Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/27c4c1-1577-4ee1-aa24-ade2babcb8d0/1/sndMGN9hrwytu8M86g8e17_E-wk.roa
File: sndMGN9hrwytu8M86g8e17_E-wk.roa (raw, json)
Hash identifier: 5lmWBoAQNAypsv2KN0NMYJT+hXVE7BGT1N8Z8n2QPIo=
Subject key identifier: B2:77:4C:18:DF:61:AF:0C:AD:BB:C3:3C:EA:0F:1E:D7:BF:C4:FB:09
Certificate issuer: /CN=d7498cd327ea33bff8629d7f49d6be3adc5ff32c
Certificate serial: 01941FFA457E3BE653AF02B22CCA82B7C769
Authority key identifier: D7:49:8C:D3:27:EA:33:BF:F8:62:9D:7F:49:D6:BE:3A:DC:5F:F3:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10mM0yfqM7_4Yp1_Sda-Otxf8yw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/27c4c1-1577-4ee1-aa24-ade2babcb8d0/1/sndMGN9hrwytu8M86g8e17_E-wk.roa
Signing time: Wed 01 Jan 2025 03:48:03 +0000
ROA not before: Wed 01 Jan 2025 03:48:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 559
IP address blocks: 193.247.190.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:45:7e:3b:e6:53:af:02:b2:2c:ca:82:b7:c7:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7498cd327ea33bff8629d7f49d6be3adc5ff32c
Validity
Not Before: Jan 1 03:48:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b2774c18df61af0cadbbc33cea0f1ed7bfc4fb09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:72:3d:34:e5:1b:1f:2f:13:f3:00:d3:fc:8b:
d4:01:43:7d:08:77:19:b1:95:92:7d:3d:30:c5:4c:
53:2f:07:31:38:c9:0e:b2:64:7c:37:42:68:06:71:
01:9b:fa:29:89:a1:f5:96:b3:90:25:03:a1:c4:62:
f7:a5:ca:09:13:e9:87:f6:c9:0d:99:f4:c3:7b:a9:
42:67:1b:81:b0:4d:e5:4b:ab:8b:32:35:cb:1d:3e:
5b:c9:4d:53:3c:cd:ff:59:83:b4:1c:9f:d6:e5:ce:
92:91:d8:62:70:60:f8:c5:5f:d4:45:60:c6:9a:31:
7a:fc:90:02:4e:b7:fe:22:01:28:d6:05:46:b2:bc:
50:bf:89:09:9d:ac:6b:f7:db:e0:87:4e:da:35:7c:
e2:79:10:e7:58:24:1a:e8:15:c2:38:64:22:a3:b7:
61:f4:c0:e8:fd:d3:42:d7:02:e1:a9:c4:9f:dd:62:
70:b2:fe:8a:04:ce:f5:67:a1:84:94:61:25:67:d5:
d2:a3:ce:38:f4:34:a4:dd:d0:f2:f8:72:2a:ec:ca:
08:d3:a9:e3:92:7c:58:74:bb:c7:d3:29:57:b8:ee:
53:37:aa:35:9f:1d:17:2f:46:77:a9:aa:37:80:04:
96:59:a7:cc:58:2f:69:20:3c:a4:c1:14:46:69:09:
42:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:77:4C:18:DF:61:AF:0C:AD:BB:C3:3C:EA:0F:1E:D7:BF:C4:FB:09
X509v3 Authority Key Identifier:
keyid:D7:49:8C:D3:27:EA:33:BF:F8:62:9D:7F:49:D6:BE:3A:DC:5F:F3:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10mM0yfqM7_4Yp1_Sda-Otxf8yw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/27c4c1-1577-4ee1-aa24-ade2babcb8d0/1/sndMGN9hrwytu8M86g8e17_E-wk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/27c4c1-1577-4ee1-aa24-ade2babcb8d0/1/10mM0yfqM7_4Yp1_Sda-Otxf8yw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.247.190.0/23
Signature Algorithm: sha256WithRSAEncryption
1a:fc:7f:16:64:ad:e5:9a:c2:f4:31:b2:b6:e9:70:99:7f:5e:
19:a5:aa:45:d9:fe:0e:33:ec:d7:84:64:2e:32:f3:b5:7a:bb:
05:d0:33:92:2d:b9:f8:62:0d:27:73:c5:66:87:98:86:b6:b0:
0c:4f:cb:d8:0e:22:fd:19:e8:10:c7:a5:0e:b3:3b:29:50:ac:
34:c9:e2:1e:40:c3:f3:a8:89:04:4f:57:7a:8c:15:0a:11:4f:
47:31:1e:5b:46:a8:32:22:77:a6:ea:60:98:cc:45:3e:56:34:
da:8b:f9:a0:84:d2:4b:4d:23:9d:ab:6d:dc:db:0d:9a:15:85:
b9:7d:0b:4d:72:55:3e:09:84:d7:40:10:42:d4:e0:fc:51:43:
6b:69:d0:10:ed:c6:97:6f:d7:d5:e1:3e:85:65:f3:62:f9:88:
66:5d:f3:ce:7e:39:b6:61:ce:b2:92:69:97:42:e9:28:49:62:
be:47:7a:a9:66:33:af:bd:de:43:51:88:30:f5:5c:92:a5:fa:
e4:43:83:b7:e5:00:be:de:5d:9c:39:ee:15:e9:d5:a6:18:b2:
1e:57:22:46:87:38:72:50:20:85:f0:aa:90:07:0e:47:19:21:
ab:40:b9:eb:95:e9:9f:23:29:9d:34:d0:00:5b:a5:d1:5d:89:
8b:f5:9d:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 05:21:50 2025 by rpki-client