Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/G0YemSzcmXzSb_RCiv5EeHVOzC4.roa
File: G0YemSzcmXzSb_RCiv5EeHVOzC4.roa (raw, json)
Hash identifier: SFW79zPqzPEtJDLVVPe4MliQmLEuxE2XgrrkZaLPuj4=
Subject key identifier: 1B:46:1E:99:2C:DC:99:7C:D2:6F:F4:42:8A:FE:44:78:75:4E:CC:2E
Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d
Certificate serial: 01942067C46DDE561991D04C8C842784C2A2
Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/G0YemSzcmXzSb_RCiv5EeHVOzC4.roa
Signing time: Wed 01 Jan 2025 05:47:38 +0000
ROA not before: Wed 01 Jan 2025 05:47:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21273
IP address blocks: 193.5.252.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:c4:6d:de:56:19:91:d0:4c:8c:84:27:84:c2:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d
Validity
Not Before: Jan 1 05:47:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1b461e992cdc997cd26ff4428afe4478754ecc2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:54:80:19:59:4b:03:25:32:27:28:41:ce:ff:
4a:92:86:8c:4d:92:86:bc:98:99:26:f0:fb:ab:9f:
6c:04:6e:f5:80:7f:a1:ed:3c:c3:20:b1:b7:d5:d0:
3a:fc:04:b6:7a:b4:c8:79:1e:ed:ea:7b:cd:59:fe:
a6:4b:f2:37:eb:57:4c:f6:4c:3c:1a:66:0d:5b:fa:
8b:fb:f1:03:63:3c:51:bf:57:9b:60:15:f4:9e:a8:
0c:50:2e:c0:db:c3:ec:2e:e8:bd:13:86:07:c7:2d:
a3:7d:43:32:7d:0e:88:bd:eb:5b:8e:8e:95:62:1b:
34:12:59:ca:87:3d:66:cc:7d:e9:a0:7f:e7:59:bd:
4f:eb:9b:0a:fa:2d:be:97:ca:80:8d:39:6f:53:6b:
53:89:e0:a1:65:3f:94:03:f2:72:0b:66:d0:91:01:
e6:29:05:3f:3f:9c:9b:ad:82:58:c7:d5:2f:13:f5:
51:c1:ec:64:9f:cb:43:80:88:c2:df:34:b0:44:61:
c2:db:7a:b9:a4:66:15:a9:4c:93:df:15:30:b0:4a:
33:d6:10:05:b4:eb:69:34:99:86:e7:f1:ae:54:45:
7b:87:15:68:6c:4c:cb:da:14:2c:f3:99:04:72:95:
06:ce:2a:86:e6:b8:36:ab:6f:87:fc:34:dd:65:a2:
93:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:46:1E:99:2C:DC:99:7C:D2:6F:F4:42:8A:FE:44:78:75:4E:CC:2E
X509v3 Authority Key Identifier:
keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/G0YemSzcmXzSb_RCiv5EeHVOzC4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.5.252.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:d9:2a:e3:37:63:14:e9:03:05:b6:84:f9:94:5b:3c:82:6c:
8a:1c:12:78:cb:eb:78:ff:3f:87:9f:14:d3:1d:3f:1e:7d:81:
52:06:2f:8c:ec:2e:6c:d1:4b:bd:f3:2b:0d:c9:60:54:4c:9c:
2f:58:1e:df:d1:62:be:bf:a1:34:6c:09:c0:db:e8:f3:42:6a:
85:3a:35:54:d5:c6:87:c5:55:95:d1:75:60:9b:71:5b:ea:40:
a2:03:ca:0f:b2:c6:ec:3e:ce:0a:e9:78:39:ea:3a:80:1c:b6:
cc:77:3d:42:13:42:85:18:bc:fd:93:c8:ca:45:a9:c5:cf:a3:
4c:49:d1:e4:b8:51:cd:81:49:7f:d4:6c:57:87:b9:7e:df:73:
96:d8:87:04:16:fd:dc:61:10:22:37:11:ea:bb:76:6e:66:34:
91:80:40:f1:1a:1d:86:5b:71:d2:48:7b:c5:e4:87:a9:4c:e3:
98:ae:a4:2c:8f:81:37:d5:a9:16:a3:ff:e1:69:f6:12:5b:1b:
b1:0a:0b:48:8f:d0:4a:9e:52:74:b6:df:44:6e:ce:a1:8b:3d:
4b:ab:03:9b:4f:1b:ae:af:49:19:4f:1c:d5:9e:f2:b4:a7:5e:
4d:1e:96:d9:39:d8:c0:99:50:f4:a5:18:7b:55:99:b3:24:31:
34:7a:e5:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:31:15 2025 by rpki-client