Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/7Mdq2OzcSeIVY7QlgOXMtPruG_w.roa
File: 7Mdq2OzcSeIVY7QlgOXMtPruG_w.roa (raw, json)
Hash identifier: LDYAfFZDxQ21Q8803Be5UsYC81SpM4XwEMcSGzCvSwE=
Subject key identifier: EC:C7:6A:D8:EC:DC:49:E2:15:63:B4:25:80:E5:CC:B4:FA:EE:1B:FC
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 01941F8C2AC0BBB210BDE74E05380025308F
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/7Mdq2OzcSeIVY7QlgOXMtPruG_w.roa
Signing time: Wed 01 Jan 2025 01:47:47 +0000
ROA not before: Wed 01 Jan 2025 01:47:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49384
IP address blocks: 193.230.231.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:2a:c0:bb:b2:10:bd:e7:4e:05:38:00:25:30:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jan 1 01:47:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ecc76ad8ecdc49e21563b42580e5ccb4faee1bfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:45:5c:eb:78:6b:79:d4:ce:48:17:94:06:ee:
e6:54:fe:f2:88:37:01:c2:10:35:a3:4c:d4:4e:c9:
da:35:17:2c:7c:49:bc:2f:ce:60:bf:6c:4a:ff:9e:
c3:f3:24:c0:8b:81:f1:48:87:f6:66:48:70:2c:da:
d2:93:88:f0:40:f6:f2:57:f5:ab:69:b0:6e:aa:5f:
b4:43:df:16:81:0a:40:ac:d6:6d:13:0e:d3:b6:84:
4c:de:24:cf:92:60:09:a1:9d:56:16:49:20:e6:fc:
bd:ab:17:aa:e7:da:0c:0b:2a:09:c2:8d:85:2d:d8:
6f:17:51:c8:86:28:c6:62:a2:b7:9e:0d:db:64:7c:
00:69:1c:e4:76:7d:86:cb:93:cb:6f:62:31:f4:f4:
58:f4:16:9d:8f:e2:29:90:37:98:f0:ab:77:2f:eb:
35:2c:76:32:be:1d:ec:57:3c:f7:b6:37:79:27:b1:
56:b5:0b:61:3f:e0:3f:a9:43:a6:c5:64:2d:d4:50:
8d:d4:65:e8:75:4c:91:1a:3a:b5:7d:0d:27:e6:12:
bd:d7:ba:1b:07:7b:e0:33:1f:bb:ea:29:f5:d8:d9:
3f:85:ba:c5:4d:79:8c:48:40:fa:f3:68:9d:5c:59:
64:d0:cb:b2:9e:37:7d:9e:23:96:4c:bc:2e:e7:e1:
c4:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:C7:6A:D8:EC:DC:49:E2:15:63:B4:25:80:E5:CC:B4:FA:EE:1B:FC
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/7Mdq2OzcSeIVY7QlgOXMtPruG_w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.230.231.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:3b:e4:c9:83:30:a2:cf:f0:e5:bc:40:99:db:ab:b5:2c:69:
54:c5:eb:e9:94:a1:3e:35:93:78:d5:db:20:1e:30:92:21:c8:
2f:f4:5a:69:e1:82:73:8b:30:de:22:10:db:d4:6a:0f:1d:46:
8c:56:c6:cf:32:f5:01:03:06:5c:f3:95:6b:c3:8f:b8:76:82:
27:91:bc:e0:21:36:6c:3b:1e:fa:ae:a2:9f:1b:e6:50:78:43:
2a:4c:a8:12:ce:fc:ba:4e:3b:5a:b8:7b:da:be:a9:a4:db:31:
5b:ec:d0:30:51:3c:cc:47:ca:14:b6:d5:49:03:09:43:fc:b1:
e3:3b:93:f4:a5:bc:ab:ac:0e:b8:01:3e:1b:f9:dd:c2:f5:0b:
d5:78:05:3a:d8:21:77:38:6b:06:04:35:be:ff:03:23:22:da:
2d:30:67:c6:e2:48:5b:b0:af:26:12:53:61:c1:b8:77:51:6d:
4f:e1:15:95:05:86:8b:fe:a7:9f:71:a6:54:24:2a:65:2a:5d:
4f:a7:2c:f4:f6:34:56:0c:81:ef:6a:0a:52:58:09:93:56:f0:
91:3a:22:ab:31:f7:f0:fe:e8:aa:ee:a8:e0:e3:11:d7:a5:11:
62:4c:78:b0:f3:70:d9:74:a6:95:fc:cf:69:e9:e5:4c:71:2b:
14:c1:b7:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:06:49 2025 by rpki-client