maxlen: 24
193.47.109.0/24 maxlen: 24
193.47.110.0/24 maxlen: 24
193.47.111.0/24 maxlen: 24
193.47.112.0/20 maxlen: 20
193.47.128.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:9f:7c:4f:7f:c2:bb:ae:8b:ba:63:58:65:83:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf5bf0f19a994c7f686d55abfc16875d39e5d4e2
Validity
Not Before: Jan 2 15:50:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c85eb8f0798a49cf1e7cbd1732d8a99a989a5673
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:60:3b:f5:5c:9b:3f:c3:d4:a9:ee:c2:10:9e:
28:c8:36:95:97:fb:84:95:d5:fd:13:79:d2:09:fd:
62:38:39:0d:d3:69:2b:19:0f:1d:5f:03:50:3e:bd:
38:b2:10:17:c5:83:b9:21:58:cc:70:d4:9d:0b:20:
fc:7e:71:1a:0c:af:5b:b0:97:2a:f2:44:60:a2:0c:
ed:c4:77:25:32:ac:41:1e:3a:63:f8:05:9e:66:80:
8f:fb:16:a1:a8:d9:31:63:a7:f8:ec:9e:ce:75:c5:
a0:0c:6b:2a:6e:e2:fc:9f:63:1d:7d:fd:6e:b5:20:
26:65:f2:4c:e4:5b:22:39:dd:a1:2e:9e:09:f1:36:
5a:6a:bb:70:f2:03:40:c4:97:15:98:3a:94:4f:3f:
b6:73:5d:e8:40:b4:b9:c8:e8:5c:3c:10:7d:0f:7e:
78:85:8e:62:60:69:66:03:c4:5c:12:dc:07:79:de:
d9:4a:77:62:95:b6:b0:a1:a8:cd:c6:f5:e4:09:6a:
77:c4:40:d6:14:25:7a:c7:d1:99:82:3b:62:d7:1c:
94:7a:da:1c:d7:37:d9:cd:a1:41:b3:69:7f:82:91:
27:a6:4a:95:fd:e7:15:b2:c2:96:76:41:43:74:66:
62:59:69:cb:14:93:87:d4:99:66:76:eb:b9:e8:e0:
bf:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:5E:B8:F0:79:8A:49:CF:1E:7C:BD:17:32:D8:A9:9A:98:9A:56:73
X509v3 Authority Key Identifier:
keyid:CF:5B:F0:F1:9A:99:4C:7F:68:6D:55:AB:FC:16:87:5D:39:E5:D4:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z1vw8ZqZTH9obVWr_BaHXTnl1OI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/e23847-6f30-4daf-b2a3-340fac3f6baf/1/yF648HmKSc8efL0XMtipmpiaVnM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/e23847-6f30-4daf-b2a3-340fac3f6baf/1/z1vw8ZqZTH9obVWr_BaHXTnl1OI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.47.104.0-193.47.131.255
Signature Algorithm: sha256WithRSAEncryption
18:75:8d:64:64:ec:41:33:27:4a:6c:1d:43:96:b5:d2:89:98:
b8:6b:07:5e:61:de:98:64:47:b2:18:c1:ab:54:d1:9e:02:8a:
32:f0:df:0d:de:d8:83:6e:bb:b8:fb:4f:a0:87:40:da:64:25:
64:10:52:65:be:85:cc:f9:fd:d2:f8:62:99:c9:24:85:81:4f:
60:87:25:c0:8d:c9:38:e1:38:84:1d:35:d5:61:16:b3:a2:80:
e8:63:46:29:03:23:61:eb:08:a0:ba:5f:84:e0:fb:c7:6e:62:
d5:c8:84:16:51:37:bb:d9:89:a3:5e:53:3e:9e:e2:63:e3:0e:
08:b6:75:96:4b:02:42:35:70:4c:45:6a:7c:5d:a2:b7:dc:dc:
83:ad:22:e4:46:20:47:42:16:8b:79:53:2e:c2:7b:12:b1:10:
93:71:72:38:07:f6:36:7f:93:2d:36:ef:d5:7c:1b:a1:07:07:
97:49:4f:e9:64:9c:96:da:c4:ef:ec:37:c5:53:86:06:7d:d3:
53:d9:e2:9a:f9:c0:c6:b6:e7:87:d6:dd:ad:58:0f:e1:7b:50:
5c:6e:bb:2c:34:6a:6d:b1:a4:fc:0e:5a:ad:e9:4c:9f:7d:bd:
a6:18:8c:44:0b:1f:e1:7f:08:42:e7:50:14:c7:ad:e9:34:7c:
22:ab:9d:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:36:56 2025 by rpki-client