Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/8100db-443a-4c7e-bbe2-efe79c254e25/1/lySFZGvCqX3_-M45mN4bsMvAYak.roa
File: lySFZGvCqX3_-M45mN4bsMvAYak.roa (raw, json)
Hash identifier: /9sPAKQwJv/tHPhsxo8W1GUR2Wva7vFyZnyLH4prJws=
Subject key identifier: 97:24:85:64:6B:C2:A9:7D:FF:F8:CE:39:98:DE:1B:B0:CB:C0:61:A9
Certificate issuer: /CN=a38b176a7d92e501eedaef6c60e8ce3a68d75224
Certificate serial: 0194266A275D3ED5E06A260011D783160509
Authority key identifier: A3:8B:17:6A:7D:92:E5:01:EE:DA:EF:6C:60:E8:CE:3A:68:D7:52:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o4sXan2S5QHu2u9sYOjOOmjXUiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/8100db-443a-4c7e-bbe2-efe79c254e25/1/lySFZGvCqX3_-M45mN4bsMvAYak.roa
Signing time: Thu 02 Jan 2025 09:47:58 +0000
ROA not before: Thu 02 Jan 2025 09:47:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61977
IP address blocks: 193.0.232.0/24 maxlen: 24
2a13:1500::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6a:27:5d:3e:d5:e0:6a:26:00:11:d7:83:16:05:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a38b176a7d92e501eedaef6c60e8ce3a68d75224
Validity
Not Before: Jan 2 09:47:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=972485646bc2a97dfff8ce3998de1bb0cbc061a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:fb:88:58:3b:9d:61:91:0d:c5:02:06:0e:d7:
e2:05:be:cb:d3:ec:1f:61:6e:d0:b6:10:d2:73:3f:
98:2a:0d:15:37:92:0e:f1:68:f4:5e:a0:8e:a9:0c:
0b:ec:48:7c:44:36:dc:50:52:3d:98:70:b4:0a:9e:
0f:ec:51:8c:8b:6d:fc:91:b2:e3:a7:ab:73:03:a5:
58:cd:cd:01:c3:24:7a:fb:e6:b1:3d:87:c4:39:76:
73:88:88:4b:ed:03:fe:36:1d:1c:63:61:10:48:0e:
23:e8:a8:05:b9:62:a2:3c:33:3c:49:a7:e5:45:ee:
b0:31:73:25:df:ea:ac:ec:42:69:53:22:f5:da:85:
93:d6:fa:99:3c:3b:2b:74:e0:ec:25:a2:43:db:f1:
87:f9:61:0f:00:d5:66:19:f7:0f:0d:ec:2d:b7:1d:
90:c6:c0:14:0a:d4:db:c4:bd:06:07:42:c8:9e:07:
43:62:93:0c:03:ed:92:d3:ab:18:11:2b:08:2d:b9:
f7:cc:6e:43:00:15:b7:6d:62:ec:9d:07:2b:4d:a8:
a6:c3:0b:d3:fc:77:94:02:5a:7a:39:88:10:96:59:
a9:07:5c:d5:57:e4:9c:e0:40:a9:43:69:e5:1b:fb:
2c:51:95:28:47:a1:59:73:15:c4:de:4d:67:c2:8c:
bf:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:24:85:64:6B:C2:A9:7D:FF:F8:CE:39:98:DE:1B:B0:CB:C0:61:A9
X509v3 Authority Key Identifier:
keyid:A3:8B:17:6A:7D:92:E5:01:EE:DA:EF:6C:60:E8:CE:3A:68:D7:52:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o4sXan2S5QHu2u9sYOjOOmjXUiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/8100db-443a-4c7e-bbe2-efe79c254e25/1/lySFZGvCqX3_-M45mN4bsMvAYak.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/8100db-443a-4c7e-bbe2-efe79c254e25/1/o4sXan2S5QHu2u9sYOjOOmjXUiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.232.0/24
IPv6:
2a13:1500::/29
Signature Algorithm: sha256WithRSAEncryption
1d:73:f6:90:4e:06:55:3a:b5:2a:f3:7a:22:01:ef:47:38:1b:
04:15:2d:f0:d9:f8:a4:21:2e:81:75:15:06:ef:42:e3:50:26:
ac:2b:d0:ef:01:fc:96:5d:eb:90:6a:df:d6:43:22:b1:3c:30:
d3:90:5d:7c:62:52:28:fb:bb:de:41:89:9b:6f:bc:46:5c:fc:
52:e5:66:94:f1:c7:84:77:85:7d:5b:63:07:8d:1e:da:b0:38:
df:3d:a4:90:6f:0b:a8:19:98:34:8a:e9:f9:4d:1c:df:27:e0:
80:02:93:34:e6:dd:d7:d3:22:c4:41:f8:54:e6:f6:5e:e4:90:
9b:62:36:19:82:e6:4c:12:d5:e9:e7:5a:c2:e1:04:e1:6d:45:
33:43:fe:a1:a2:cf:af:2e:e3:74:c0:66:37:41:86:e0:6c:88:
82:9d:20:7c:e7:85:a8:e3:5e:5b:cf:a5:75:30:e7:6e:40:4b:
0f:83:0c:fe:34:f2:b7:20:45:a9:9d:5f:0d:1c:7a:ba:45:ea:
c3:b8:e6:0a:05:32:fa:4c:c3:79:65:b4:a5:ca:90:ed:38:8e:
f7:71:02:ff:4f:22:9b:fe:6c:0c:50:cc:54:1f:c8:0d:01:19:
b9:c4:26:92:a7:1f:ef:76:2d:16:f2:c1:64:89:4b:18:cd:7f:
d3:70:d2:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 19:15:51 2025 by rpki-client