Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/9f9aa9-09c0-48cc-b0a1-887331efb715/1/ET0yOb6N2KPn9sEOeciwveLzfFQ.roa
File: ET0yOb6N2KPn9sEOeciwveLzfFQ.roa (raw, json)
Hash identifier: 5UaUVXzPjnKQ9N0meCwxNszuKgkyrbDITbh3/+eJ6rg=
Subject key identifier: 11:3D:32:39:BE:8D:D8:A3:E7:F6:C1:0E:79:C8:B0:BD:E2:F3:7C:54
Certificate issuer: /CN=3f172439599d7da525797899bf213b8e63554914
Certificate serial: 019426D96A024B50C7154C1478FD3D15D032
Authority key identifier: 3F:17:24:39:59:9D:7D:A5:25:79:78:99:BF:21:3B:8E:63:55:49:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PxckOVmdfaUleXiZvyE7jmNVSRQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/9f9aa9-09c0-48cc-b0a1-887331efb715/1/ET0yOb6N2KPn9sEOeciwveLzfFQ.roa
Signing time: Thu 02 Jan 2025 11:49:30 +0000
ROA not before: Thu 02 Jan 2025 11:49:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1930
IP address blocks: 192.68.221.0/24 maxlen: 24
192.104.48.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:6a:02:4b:50:c7:15:4c:14:78:fd:3d:15:d0:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f172439599d7da525797899bf213b8e63554914
Validity
Not Before: Jan 2 11:49:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=113d3239be8dd8a3e7f6c10e79c8b0bde2f37c54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:0c:0b:fc:0e:be:0a:81:87:c9:69:0b:73:5d:
ee:c2:dc:d0:06:21:f4:97:07:46:12:5f:bd:a6:8d:
3b:0c:d9:d6:83:e7:fd:b7:39:76:35:ab:56:70:6f:
5f:35:79:2b:0e:86:39:f3:55:80:6b:c1:d6:6a:df:
dd:7c:c9:3a:f2:64:84:ae:eb:f1:e6:4a:b9:02:a1:
02:25:86:52:7e:01:fd:99:9a:ef:e6:d9:42:8c:e0:
16:ff:e9:52:b7:17:71:e6:25:08:f2:d0:3b:f4:13:
8d:65:c6:b5:e8:e9:70:8e:d0:63:aa:d9:26:da:6a:
95:ed:a8:ff:d2:fb:d5:ea:61:36:2d:99:65:4e:aa:
9e:1d:96:c6:98:6a:67:dd:f0:6f:81:19:e8:d7:3d:
47:d0:db:b4:0a:4f:00:91:52:dc:57:d1:c3:16:bb:
7e:33:a7:bb:95:df:53:41:e8:0e:39:85:d5:7b:77:
d3:01:d4:38:2e:bb:7b:9c:d0:c6:fc:4d:a9:ab:e9:
91:c2:18:34:7a:22:af:1c:04:45:61:28:38:ae:b2:
b1:20:a8:22:09:ae:65:b5:cd:e8:8f:b2:4a:a6:68:
a8:b9:b4:3e:ac:f9:fc:c6:8f:7b:09:70:41:a1:de:
b1:8b:15:9d:1d:56:19:d9:59:ff:38:43:cc:d1:a0:
a6:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:3D:32:39:BE:8D:D8:A3:E7:F6:C1:0E:79:C8:B0:BD:E2:F3:7C:54
X509v3 Authority Key Identifier:
keyid:3F:17:24:39:59:9D:7D:A5:25:79:78:99:BF:21:3B:8E:63:55:49:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PxckOVmdfaUleXiZvyE7jmNVSRQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/9f9aa9-09c0-48cc-b0a1-887331efb715/1/ET0yOb6N2KPn9sEOeciwveLzfFQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/9f9aa9-09c0-48cc-b0a1-887331efb715/1/PxckOVmdfaUleXiZvyE7jmNVSRQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.68.221.0/24
192.104.48.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:9a:ce:fa:05:22:6c:47:c7:7c:3e:72:48:66:75:77:6c:f3:
2a:22:31:94:03:d6:8f:7e:70:88:db:7a:e7:34:69:64:2f:68:
8f:f8:8a:4b:30:04:67:11:a6:d5:86:44:8f:a9:1c:38:ea:05:
88:df:df:07:21:33:67:e2:50:fa:00:c3:6c:f4:e5:e9:57:08:
9e:5e:61:f6:ec:ce:b6:c8:8a:6d:09:be:b0:fe:6c:f3:ee:03:
11:c6:fe:83:af:ce:8b:e0:7c:d2:1d:be:02:87:d6:f0:b6:3d:
18:eb:bf:f3:d0:48:f3:89:ae:b1:1e:2f:63:c8:d6:71:16:2f:
29:86:12:97:6a:e1:b0:34:ae:95:72:d3:41:ae:85:bf:a2:71:
c3:ae:88:09:c4:05:74:32:f6:ac:74:5e:a1:72:e1:d8:d9:ca:
8a:ae:6b:92:b3:09:53:0b:06:9c:4e:9b:1d:35:d4:58:d1:47:
d3:38:57:18:df:b9:73:fd:59:63:d3:6f:8d:b2:93:fd:d2:c1:
3a:0a:2a:c3:01:89:0f:46:f4:7c:3d:fa:a3:10:55:26:b8:d3:
31:06:0f:c5:0e:f8:78:4f:27:20:2b:19:ad:31:ea:e8:17:a3:
c1:e0:ba:54:38:da:dc:a8:d4:69:e0:49:00:21:e0:10:d1:61:
92:60:a1:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 03:40:22 2025 by rpki-client