Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/7Df7JRlOKH8gDykOMVukqaTvgiY.roa
File: 7Df7JRlOKH8gDykOMVukqaTvgiY.roa (raw, json)
Hash identifier: Uk5pTOJ/i2noBJtpzBqTt/F61tyL656kiSZXzf/FEP0=
Subject key identifier: EC:37:FB:25:19:4E:28:7F:20:0F:29:0E:31:5B:A4:A9:A4:EF:82:26
Certificate issuer: /CN=c2c12b527a5d1f8b8bcf230eb611f52f11d52bbf
Certificate serial: 0194221F9FB7C577B18428DBCA6E3793DD1D
Authority key identifier: C2:C1:2B:52:7A:5D:1F:8B:8B:CF:23:0E:B6:11:F5:2F:11:D5:2B:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/7Df7JRlOKH8gDykOMVukqaTvgiY.roa
Signing time: Wed 01 Jan 2025 13:48:05 +0000
ROA not before: Wed 01 Jan 2025 13:48:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14315
IP address blocks: 193.29.14.0/24 maxlen: 24
2a0c:9f00:a000::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:9f:b7:c5:77:b1:84:28:db:ca:6e:37:93:dd:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2c12b527a5d1f8b8bcf230eb611f52f11d52bbf
Validity
Not Before: Jan 1 13:48:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ec37fb25194e287f200f290e315ba4a9a4ef8226
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c5:9e:28:f2:1e:7b:09:29:7b:d6:a0:15:db:
bc:a8:b2:52:fe:80:5a:49:e1:d6:12:ab:80:f1:c5:
31:c0:d9:3a:8c:d0:ef:14:f4:ba:dc:58:a7:98:36:
5f:95:c4:db:7d:08:aa:41:3a:01:eb:f4:de:5f:17:
6c:92:0c:16:6e:f8:fc:4e:ac:92:01:27:66:12:33:
0e:35:e5:47:ec:c9:d2:7d:33:3f:07:88:d3:79:fc:
94:c1:90:79:87:b8:58:50:5a:c3:bd:dd:13:af:2e:
b2:40:13:67:6b:68:e2:3c:71:1a:22:34:1a:5f:f3:
53:b9:8d:95:49:e5:2b:88:32:60:bb:16:3f:78:e3:
8e:9f:bc:4b:49:85:39:0b:1e:bd:fb:0a:ba:75:d3:
22:ea:96:26:f6:12:3f:f1:72:6b:53:52:b6:0e:d1:
2b:e6:ba:6b:04:bc:82:a2:0f:fb:8d:d6:66:4d:a5:
f2:14:c2:ec:74:5d:77:74:1c:0f:41:16:69:4b:02:
a1:a3:fe:e1:4d:7d:f1:12:2b:55:52:38:a3:ec:01:
38:b1:b7:07:2a:1a:39:e2:4e:08:c6:fe:76:5e:77:
ef:aa:14:81:1a:ca:61:75:1b:c1:5e:ce:70:63:a1:
c5:ec:16:7b:88:e4:ae:62:c9:3e:ed:dc:d1:e4:73:
cb:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:37:FB:25:19:4E:28:7F:20:0F:29:0E:31:5B:A4:A9:A4:EF:82:26
X509v3 Authority Key Identifier:
keyid:C2:C1:2B:52:7A:5D:1F:8B:8B:CF:23:0E:B6:11:F5:2F:11:D5:2B:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/7Df7JRlOKH8gDykOMVukqaTvgiY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.29.14.0/24
IPv6:
2a0c:9f00:a000::/48
Signature Algorithm: sha256WithRSAEncryption
71:ed:fa:14:93:84:3b:0e:60:2a:0e:d7:6a:27:43:86:2f:8d:
6b:1d:7e:ba:81:f1:ab:eb:77:21:50:f3:c6:8c:82:5e:23:63:
9d:44:a4:93:a7:b8:7a:ae:05:aa:9b:36:e1:3a:26:ee:42:fd:
13:cc:a1:14:bf:2e:3a:f7:fa:9b:fb:e5:7c:51:91:00:05:ac:
62:93:7b:bc:af:d3:0e:7c:eb:e5:5a:81:38:14:ea:d6:8e:0e:
0e:65:92:ae:74:87:87:7e:23:35:8a:3c:8f:97:7d:33:ef:b9:
16:e7:d7:18:a2:04:59:4c:b7:27:3c:be:79:bf:a9:38:66:f1:
b1:19:82:2a:cf:0b:79:5e:10:8a:cb:83:b8:b2:ea:c7:ad:49:
fe:30:07:00:09:a8:4c:20:c9:6e:14:ca:bb:c5:8a:71:71:9e:
89:3a:d3:ae:17:62:ce:6b:41:7a:e0:a3:e3:36:3f:95:71:24:
c1:57:4d:ca:5e:a1:31:dd:9f:f7:78:9a:16:0c:ff:b8:b2:27:
f8:60:63:8b:99:b3:c7:43:70:87:38:4c:89:3f:b6:d7:c7:07:
b5:5b:16:9e:fc:c6:a1:5c:e5:97:67:86:6b:e9:7a:29:8f:5e:
85:af:c4:33:1d:f2:3f:e2:68:62:ee:f6:40:3b:6e:05:18:fa:
b6:a5:6c:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:37:47 2025 by rpki-client