Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/cffff8-3530-4e5b-a5e2-c77905fbba7b/1/_VXztWjIE0ZPwEUQdhYZ-DOYwQo.roa
File: _VXztWjIE0ZPwEUQdhYZ-DOYwQo.roa (raw, json)
Hash identifier: 185UhIin1qWAIQbRLAq/SfnBaaaHig76ZL9WselXS2I=
Subject key identifier: FD:55:F3:B5:68:C8:13:46:4F:C0:45:10:76:16:19:F8:33:98:C1:0A
Certificate issuer: /CN=45bbd2193642530a017f4f1cbe562e2170b3dfbd
Certificate serial: 0194266C26FB33ECF7A258AC530C0DB48850
Authority key identifier: 45:BB:D2:19:36:42:53:0A:01:7F:4F:1C:BE:56:2E:21:70:B3:DF:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RbvSGTZCUwoBf08cvlYuIXCz370.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/cffff8-3530-4e5b-a5e2-c77905fbba7b/1/_VXztWjIE0ZPwEUQdhYZ-DOYwQo.roa
Signing time: Thu 02 Jan 2025 09:50:09 +0000
ROA not before: Thu 02 Jan 2025 09:50:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209854
IP address blocks: 193.56.113.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:26:fb:33:ec:f7:a2:58:ac:53:0c:0d:b4:88:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45bbd2193642530a017f4f1cbe562e2170b3dfbd
Validity
Not Before: Jan 2 09:50:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fd55f3b568c813464fc04510761619f83398c10a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:2f:6d:52:74:5b:bb:5d:12:77:d1:9d:8a:9a:
45:8c:ba:46:0d:18:8e:33:fe:65:37:da:1b:5b:32:
09:00:4e:8d:04:1a:d9:54:b2:38:17:fd:3d:ac:c9:
6f:bd:6d:ed:04:68:90:9e:c3:8b:d2:70:45:3b:c7:
76:85:67:a2:bd:ec:b1:15:7c:11:5f:8e:3e:54:44:
e4:ce:c5:2f:61:e7:c7:db:e5:a9:45:ba:2c:66:ba:
e2:14:73:17:31:2b:92:28:e1:f2:54:5a:96:c1:1f:
9a:80:b7:98:7b:62:6e:3f:38:9a:18:34:a1:b1:27:
6d:5a:41:7a:ad:22:f9:ce:26:69:50:b0:76:80:99:
e4:4b:ec:78:8b:70:39:0c:78:1b:ff:8e:03:b3:b8:
32:94:5f:c4:17:14:19:34:7a:92:cb:4b:79:6b:d7:
1d:a5:76:0b:59:8f:9c:7c:76:11:fa:16:34:68:84:
63:48:ae:2e:9a:31:43:57:78:c2:de:ab:3a:4c:0a:
0c:e8:1c:72:20:c8:83:1e:5c:71:d8:7b:ce:01:e8:
a5:ab:30:29:92:c0:62:53:6d:62:48:a6:db:45:13:
b7:36:37:24:80:15:bc:30:04:29:50:f9:5c:11:6c:
26:e1:84:ae:81:17:45:b6:93:46:3f:fc:9f:89:a0:
d5:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:55:F3:B5:68:C8:13:46:4F:C0:45:10:76:16:19:F8:33:98:C1:0A
X509v3 Authority Key Identifier:
keyid:45:BB:D2:19:36:42:53:0A:01:7F:4F:1C:BE:56:2E:21:70:B3:DF:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RbvSGTZCUwoBf08cvlYuIXCz370.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/cffff8-3530-4e5b-a5e2-c77905fbba7b/1/_VXztWjIE0ZPwEUQdhYZ-DOYwQo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/cffff8-3530-4e5b-a5e2-c77905fbba7b/1/RbvSGTZCUwoBf08cvlYuIXCz370.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.56.113.0/24
Signature Algorithm: sha256WithRSAEncryption
23:6f:99:7a:f0:ab:cb:8a:d7:e8:b9:5d:07:4c:4d:59:70:0a:
0e:28:08:99:78:27:44:f6:24:08:7b:a5:e8:b4:81:1e:c3:b6:
bc:ea:98:75:af:ff:26:3a:70:cc:1b:45:51:ac:05:fb:84:26:
18:23:69:b5:7a:be:cc:2f:31:6d:97:ef:06:17:af:92:b8:8e:
4a:ca:02:cd:28:77:98:9a:56:73:07:5f:b3:d2:72:04:c6:6e:
e0:cd:f1:9c:88:d1:55:fe:80:4d:35:e7:5d:e7:1c:1a:d0:3b:
8d:1e:ed:b7:a8:29:d0:8e:02:86:8d:c9:4f:3f:dd:74:05:42:
80:85:84:30:ca:b6:c2:89:d2:d8:8c:94:5c:8b:53:c5:3c:3a:
da:65:5f:e4:28:4b:a5:a2:50:1f:7f:56:be:1b:a9:b3:20:82:
b5:a7:ea:d9:48:bf:2b:c3:48:3c:a7:99:d1:26:23:56:a3:e5:
f2:8a:84:69:87:46:03:42:9c:fb:e3:50:90:dd:6e:52:d2:44:
f1:ff:cb:26:07:f1:3e:6d:2a:6e:52:23:32:8f:27:0c:4d:3b:
47:b5:fe:05:ec:4a:70:24:d3:c0:b2:a0:26:f3:ab:70:e2:94:
cb:8f:c5:81:c6:84:28:ca:25:e4:1c:06:40:5a:a6:83:5c:07:
fb:2e:25:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:20:01 2025 by rpki-client