Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/t1jAwDE4ePrJr-20runZjcVjYy8.roa
File: t1jAwDE4ePrJr-20runZjcVjYy8.roa (raw, json)
Hash identifier: J3DFEAIlVxaosyTy22VtpM9ytnJ7AurPBR88JS2iL1U=
Subject key identifier: B7:58:C0:C0:31:38:78:FA:C9:AF:ED:B4:AE:E9:D9:8D:C5:63:63:2F
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 0194266BBA5B2E8D8577C7A0F92CB547FF95
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/t1jAwDE4ePrJr-20runZjcVjYy8.roa
Signing time: Thu 02 Jan 2025 09:49:41 +0000
ROA not before: Thu 02 Jan 2025 09:49:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1239
IP address blocks: 89.251.17.0/24 maxlen: 24
193.93.53.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:ba:5b:2e:8d:85:77:c7:a0:f9:2c:b5:47:ff:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Jan 2 09:49:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b758c0c0313878fac9afedb4aee9d98dc563632f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:45:b7:dd:b1:bf:47:e9:90:dc:ac:ed:ff:a8:
62:e8:f7:f5:4e:08:51:79:0b:77:e1:6e:5e:9c:b7:
7b:8a:da:76:51:01:6a:93:37:4b:cc:3b:cd:34:37:
14:c9:5a:e8:32:c1:a8:08:48:e7:4a:01:aa:eb:69:
ca:15:fb:30:3d:85:99:44:74:b5:5e:f7:6a:b6:ab:
a8:40:27:c3:da:a3:92:b1:10:14:de:a4:f6:48:bf:
13:3d:da:ce:03:bb:91:5a:22:3e:b7:d2:0a:22:28:
7a:9c:04:2e:04:62:bd:88:0e:27:ec:c1:db:49:59:
c4:e8:6f:85:e9:db:b3:d1:b6:72:a3:f4:74:47:d7:
e5:c8:60:4d:f0:db:64:9e:03:a5:3a:1b:33:58:3e:
70:48:d8:ee:62:72:2e:31:5b:00:f7:14:35:fc:f7:
82:38:65:bf:72:34:0e:ce:17:e4:6b:f6:43:6a:07:
58:2a:d8:79:d4:9d:97:4c:9c:a7:ee:bc:15:be:e5:
67:c1:97:22:f9:7a:7a:3b:54:f1:1d:62:af:9e:6f:
da:8b:56:48:2d:ff:f7:5a:8b:48:92:55:10:88:e1:
fa:86:cb:82:59:f8:fe:ef:aa:e2:1e:e9:77:c5:5a:
dc:c5:b0:bf:22:b8:5c:46:49:57:47:f4:95:37:07:
ad:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:58:C0:C0:31:38:78:FA:C9:AF:ED:B4:AE:E9:D9:8D:C5:63:63:2F
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/t1jAwDE4ePrJr-20runZjcVjYy8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.251.17.0/24
193.93.53.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:4a:06:8a:e4:e2:f3:d3:4a:18:98:ff:e2:45:13:43:8b:8b:
86:25:c9:58:2b:40:54:f1:eb:8b:c8:47:c7:48:51:e1:fc:9a:
b1:28:19:af:a9:c2:0b:bd:8d:ad:78:16:df:03:d3:d8:fb:45:
1e:b5:ef:1d:6a:1c:8f:a2:32:01:78:00:4a:ec:3e:7c:77:9b:
b2:b6:18:26:96:c4:85:f3:97:0f:20:c8:a0:ac:2a:8f:1a:57:
8d:8d:0b:7a:69:da:cd:79:2a:d3:01:96:96:88:94:f5:ba:5f:
b3:f7:9b:d6:76:f5:a3:01:2c:44:3e:dc:85:ae:7e:22:b1:5e:
2b:c0:d5:0a:08:56:27:3f:ea:d3:6b:3f:1f:98:05:d6:2d:75:
fa:49:3e:e4:95:61:7f:76:b7:c2:3d:68:23:bc:6c:e6:d2:2c:
e6:57:67:84:4f:ec:07:35:83:bc:11:2a:82:e0:eb:19:75:83:
6b:f7:f0:1c:ec:6c:cf:19:10:c0:3f:e8:ba:f7:2a:f8:f3:56:
7a:b3:99:5a:30:6f:62:93:96:c5:fd:40:5d:2f:89:16:fd:18:
54:97:af:1d:63:af:f2:64:3d:49:d0:8b:e0:4b:e2:47:ef:77:
a6:0f:96:80:78:e6:03:95:97:6c:5c:7c:6d:c0:62:17:8b:d3:
25:8a:61:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:49:59 2025 by rpki-client