Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/R11A7jz7jqXSMEWHaGmquMBE_9A.roa
File: R11A7jz7jqXSMEWHaGmquMBE_9A.roa (raw, json)
Hash identifier: kIQ7KCWhA5FinDOOth20vCc7o3MUFEz/B/kFKQ0YilY=
Subject key identifier: 47:5D:40:EE:3C:FB:8E:A5:D2:30:45:87:68:69:AA:B8:C0:44:FF:D0
Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d
Certificate serial: 01942067CEEE3A5ECF17C7863B20DAFB0641
Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/R11A7jz7jqXSMEWHaGmquMBE_9A.roa
Signing time: Wed 01 Jan 2025 05:47:41 +0000
ROA not before: Wed 01 Jan 2025 05:47:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57370
IP address blocks: 193.247.166.0/23 maxlen: 25
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:ce:ee:3a:5e:cf:17:c7:86:3b:20:da:fb:06:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d
Validity
Not Before: Jan 1 05:47:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=475d40ee3cfb8ea5d23045876869aab8c044ffd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:07:c7:08:e7:75:19:3d:2f:08:cd:6a:a5:0b:
30:ed:25:65:78:b3:66:b2:8b:0a:91:79:85:92:57:
41:ce:eb:dc:e6:58:00:03:cf:8f:8b:42:19:39:9e:
07:f3:bb:de:1e:bb:21:6d:0d:c4:67:b5:b6:50:b8:
df:8b:8f:67:28:0e:68:3d:0a:8b:9e:ca:ad:72:0f:
c5:4a:dd:ab:8a:a9:60:67:dc:65:64:cf:c7:73:a9:
d5:0e:0a:c8:be:c3:aa:93:7d:a7:f1:b6:bb:c7:ed:
b3:52:83:a3:72:df:68:32:2f:ed:5c:f6:84:ee:cf:
f2:1e:17:e4:0e:b1:9d:8e:15:03:59:42:de:19:47:
dd:7a:e1:96:2d:0d:cf:d2:3f:45:37:69:54:6b:5f:
aa:49:26:6e:c3:11:00:23:83:5e:9c:09:d2:73:6f:
79:15:cd:1d:81:bc:a2:0e:00:9e:c2:a2:ad:03:ab:
8e:0b:e2:c2:c8:84:72:1b:80:81:09:66:4a:aa:e6:
25:f5:62:bd:71:c3:48:9a:ed:2a:4c:b7:d9:c8:ea:
c7:53:89:28:89:c3:a8:4a:c6:c7:4a:b9:8c:d8:92:
2a:21:4f:89:ed:8f:eb:6a:02:dd:cf:22:1a:01:0a:
e6:a3:d7:4c:f9:6b:2e:8b:0d:04:1f:ec:cf:23:0e:
a7:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:5D:40:EE:3C:FB:8E:A5:D2:30:45:87:68:69:AA:B8:C0:44:FF:D0
X509v3 Authority Key Identifier:
keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/R11A7jz7jqXSMEWHaGmquMBE_9A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.247.166.0/23
Signature Algorithm: sha256WithRSAEncryption
9e:87:5b:d8:fb:bd:a0:8c:4b:ec:d3:34:5f:41:43:29:c7:04:
6d:90:a4:fc:12:a0:0f:e9:f2:70:29:65:07:e1:ff:30:63:98:
03:74:af:f1:16:b8:c1:bf:6d:93:78:21:dd:dd:de:bb:3e:9c:
37:63:7f:d1:c5:b9:dc:b3:02:79:46:45:51:d4:57:7a:be:03:
05:d2:f8:c6:b1:44:d1:18:b2:7f:89:fe:51:3c:7c:90:4b:2f:
42:97:b3:ee:ef:5b:75:ae:9d:22:cd:22:b7:c2:95:64:8b:e9:
f0:ae:0c:c5:7a:8f:bb:69:5b:81:d3:0e:30:a2:a4:6b:da:5b:
e2:43:ad:9b:6d:0f:f7:89:2e:57:41:78:42:0a:78:9a:30:7f:
d3:71:4b:30:9e:57:88:07:34:be:0f:e0:08:36:ee:a6:7c:09:
73:35:52:57:1b:2b:6a:d2:ea:3b:c5:12:c9:ce:50:ae:71:a6:
e9:ee:e1:a9:f3:33:85:10:c2:8d:4e:98:cd:6c:26:70:7e:ea:
8e:3c:56:4a:eb:e4:fb:ae:8d:a9:fc:3e:d8:f1:15:11:55:cb:
f8:e0:2a:f6:f1:cd:eb:c0:47:52:59:94:16:5a:45:db:14:97:
b9:8d:b8:0a:76:f1:bd:e6:11:8b:9b:48:6f:d1:b1:ca:6e:48:
ff:73:a6:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:53:03 2025 by rpki-client