Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/DFDszuXuc2hfrycMUwpdeooBghw.roa
File: DFDszuXuc2hfrycMUwpdeooBghw.roa (raw, json)
Hash identifier: otFH7W3ndffM37kUJn/T3gQIplpf4K8R+LfuzXOLuBY=
Subject key identifier: 0C:50:EC:CE:E5:EE:73:68:5F:AF:27:0C:53:0A:5D:7A:8A:01:82:1C
Certificate issuer: /CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Certificate serial: 019422FBCDE73DEE54DE50DF077E7D32600E
Authority key identifier: 4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/DFDszuXuc2hfrycMUwpdeooBghw.roa
Signing time: Wed 01 Jan 2025 17:48:35 +0000
ROA not before: Wed 01 Jan 2025 17:48:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211567
IP address blocks: 193.111.79.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:cd:e7:3d:ee:54:de:50:df:07:7e:7d:32:60:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Validity
Not Before: Jan 1 17:48:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0c50eccee5ee73685faf270c530a5d7a8a01821c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:fa:69:8e:10:5f:fb:33:cf:82:7a:45:b1:c0:
a2:28:0f:90:87:5f:fc:2c:3c:82:99:93:af:50:fb:
b1:52:f8:8d:85:8b:c3:08:f3:0f:e0:cb:c2:e3:5e:
3c:eb:09:03:b2:33:5e:63:35:02:77:c1:bc:72:34:
47:50:e7:ea:98:56:cc:9f:98:5d:5c:49:ea:9b:ae:
72:e9:39:97:f4:39:db:35:56:9f:3a:0f:59:25:e9:
4a:2d:ba:13:b1:35:3d:5a:07:b4:34:72:c5:cb:c2:
ac:cf:70:02:dd:76:68:e2:42:43:33:f5:71:df:84:
04:ff:48:93:df:d1:87:bd:4f:84:fc:b6:ed:0b:b6:
56:93:25:dd:c8:b5:fb:3d:11:32:22:d3:15:42:de:
af:d6:cc:c0:0e:a7:26:20:b7:7a:35:26:fb:76:6a:
3d:c8:59:a4:2c:75:35:04:0e:a2:70:35:f7:13:07:
76:a1:a1:61:81:ce:fe:fa:56:3a:d9:64:ec:84:e9:
39:11:5a:82:87:87:14:15:cd:0c:22:0f:8c:96:3d:
df:ff:f1:c4:d5:39:1e:ab:55:5b:6a:ac:ef:31:89:
f9:dc:80:6d:ef:ee:23:1f:0f:3b:51:ff:3c:fa:ae:
c5:c7:ba:87:a0:9d:f3:b6:9b:32:c0:47:88:3a:4b:
4a:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:50:EC:CE:E5:EE:73:68:5F:AF:27:0C:53:0A:5D:7A:8A:01:82:1C
X509v3 Authority Key Identifier:
keyid:4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/DFDszuXuc2hfrycMUwpdeooBghw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.111.79.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:bf:c8:a8:f4:2b:28:47:0f:9d:f4:08:b8:0e:d3:b9:99:6d:
38:4d:58:1b:3b:b8:68:b8:b4:cd:02:c6:63:0d:d6:b1:4f:44:
28:b4:37:5f:ad:1e:ab:22:57:1c:a0:75:83:1b:a7:e5:54:e8:
af:2a:7a:93:a1:74:24:39:be:b4:67:78:76:a5:b8:bf:26:1f:
ca:bb:00:d8:ee:35:83:d9:68:c6:ac:57:bb:f3:f9:8c:88:84:
74:ee:2c:b7:04:40:c6:10:1b:d2:5a:2f:54:2b:07:db:3e:e3:
f2:dc:29:45:91:0f:2c:cc:56:5d:98:e1:ea:c1:fd:6d:dc:77:
be:78:cf:93:cc:ca:dc:72:9f:14:5e:72:75:ec:05:26:9f:80:
41:96:7b:22:d9:a7:c1:b9:8f:9f:bd:10:ae:17:6c:46:28:5b:
28:3e:76:38:c5:d2:11:4f:f3:31:ea:14:2b:90:4c:1a:47:9b:
d9:6a:4a:66:29:50:74:c6:b8:30:c4:52:c3:4f:c8:eb:d8:a9:
ac:c8:62:2e:52:dd:4a:9d:96:99:76:7a:78:43:e1:1f:7b:86:
33:17:b2:83:bc:9c:a5:4d:ff:89:b2:08:10:3a:4a:aa:82:c2:
56:dc:29:47:27:a0:27:2b:5d:20:6e:99:49:b5:b5:5e:34:d9:
6e:38:7c:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 12:27:44 2025 by rpki-client