Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/0547bb-4408-491e-90a0-fa709a23ac74/1/1-CkrT83J2r6H2IArRB97VaFfjh0.roa
File: 1-CkrT83J2r6H2IArRB97VaFfjh0.roa (raw, json)
Hash identifier: BhTDJ77YgLb9cA09YBYRFayzA/zGCXfnlywl/s38PZA=
Subject key identifier: F8:29:2B:4F:CD:C9:DA:BE:87:D8:80:2B:44:1F:7B:55:A1:5F:8E:1D
Certificate issuer: /CN=93fe8a95e5529d78e72047d4e35d1a7e9ad5c11a
Certificate serial: 01941FFA68933F7163D1040486BE70C59FF8
Authority key identifier: 93:FE:8A:95:E5:52:9D:78:E7:20:47:D4:E3:5D:1A:7E:9A:D5:C1:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k_6KleVSnXjnIEfU410afprVwRo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/0547bb-4408-491e-90a0-fa709a23ac74/1/1-CkrT83J2r6H2IArRB97VaFfjh0.roa
Signing time: Wed 01 Jan 2025 03:48:11 +0000
ROA not before: Wed 01 Jan 2025 03:48:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62336
IP address blocks: 185.193.44.0/24 maxlen: 24
212.122.128.0/19 maxlen: 19
2a10:fcc0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:68:93:3f:71:63:d1:04:04:86:be:70:c5:9f:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93fe8a95e5529d78e72047d4e35d1a7e9ad5c11a
Validity
Not Before: Jan 1 03:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f8292b4fcdc9dabe87d8802b441f7b55a15f8e1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:02:f2:d5:da:54:7f:34:6a:a3:79:1a:7a:f1:
fd:4d:93:73:da:d5:38:31:38:23:82:1c:c3:c4:a5:
2b:9d:46:f7:9a:02:af:81:4c:79:b1:9b:54:35:c8:
78:91:21:81:4b:71:c5:1f:ab:77:77:0b:3c:05:84:
52:3a:09:0f:f1:72:05:49:f5:b2:cc:fc:07:84:29:
6a:06:03:a5:07:2d:ac:75:e9:7e:d7:00:ae:1f:76:
d2:22:8e:7b:26:f7:7d:d9:8a:87:97:d1:f0:8d:87:
bd:c9:9b:cc:c0:e1:b6:a7:a2:7d:e4:18:67:96:9f:
4a:60:0c:1f:13:25:a8:67:45:07:b4:b2:e8:a7:cd:
4c:87:cb:71:ef:5f:8f:a7:a1:ca:2a:4a:96:18:e9:
45:7a:23:63:7b:5b:67:e7:92:7a:d1:4c:c8:a9:bc:
8a:d1:a4:04:b7:5a:1e:bf:ed:95:86:06:20:7b:97:
af:25:1c:90:9a:ea:76:77:68:56:9e:e0:6d:d5:7b:
7e:78:d0:b1:8a:5f:51:14:14:54:fd:33:b4:8b:d9:
12:71:94:b9:68:31:07:f7:86:36:d0:f5:36:dc:ae:
5d:2f:fb:e1:33:58:75:87:67:06:1d:b3:94:ea:d5:
db:d3:c1:5d:cb:b7:85:b8:8c:92:a4:56:54:7a:0b:
88:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:29:2B:4F:CD:C9:DA:BE:87:D8:80:2B:44:1F:7B:55:A1:5F:8E:1D
X509v3 Authority Key Identifier:
keyid:93:FE:8A:95:E5:52:9D:78:E7:20:47:D4:E3:5D:1A:7E:9A:D5:C1:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k_6KleVSnXjnIEfU410afprVwRo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/0547bb-4408-491e-90a0-fa709a23ac74/1/1-CkrT83J2r6H2IArRB97VaFfjh0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/0547bb-4408-491e-90a0-fa709a23ac74/1/k_6KleVSnXjnIEfU410afprVwRo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.193.44.0/24
212.122.128.0/19
IPv6:
2a10:fcc0::/29
Signature Algorithm: sha256WithRSAEncryption
2e:2c:e5:f4:11:8f:9b:dc:68:1c:71:97:71:84:4a:53:4d:83:
c1:0a:af:11:0a:4d:ee:fb:33:e0:3d:90:05:ae:fd:6a:c5:22:
fd:39:96:27:f2:f0:4f:8e:4f:b8:ce:e9:a8:14:df:43:5b:8f:
8c:4d:f9:6a:58:3f:9d:02:fa:78:b6:18:6e:e3:7a:2b:96:e4:
45:6a:2c:6a:0a:49:16:ab:64:98:f5:05:28:ab:f6:e5:40:06:
51:ce:10:3c:8d:38:83:03:42:42:32:d3:10:92:64:73:d2:44:
9f:61:14:07:94:ac:76:bd:b2:e6:80:f2:68:ff:e8:73:04:4b:
e4:fc:1a:6f:50:e2:fd:66:c7:b1:4d:8e:1c:5d:cc:dd:e6:72:
18:c2:4e:74:0d:e5:d2:37:70:a8:e7:49:de:f8:57:8a:e1:3c:
b8:f6:f2:68:4c:12:14:29:6a:61:4f:f0:15:59:42:96:92:03:
f9:22:e3:af:ae:26:80:46:49:ae:07:ca:3d:48:2d:46:d5:7d:
a7:46:84:aa:59:3f:da:dd:5d:4d:5d:86:e4:15:be:90:45:59:
a6:6e:45:60:b3:c2:6c:b4:e1:7f:ff:82:cf:35:8b:d5:0c:17:
72:22:08:43:35:ba:78:09:1d:d8:9d:35:a1:d3:33:3c:8c:0d:
bd:6c:b0:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:22:37 2025 by rpki-client