Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/f427cc-3267-4581-bf8b-a3052f56f3c7/1/fIvnp6gdPn80_yvJlotdGcog18A.roa
File: fIvnp6gdPn80_yvJlotdGcog18A.roa (raw, json)
Hash identifier: 1W78f6oopiNGfLBKpZ4dFa8NkFSnHtLBkN2gej0x8BM=
Subject key identifier: 7C:8B:E7:A7:A8:1D:3E:7F:34:FF:2B:C9:96:8B:5D:19:CA:20:D7:C0
Certificate issuer: /CN=92c570fcaa68844a5fa79de2ca2e7bc1bec91191
Certificate serial: 019427482ED5DB162CCC42B47F2B12017673
Authority key identifier: 92:C5:70:FC:AA:68:84:4A:5F:A7:9D:E2:CA:2E:7B:C1:BE:C9:11:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ksVw_KpohEpfp53iyi57wb7JEZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/f427cc-3267-4581-bf8b-a3052f56f3c7/1/fIvnp6gdPn80_yvJlotdGcog18A.roa
Signing time: Thu 02 Jan 2025 13:50:29 +0000
ROA not before: Thu 02 Jan 2025 13:50:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9145
IP address blocks: 193.30.67.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:2e:d5:db:16:2c:cc:42:b4:7f:2b:12:01:76:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92c570fcaa68844a5fa79de2ca2e7bc1bec91191
Validity
Not Before: Jan 2 13:50:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7c8be7a7a81d3e7f34ff2bc9968b5d19ca20d7c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:93:64:a6:d1:8e:50:da:c6:56:4c:60:8e:9a:
bc:1c:9f:29:1d:ff:8c:cf:c2:0d:a5:22:eb:5e:39:
2b:30:b6:a4:33:09:ec:39:16:2a:00:90:09:2d:d1:
c6:40:af:73:92:17:ef:d7:3e:e2:7c:ec:89:2a:f0:
06:7c:6a:21:da:87:ad:e3:b8:5d:be:c9:83:2a:06:
d1:4c:bc:c3:f0:73:86:af:a2:6c:d8:57:c2:f2:c6:
3a:9e:e6:1e:be:57:9a:21:e2:8c:ae:b0:43:5d:61:
f2:e9:f4:f7:dc:d7:84:5a:d1:8a:af:98:ba:f3:0e:
53:88:e9:a6:e2:f7:e5:e8:bf:f7:8a:f4:6b:10:01:
98:8a:f0:2c:ec:95:fa:eb:57:93:1b:63:08:e2:ae:
5a:3e:de:6b:09:ba:1c:d4:b9:89:7c:dd:d3:66:30:
95:8e:a5:53:cd:4e:96:71:7e:79:6c:14:be:72:12:
b0:ee:01:78:a0:b2:2f:26:5d:5e:5d:73:13:b0:b9:
6c:84:ca:aa:e1:6b:53:01:1c:1b:10:76:40:30:19:
9d:5c:39:ec:2d:32:8a:15:87:04:3e:26:94:79:49:
27:9c:76:b6:62:44:29:27:1f:17:68:97:0d:6c:66:
cc:1d:af:e7:25:e0:44:1a:b8:d1:1a:a1:de:8e:b7:
82:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:8B:E7:A7:A8:1D:3E:7F:34:FF:2B:C9:96:8B:5D:19:CA:20:D7:C0
X509v3 Authority Key Identifier:
keyid:92:C5:70:FC:AA:68:84:4A:5F:A7:9D:E2:CA:2E:7B:C1:BE:C9:11:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ksVw_KpohEpfp53iyi57wb7JEZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/f427cc-3267-4581-bf8b-a3052f56f3c7/1/fIvnp6gdPn80_yvJlotdGcog18A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/f427cc-3267-4581-bf8b-a3052f56f3c7/1/ksVw_KpohEpfp53iyi57wb7JEZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.30.67.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:b1:15:51:39:5f:4c:37:ac:8c:1d:c7:07:22:d7:30:5d:c4:
3e:8e:1b:38:26:c6:a3:08:9a:47:52:5e:9e:a0:47:05:54:35:
0b:c8:ad:6e:07:3e:b1:22:16:d6:36:a1:06:bd:db:36:f3:de:
de:8e:8c:c4:0e:be:e7:dc:57:e5:35:0e:60:bb:77:46:ab:1b:
5d:66:e8:6f:29:dc:64:f0:45:06:9f:e2:41:08:10:49:16:31:
63:e3:e0:7f:4e:6b:5f:06:a2:d2:7a:43:e8:e3:62:de:f0:81:
5b:4f:82:e0:dd:50:ee:74:0f:90:f0:05:06:1e:6f:fb:f3:43:
9b:b0:19:61:54:67:67:2a:56:2b:59:4d:b0:00:a8:6e:20:82:
61:e5:94:fb:ac:26:19:3c:c5:19:71:8a:ce:ed:7f:4e:d2:0e:
42:43:09:a4:83:d0:8f:1d:75:1a:30:5b:e7:2b:95:09:30:a2:
14:d7:4d:dd:af:d9:41:38:52:e9:09:1b:cc:7b:25:43:53:81:
af:13:23:d2:04:64:c3:e2:9e:3c:b7:74:e6:ad:35:90:f4:55:
04:b6:27:34:1c:8b:32:1b:44:47:26:1a:30:04:f2:94:4f:f3:
64:fd:d7:8a:36:1d:7a:39:e8:a4:b2:d8:1c:03:74:65:ec:ef:
e5:93:c7:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 01:16:00 2025 by rpki-client