Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/1Z1JEkhUJq-CK8--aQ8e5cXVCiE.roa
File: 1Z1JEkhUJq-CK8--aQ8e5cXVCiE.roa (raw, json)
Hash identifier: kWaUOaQSBl+6iawfvDxRFSdXfVkgYe2aMCsnpdwQrTk=
Subject key identifier: D5:9D:49:12:48:54:26:AF:82:2B:CF:BE:69:0F:1E:E5:C5:D5:0A:21
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 0195149CEAF9B0EA6141125DB6FD43943F14
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/1Z1JEkhUJq-CK8--aQ8e5cXVCiE.roa
Signing time: Mon 17 Feb 2025 15:53:02 +0000
ROA not before: Mon 17 Feb 2025 15:53:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213634
IP address blocks: 193.226.22.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:14:9c:ea:f9:b0:ea:61:41:12:5d:b6:fd:43:94:3f:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Feb 17 15:53:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d59d4912485426af822bcfbe690f1ee5c5d50a21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ba:26:46:23:d7:ba:07:94:96:12:3e:7e:19:
7b:55:5d:3e:4e:88:2f:45:c5:dd:3e:74:ba:1f:01:
58:12:f9:6e:6c:2f:78:cb:f1:60:8f:0a:af:c4:66:
d5:45:02:dc:56:3e:a6:7f:2f:c2:cd:9c:67:9d:af:
57:77:e4:af:04:48:ef:a7:98:93:ac:27:a2:d6:89:
42:91:ae:ac:82:56:b5:0c:cc:8d:07:30:86:7c:92:
b9:1e:68:46:cc:91:9b:6c:82:91:65:ad:a6:6d:e0:
49:d6:21:68:94:3f:42:fa:ab:82:06:90:6c:f2:8f:
76:75:cb:ff:2b:a1:3e:27:47:9c:3e:93:af:f7:44:
3d:5b:89:b3:7a:d3:d0:40:51:f9:4a:41:f5:43:a8:
88:0d:37:76:e2:fe:3f:be:da:0d:17:4e:f4:b6:b8:
ba:31:fd:d0:20:cf:b1:c0:13:ba:fb:b8:3d:63:89:
83:36:ac:bc:bf:cc:74:97:cf:9d:06:23:3c:a7:a2:
c0:60:d8:53:33:45:2c:70:00:4b:6b:19:3b:98:d5:
e0:06:0e:a0:7e:41:1b:9f:a8:8c:2d:f3:66:08:65:
6e:5f:79:68:3b:88:04:07:ef:b6:82:54:d2:ad:9d:
5b:ce:cd:11:e6:7f:64:4b:c2:dd:8b:09:10:6f:b2:
e3:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:9D:49:12:48:54:26:AF:82:2B:CF:BE:69:0F:1E:E5:C5:D5:0A:21
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/1Z1JEkhUJq-CK8--aQ8e5cXVCiE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.226.22.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:26:16:6c:80:1b:b8:7f:c9:4b:b4:54:0f:0e:19:f5:d9:7a:
70:da:17:7a:b8:7d:50:91:cb:a0:d4:20:24:1e:8a:c4:e6:6f:
92:f2:3b:b1:78:8d:ea:f1:e1:df:ce:24:bd:c1:b8:41:76:29:
8a:8c:7c:9a:f6:f9:c6:d6:03:e3:f1:a3:3c:48:83:aa:5a:c3:
21:ff:ff:d0:91:75:0e:3d:cf:0b:b7:20:81:ac:a2:c8:1f:99:
88:dd:b7:6d:0b:60:19:79:f2:c2:41:58:a2:49:2c:28:db:60:
8d:08:6f:8a:29:f5:6f:bc:ed:7d:26:9b:6b:29:80:37:5d:9c:
48:bf:67:e8:e0:27:e8:7c:94:95:97:0a:fa:3c:40:05:0e:bd:
09:b2:49:54:b9:51:08:fc:4e:c2:d1:af:36:1e:a8:4e:2b:b7:
e8:8e:56:10:d9:de:8b:04:c3:95:05:0e:0f:46:30:9c:27:5d:
29:d2:ec:c1:e5:41:1e:64:d1:fa:02:f5:15:95:2d:5c:ea:55:
cc:d5:c7:5a:91:9e:e7:74:87:24:07:4c:8b:5c:6f:32:97:db:
56:21:66:be:c9:7d:77:30:bf:d7:93:3e:f7:72:84:9e:bf:20:
a7:91:b4:c4:13:c2:ba:44:b7:a1:0c:aa:64:cf:32:c1:c5:5e:
41:04:5b:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:29:52 2025 by rpki-client