Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/fqJIeR8qENpZoC1iCr9wr-vu_CE.roa
File: fqJIeR8qENpZoC1iCr9wr-vu_CE.roa (raw, json)
Hash identifier: WVQsnJRVYcT4f+luQ56PE0iLOuIhs5r0NUo7HHUZNNA=
Subject key identifier: 7E:A2:48:79:1F:2A:10:DA:59:A0:2D:62:0A:BF:70:AF:EB:EE:FC:21
Certificate issuer: /CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Certificate serial: 019422FBC9C12DD1D1AF3EC06F8CBEEB6F04
Authority key identifier: 4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/fqJIeR8qENpZoC1iCr9wr-vu_CE.roa
Signing time: Wed 01 Jan 2025 17:48:34 +0000
ROA not before: Wed 01 Jan 2025 17:48:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 64267
IP address blocks: 193.187.134.0/24 maxlen: 24
193.187.135.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:c9:c1:2d:d1:d1:af:3e:c0:6f:8c:be:eb:6f:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Validity
Not Before: Jan 1 17:48:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7ea248791f2a10da59a02d620abf70afebeefc21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:0b:31:78:57:09:3c:46:d4:7f:76:af:7b:26:
01:d2:03:7a:72:76:1a:38:4b:42:65:99:2f:a7:3e:
b9:ec:6e:45:b7:05:cf:c1:a3:74:ee:c5:88:a7:6b:
dd:c3:d0:bd:5e:d0:b5:bc:71:ea:e5:27:73:67:b6:
6a:47:92:3b:86:07:a3:67:f4:b9:62:ff:0c:45:d2:
5e:05:5e:75:e0:80:12:20:3f:a3:c8:06:2f:9c:4c:
a8:8f:d6:46:5f:58:85:25:b5:bf:8a:15:2d:8a:dc:
cf:dc:0e:f8:bb:0a:da:63:10:54:b1:f0:2d:9c:9c:
5d:d1:45:2a:ad:7a:02:f2:ae:b9:7f:6e:89:65:65:
39:e0:e6:5c:ac:d8:35:4e:c6:f2:68:59:f9:99:ec:
71:10:55:ee:c1:d0:39:c4:e4:93:f3:e6:6a:14:ef:
2e:76:74:f6:44:9d:d1:75:eb:3d:24:91:ef:5b:c4:
c0:7e:ff:71:4f:ca:b0:b9:27:3e:17:9f:8e:0f:24:
90:01:bf:14:e4:50:39:a9:5a:6d:0b:de:19:d2:86:
3b:29:a6:6e:c6:b2:51:47:9e:b2:cb:5d:11:8e:c9:
ae:34:a7:fc:04:41:79:32:8a:85:15:88:51:c9:e0:
64:4a:de:3a:f0:39:1c:5e:2c:3a:d6:10:e6:dc:c1:
10:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:A2:48:79:1F:2A:10:DA:59:A0:2D:62:0A:BF:70:AF:EB:EE:FC:21
X509v3 Authority Key Identifier:
keyid:4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/fqJIeR8qENpZoC1iCr9wr-vu_CE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.187.134.0/23
Signature Algorithm: sha256WithRSAEncryption
d9:df:68:73:25:76:51:57:71:47:37:39:ee:4b:2d:a2:a9:2f:
7f:fd:a5:b9:00:fd:64:e7:ea:ff:b3:26:f9:9f:1d:bc:8f:f0:
4e:6f:15:7c:e6:c6:ee:ee:76:3c:b7:10:5f:e8:d0:54:36:db:
22:87:f0:a7:dd:3a:72:89:80:7e:0f:6d:53:8c:6b:c7:b1:db:
05:08:e0:cf:05:ac:9d:f0:67:17:f5:dd:79:65:2f:0d:b9:f5:
4c:82:05:47:cd:ed:ab:3c:bd:79:df:89:43:cd:f1:ce:4e:2c:
7e:12:79:da:5e:ff:48:21:86:32:b6:cc:8e:b1:49:df:97:9c:
30:4f:8c:5e:c1:ec:0c:9d:70:f4:9e:58:32:65:b2:2a:b2:fb:
b4:08:be:45:75:48:cb:d3:76:34:91:dc:a0:dc:bd:44:45:a5:
c3:03:bb:b3:ea:34:e6:f2:68:b1:57:b1:9d:f5:26:ea:d8:41:
c8:f6:8c:c7:9a:1f:84:57:35:16:3e:b1:f4:1c:27:a1:c2:3b:
4a:57:89:4d:31:86:24:92:5c:fa:8e:c5:6b:28:58:24:0b:af:
78:d3:13:96:ba:a6:9b:44:03:41:2e:03:7b:3a:5b:1e:3a:75:
7f:25:34:b5:bb:13:c7:70:71:e6:53:ae:aa:ed:d7:86:90:6a:
d2:7b:3e:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 11:00:19 2025 by rpki-client