Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/rRqWGeFUTLojRcIw-Ge17KCrf50.roa
File: rRqWGeFUTLojRcIw-Ge17KCrf50.roa (raw, json)
Hash identifier: cVb1Aoo/BrIVFDwvcUooDw/sIVh4RMTHChcNyDVAS4o=
Subject key identifier: AD:1A:96:19:E1:54:4C:BA:23:45:C2:30:F8:67:B5:EC:A0:AB:7F:9D
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 01941F8C17618CB259DB92E70488110F6184
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/rRqWGeFUTLojRcIw-Ge17KCrf50.roa
Signing time: Wed 01 Jan 2025 01:47:42 +0000
ROA not before: Wed 01 Jan 2025 01:47:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31454
IP address blocks: 193.230.151.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:17:61:8c:b2:59:db:92:e7:04:88:11:0f:61:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jan 1 01:47:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ad1a9619e1544cba2345c230f867b5eca0ab7f9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:cf:f1:9d:4d:65:f4:f1:7d:95:a4:78:62:55:
52:f4:bb:b1:f2:b1:e6:52:73:ed:39:a0:64:9d:1e:
df:c2:48:e6:32:7b:32:8f:e7:05:67:e1:f0:02:8e:
e1:9c:5b:65:07:33:47:cb:53:0d:c9:4f:8f:3e:0b:
56:36:6a:af:ad:e5:1f:58:d3:61:6e:30:c4:b3:bb:
1e:fb:87:b3:b2:5e:5f:93:1b:a8:45:ee:85:ef:7a:
b8:8f:33:d4:2a:1a:71:74:f2:96:f4:8c:8e:f7:32:
cb:9e:0a:7b:93:ec:01:b2:10:ca:41:74:72:3b:9d:
79:74:84:9f:58:a8:ad:f5:d3:71:24:c2:f0:06:f9:
db:af:ab:da:8e:64:25:80:fe:f2:7d:d2:7f:ae:46:
ce:99:a4:57:92:84:2a:0c:5d:21:04:47:69:cd:64:
52:44:d6:30:6f:a4:4f:35:47:c1:eb:f8:e1:a8:01:
f7:3b:9b:ff:14:28:66:4d:96:a1:91:d6:12:35:83:
7e:aa:cc:f5:7f:02:69:a5:65:70:bf:29:a2:ad:87:
78:f2:1a:5a:d1:69:ca:77:fe:64:37:03:fe:0c:5e:
01:93:09:bb:f6:65:c0:5d:ea:3f:ff:ec:38:66:f7:
bb:57:1e:27:b1:4e:c7:31:9a:70:cb:f4:d1:7d:fd:
51:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:1A:96:19:E1:54:4C:BA:23:45:C2:30:F8:67:B5:EC:A0:AB:7F:9D
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/rRqWGeFUTLojRcIw-Ge17KCrf50.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.230.151.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:6b:78:92:97:52:86:b0:47:7e:21:e6:18:a7:5e:f1:46:48:
8d:d7:6a:cf:ca:02:fa:90:20:14:6f:2b:14:85:4d:1e:c7:a3:
77:b9:a5:b9:5c:d9:c5:96:43:98:3b:30:39:03:32:2b:29:10:
fc:60:70:0c:7d:05:18:38:b8:37:cd:d3:f3:19:4b:6c:cb:d4:
e0:b8:07:0a:35:91:d6:62:51:b1:6f:a4:3d:ac:46:4e:5f:5d:
fd:f9:51:0d:4b:d6:1b:44:26:92:ed:04:1f:76:bc:2f:0b:e5:
27:d5:84:c7:fa:4c:94:a1:e5:bb:fe:fa:98:e6:4e:43:fa:b8:
14:8c:60:71:a6:04:3b:69:b6:98:4a:d2:39:6c:38:88:eb:bb:
3f:c5:aa:d2:ca:36:3d:f3:ca:bf:94:06:71:50:c1:ec:d6:ff:
f5:2c:41:69:c8:c5:1d:0a:b5:7e:fd:0d:4b:42:e2:b5:1d:75:
ef:74:01:99:8d:1b:59:36:cb:ac:19:f5:d8:de:52:4f:a5:c0:
3e:bb:65:78:c5:3e:b3:e2:a4:6a:72:43:05:85:ca:42:f6:0d:
95:b9:79:f3:cd:46:e8:d8:e2:7b:1f:ab:50:0f:bf:07:83:33:
0e:9f:fc:f9:e2:fd:42:a7:11:11:b1:17:22:7b:47:94:a8:16:
c4:fa:f6:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:50:43 2025 by rpki-client