Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/_T0fIhBDcj6TRbicdNo9Af7JI-0.roa
File: _T0fIhBDcj6TRbicdNo9Af7JI-0.roa (raw, json)
Hash identifier: 62/YrLwzCNzBWrS5IldSa7Rv5zQgtvVNRyc8tNW5sgY=
Subject key identifier: FD:3D:1F:22:10:43:72:3E:93:45:B8:9C:74:DA:3D:01:FE:C9:23:ED
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 019583AF9FAAE8A38FC0554C6380A66C7E12
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/_T0fIhBDcj6TRbicdNo9Af7JI-0.roa
Signing time: Tue 11 Mar 2025 05:31:19 +0000
ROA not before: Tue 11 Mar 2025 05:31:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213634
IP address blocks: 193.226.22.0/24 maxlen: 24
193.226.37.0/24 maxlen: 24
193.226.38.0/24 maxlen: 24
193.231.39.0/24 maxlen: 24
193.231.40.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:83:af:9f:aa:e8:a3:8f:c0:55:4c:63:80:a6:6c:7e:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Mar 11 05:31:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fd3d1f221043723e9345b89c74da3d01fec923ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:ef:27:71:f3:fc:48:ec:ac:a4:fe:b6:56:b0:
f2:76:20:33:ca:e5:5a:bf:b5:94:89:a3:77:33:0a:
e8:29:f6:c5:d6:03:11:b2:ba:1c:c7:d8:6c:dd:7c:
c0:a0:d8:2a:c0:13:5a:02:5a:97:4d:6f:fc:b3:1f:
50:de:38:aa:a2:1d:51:8d:49:58:52:0d:b3:aa:32:
69:22:fb:7e:87:46:99:58:3d:56:d4:d1:3a:8d:53:
b2:83:ce:50:46:6f:d1:47:c9:bc:48:64:5b:30:3c:
fb:af:0d:61:34:82:bb:7c:58:5f:3b:87:37:91:55:
72:49:18:96:6e:52:e3:6a:cd:eb:b8:48:a2:57:00:
a5:d8:4d:47:e4:4f:e2:90:ea:c4:c7:75:e1:d3:6f:
d7:39:80:e8:9c:e2:55:0c:58:f6:93:4c:5e:8b:6e:
ac:9b:0d:c5:b4:37:49:11:78:3f:48:fc:be:b3:b8:
35:05:c6:8c:ee:4b:cb:43:31:ee:72:e0:23:11:43:
3d:22:a2:64:c4:55:d1:bb:be:e8:20:a1:8e:5b:12:
df:1b:5c:9d:38:90:34:6a:d0:c0:11:35:0b:6a:81:
26:3a:cc:bd:da:c2:1a:ff:3a:b1:c4:9c:3e:22:dc:
97:32:4f:1b:0b:ed:be:d6:67:17:6c:4d:14:0a:20:
11:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:3D:1F:22:10:43:72:3E:93:45:B8:9C:74:DA:3D:01:FE:C9:23:ED
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/_T0fIhBDcj6TRbicdNo9Af7JI-0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.226.22.0/24
193.226.37.0-193.226.38.255
193.231.39.0-193.231.40.255
Signature Algorithm: sha256WithRSAEncryption
8f:10:b0:cd:be:08:c4:8f:d4:c4:1e:5e:e8:7a:c3:a6:c9:0c:
a9:16:90:4f:fa:ba:ed:2f:ad:d6:38:96:96:ad:cf:af:6b:5b:
64:32:ba:c5:3b:30:27:66:b7:04:1d:de:2a:7b:35:06:8a:79:
3f:fd:b1:c7:22:24:f9:17:86:ef:00:04:1f:21:ed:d1:e4:05:
f0:d8:31:9e:8f:8e:78:4d:9a:0c:0d:fe:d6:fe:c0:22:65:24:
76:af:64:bc:8f:5b:38:29:52:77:4f:2b:35:df:28:40:c3:be:
64:4a:60:57:ed:2d:4d:ac:6e:72:2b:30:db:69:f0:e8:b6:1f:
8e:16:27:4e:c0:be:b1:b7:d2:96:bc:8d:7e:2a:65:b7:ea:94:
94:e6:66:5a:b3:56:8f:ae:6c:59:8d:d3:68:4e:c0:c8:e0:f4:
a0:47:9a:50:f3:bd:7e:cc:a5:37:03:02:51:4c:8f:44:2b:fd:
9c:15:06:53:7f:1d:19:24:2f:96:ba:94:55:ba:bf:05:7a:31:
d8:8d:10:e0:e0:93:0a:05:26:05:b7:0d:d6:94:80:16:90:2b:
7e:df:78:a7:30:2e:83:df:db:88:76:4a:e0:fc:cf:20:c6:af:
ca:9e:76:0a:09:ee:55:73:79:5e:fd:20:85:0f:76:87:c1:44:
7e:85:46:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:04:22 2025 by rpki-client