Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/cc48f4-0d93-4b69-8a4f-8724ed5e903a/1/554gdq_ok9HYl3wcKstvNBVgVnI.roa
File: 554gdq_ok9HYl3wcKstvNBVgVnI.roa (raw, json)
Hash identifier: KPXZ5rw0NzwP5c/cXfxWSL2Bey+lXp0pHFMUbBSidd8=
Subject key identifier: E7:9E:20:76:AF:E8:93:D1:D8:97:7C:1C:2A:CB:6F:34:15:60:56:72
Certificate issuer: /CN=f3e36222ccbc6c7221360540bab3a9dba9f237a0
Certificate serial: 019427B5C4A164FD77289914D97BC9D0FBEF
Authority key identifier: F3:E3:62:22:CC:BC:6C:72:21:36:05:40:BA:B3:A9:DB:A9:F2:37:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8-NiIsy8bHIhNgVAurOp26nyN6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/cc48f4-0d93-4b69-8a4f-8724ed5e903a/1/554gdq_ok9HYl3wcKstvNBVgVnI.roa
Signing time: Thu 02 Jan 2025 15:50:11 +0000
ROA not before: Thu 02 Jan 2025 15:50:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21396
IP address blocks: 193.223.78.0/24 maxlen: 24
194.180.187.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:c4:a1:64:fd:77:28:99:14:d9:7b:c9:d0:fb:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3e36222ccbc6c7221360540bab3a9dba9f237a0
Validity
Not Before: Jan 2 15:50:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e79e2076afe893d1d8977c1c2acb6f3415605672
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:a2:ae:a9:c8:2a:82:e9:f5:cf:e2:65:71:64:
05:18:53:0c:97:84:7b:2e:65:34:95:ed:30:a1:48:
8d:a4:90:c5:06:39:1d:ef:8f:1f:02:96:f3:d1:36:
93:8e:67:99:cf:c1:93:92:c0:c1:4d:e2:cf:96:bb:
32:8f:25:53:6d:53:ef:3c:0a:ff:55:8c:68:0e:b7:
9f:67:ad:cf:e2:00:76:68:cc:42:96:ba:41:e2:a1:
40:cd:6c:bf:7c:5b:3d:e9:15:a5:b7:b2:bc:b1:3a:
c8:20:3d:7d:f4:21:1d:51:7b:8a:e6:14:8f:b5:01:
e0:cb:53:42:32:08:2b:d8:e5:8e:d9:94:ba:6d:8e:
1b:1d:81:e4:eb:2e:33:9b:36:76:9b:f6:90:41:a9:
70:1f:b8:3f:05:c5:b0:63:ae:96:0e:d2:a1:1b:af:
eb:a9:2c:a8:2e:69:fc:18:ff:b1:cf:ce:4a:d6:0f:
f7:34:14:2f:a0:c4:25:2d:b0:b7:e2:84:3d:6e:27:
4e:6c:fd:a2:65:94:ca:23:23:d6:60:5b:75:b5:b8:
4e:13:86:d2:05:99:ce:a9:19:5c:ac:4f:22:13:04:
1c:00:0f:5f:4e:57:66:f9:a4:8e:63:a6:25:ad:4f:
97:01:8f:65:31:d6:70:05:dc:fc:e5:0a:6b:69:58:
46:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:9E:20:76:AF:E8:93:D1:D8:97:7C:1C:2A:CB:6F:34:15:60:56:72
X509v3 Authority Key Identifier:
keyid:F3:E3:62:22:CC:BC:6C:72:21:36:05:40:BA:B3:A9:DB:A9:F2:37:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8-NiIsy8bHIhNgVAurOp26nyN6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/cc48f4-0d93-4b69-8a4f-8724ed5e903a/1/554gdq_ok9HYl3wcKstvNBVgVnI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/cc48f4-0d93-4b69-8a4f-8724ed5e903a/1/8-NiIsy8bHIhNgVAurOp26nyN6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.223.78.0/24
194.180.187.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:83:00:16:20:ea:be:33:b8:7c:6a:89:52:4b:ba:b8:72:8d:
51:55:7c:7f:c8:2e:10:21:82:78:99:04:ee:32:aa:12:29:62:
62:19:57:a6:dc:94:2b:88:e2:96:f3:21:dd:0a:2a:42:be:ea:
4f:94:eb:f3:96:cc:ef:e2:77:0c:2b:e4:d0:89:7f:6a:db:2d:
86:de:1f:d8:fc:ea:9e:21:20:ea:d5:c8:2d:f8:5c:5a:f2:d3:
27:f9:dc:1c:db:9d:e0:31:65:cb:4f:0b:7f:0e:cc:78:c4:ee:
e6:80:2e:7a:78:e3:ee:da:c2:b2:1e:d2:b7:2c:f8:5e:de:e2:
c6:9e:4d:5e:3f:71:79:f2:3e:3f:43:13:80:3e:b7:5c:93:ef:
d6:5b:a5:e5:ef:b3:52:6d:22:e7:ff:a2:fb:a6:d9:a0:59:d1:
62:e2:09:ac:33:08:76:b4:fd:4a:fb:06:8a:c2:80:69:1d:fc:
30:5b:d7:c1:ff:17:73:8c:a9:b6:6f:e5:77:04:31:2e:87:7a:
91:ba:a2:ba:ea:f9:1e:98:3e:77:3e:e2:1a:82:0b:6c:80:5b:
85:74:0a:2f:b4:01:50:b9:56:90:f9:40:ad:ac:60:91:23:f8:
ab:28:34:e6:28:62:c9:c9:93:2e:94:61:7b:a8:70:6c:a3:ef:
4e:e5:95:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:41:48 2025 by rpki-client