Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/1-1R0m4NLg0whN_jlOGLgMj10Yv4.roa
File: 1-1R0m4NLg0whN_jlOGLgMj10Yv4.roa (raw, json)
Hash identifier: UmXcl4cNHFJ4GA4EWQGPWremJ06Z5fbEnVJyGyU1F2k=
Subject key identifier: FB:54:74:9B:83:4B:83:4C:21:37:F8:E5:38:62:E0:32:3D:74:62:FE
Certificate issuer: /CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Certificate serial: 019422FBCF12C5A17DA644FF7C8749755D64
Authority key identifier: 4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/1-1R0m4NLg0whN_jlOGLgMj10Yv4.roa
Signing time: Wed 01 Jan 2025 17:48:35 +0000
ROA not before: Wed 01 Jan 2025 17:48:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212598
IP address blocks: 193.17.6.0/24 maxlen: 24
193.111.78.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:cf:12:c5:a1:7d:a6:44:ff:7c:87:49:75:5d:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Validity
Not Before: Jan 1 17:48:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fb54749b834b834c2137f8e53862e0323d7462fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:6a:de:92:ba:bd:a7:fc:d7:3c:f9:71:a4:ed:
1a:a7:36:84:90:06:92:23:c1:e2:7d:85:ef:7b:ba:
4d:7e:95:72:3c:d8:1f:86:1f:75:11:e6:86:e7:3e:
2e:5c:86:b2:7e:5c:be:6a:b4:03:1f:60:aa:9d:43:
d0:64:5f:ba:10:9d:f7:12:07:cd:4a:92:bb:0f:3d:
66:06:c0:e9:85:e8:39:53:5c:6f:d4:a7:36:2d:b8:
ff:85:dc:d9:ff:17:51:10:02:da:b8:01:27:7d:2a:
c0:c0:bd:a0:53:f9:02:49:e1:30:f8:5b:81:34:e2:
1f:3b:d7:cd:0a:17:77:74:53:3f:9e:f0:55:1a:5d:
3a:17:4e:76:83:37:07:cc:1b:e8:f5:9b:cd:e9:aa:
c6:ad:f1:7b:99:e3:9d:db:ab:3c:a8:42:6c:b7:17:
09:a2:df:57:03:4b:68:77:9a:82:63:4f:d8:08:3d:
4d:4a:ee:4b:a3:b4:06:12:4d:24:7f:e6:8b:bc:5d:
fa:ca:a9:df:98:91:84:14:37:15:1b:d2:4d:d7:9e:
15:99:8a:a3:29:55:08:0c:05:bb:3b:d1:5a:39:06:
90:2a:57:a9:cc:6a:a6:1e:95:07:53:60:6d:c6:a8:
bb:4a:08:c3:6c:a9:02:9e:19:e4:5b:4b:c6:39:29:
57:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:54:74:9B:83:4B:83:4C:21:37:F8:E5:38:62:E0:32:3D:74:62:FE
X509v3 Authority Key Identifier:
keyid:4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/1-1R0m4NLg0whN_jlOGLgMj10Yv4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.17.6.0/24
193.111.78.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:89:f4:79:73:e5:47:0e:56:ed:7a:fb:7d:17:e7:c6:f1:67:
95:ac:30:68:94:d2:ab:f3:02:8a:cd:d6:b7:cd:00:4e:f8:e6:
44:ac:bc:e3:39:ee:7f:e0:1e:0f:53:be:80:26:de:8b:18:0e:
8a:59:87:e3:3f:e2:65:44:49:12:d3:14:c8:ae:36:9f:77:d0:
6e:44:1a:50:95:33:47:cf:ad:25:d8:9e:63:cd:9b:f8:f9:87:
a1:a8:72:e2:01:10:d7:6d:b2:ca:b5:c7:3c:28:8f:01:1f:8b:
c7:d9:73:0d:25:25:80:e9:42:4c:c8:cf:df:f2:2e:64:7d:b9:
5a:d7:c2:90:35:04:44:b5:d8:b8:c5:6d:11:63:b4:3b:00:39:
d9:c9:db:b2:c4:95:67:59:3d:e8:33:04:7e:3a:4b:b0:0f:80:
3f:e4:ec:e3:16:f1:25:5c:52:47:24:87:eb:13:62:ca:f8:01:
36:b1:a8:cb:f2:12:c7:39:31:6c:bc:1d:ac:26:85:d9:5d:43:
06:50:c1:49:1a:e4:65:29:e1:8d:df:30:b8:34:56:99:5f:37:
70:f8:09:45:c1:39:ce:5f:23:0b:71:5e:aa:3b:0e:6b:1a:72:
bd:8f:b3:ef:57:ba:2f:e3:7b:36:65:04:9a:84:2a:75:b6:22:
6c:19:7a:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 12:31:50 2025 by rpki-client