Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/283fee-2c36-4e70-bbe4-07e36efc5e42/1/pT_R2pT5fkigCUc46LgmyNvu26w.roa
File: pT_R2pT5fkigCUc46LgmyNvu26w.roa (raw, json)
Hash identifier: f5EDq84NioAgiZfb2l0opuOPnSnHoDIa4FyPu++58Hk=
Subject key identifier: A5:3F:D1:DA:94:F9:7E:48:A0:09:47:38:E8:B8:26:C8:DB:EE:DB:AC
Certificate issuer: /CN=846af54e6558cfc86252946e4692ab92777c0e10
Certificate serial: 019425FD738BD4AA5DA619FC459BFFF1ECFC
Authority key identifier: 84:6A:F5:4E:65:58:CF:C8:62:52:94:6E:46:92:AB:92:77:7C:0E:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hGr1TmVYz8hiUpRuRpKrknd8DhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/283fee-2c36-4e70-bbe4-07e36efc5e42/1/pT_R2pT5fkigCUc46LgmyNvu26w.roa
Signing time: Thu 02 Jan 2025 07:49:14 +0000
ROA not before: Thu 02 Jan 2025 07:49:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 193.24.42.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:73:8b:d4:aa:5d:a6:19:fc:45:9b:ff:f1:ec:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=846af54e6558cfc86252946e4692ab92777c0e10
Validity
Not Before: Jan 2 07:49:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a53fd1da94f97e48a0094738e8b826c8dbeedbac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:83:1a:ca:cf:c1:cd:28:f7:42:de:08:e3:27:
c2:bb:87:ad:20:f8:78:b0:eb:24:cf:fb:c2:3d:6d:
f6:fa:c2:9c:49:ca:f0:9e:a2:b4:25:ea:3c:37:58:
f1:19:8b:1b:ce:b8:86:bb:79:34:cb:9f:b0:a0:31:
14:e9:aa:27:ed:c5:8c:dc:84:75:af:b2:54:76:2e:
76:f5:3f:d6:6b:71:bb:c7:29:27:45:69:87:f0:02:
34:57:6e:6d:a2:50:ad:1e:d8:4a:fd:d4:ac:f2:5e:
01:9e:36:e1:64:bd:1b:4b:15:7f:6a:20:10:4a:36:
d2:ad:03:ad:49:a3:ca:ce:c7:d7:1b:a8:6d:f1:33:
78:e6:90:0e:d3:47:69:9b:3b:b3:07:15:fd:86:bd:
8f:9f:f5:85:42:6b:c7:81:d0:2f:bd:de:53:84:57:
e3:16:3f:66:0a:1d:10:97:c2:5e:11:ba:d2:c4:6b:
2b:c4:88:7a:c1:be:80:54:43:57:d3:33:eb:36:49:
40:79:99:67:c7:f6:3d:6b:13:cb:6b:f4:70:c4:81:
2e:a5:5e:b0:d1:ee:1c:b0:cc:a4:d8:b0:eb:bd:c7:
40:aa:90:98:b8:15:f8:b6:67:17:84:ae:90:6e:9d:
09:c6:65:64:af:f0:02:f6:04:cc:3a:d4:ae:f9:d4:
5a:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:3F:D1:DA:94:F9:7E:48:A0:09:47:38:E8:B8:26:C8:DB:EE:DB:AC
X509v3 Authority Key Identifier:
keyid:84:6A:F5:4E:65:58:CF:C8:62:52:94:6E:46:92:AB:92:77:7C:0E:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hGr1TmVYz8hiUpRuRpKrknd8DhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/283fee-2c36-4e70-bbe4-07e36efc5e42/1/pT_R2pT5fkigCUc46LgmyNvu26w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/283fee-2c36-4e70-bbe4-07e36efc5e42/1/hGr1TmVYz8hiUpRuRpKrknd8DhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.24.42.0/23
Signature Algorithm: sha256WithRSAEncryption
8c:bb:8e:ab:b4:98:61:03:0b:fa:2d:88:4a:02:44:6e:b9:d2:
2a:40:86:6a:a5:63:c7:09:05:4c:17:13:5e:97:76:ca:93:7f:
a2:5e:00:be:34:2a:73:84:65:30:c0:04:39:36:23:25:5e:b4:
23:6c:ae:23:03:d4:2a:76:bd:b9:9b:6e:a0:68:b1:1d:e9:e4:
35:1d:26:3c:d5:5b:5e:f6:7e:13:4d:cb:7e:c7:2f:f3:d9:be:
08:5f:97:7e:0c:01:89:f3:9b:4d:87:8b:78:e5:f5:4e:d4:a2:
70:92:29:26:26:6d:bc:b2:ce:6c:68:39:39:1f:15:90:07:be:
45:45:a2:1f:b5:e6:86:68:cb:18:d3:a0:64:28:3b:27:9d:fe:
29:4f:85:50:5e:89:22:fb:ef:1f:d7:bd:fe:23:ed:bd:e4:aa:
f6:ce:61:7b:3d:c4:29:61:40:f7:31:65:1c:17:3d:db:51:23:
17:e4:c0:a6:89:e7:83:36:57:45:7c:67:de:f2:1e:2f:db:72:
29:be:3d:c8:7e:6b:d1:d9:69:d0:68:d3:e7:52:ca:b5:1e:fd:
fe:2f:be:a0:1b:8e:37:29:59:05:fd:75:66:b3:0f:4f:ef:d3:
24:b4:0a:cd:2c:ec:6d:ac:53:5d:2b:8a:6d:e8:30:6a:a5:27:
88:c0:47:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:41:07 2025 by rpki-client