Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/X73zSfeynuQ2HFhZg92JJjuC-hI.roa
File: X73zSfeynuQ2HFhZg92JJjuC-hI.roa (raw, json)
Hash identifier: S3jxFVJaRrRBYwj6SGNBku30PnQhyId+dYaYtS51gvo=
Subject key identifier: 5F:BD:F3:49:F7:B2:9E:E4:36:1C:58:59:83:DD:89:26:3B:82:FA:12
Certificate issuer: /CN=4f36103344fcd3b5759f2db3f3c7071376f9e233
Certificate serial: 019426D9B63ACFB199B83F80B0F683B39334
Authority key identifier: 4F:36:10:33:44:FC:D3:B5:75:9F:2D:B3:F3:C7:07:13:76:F9:E2:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TzYQM0T807V1ny2z88cHE3b54jM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/X73zSfeynuQ2HFhZg92JJjuC-hI.roa
Signing time: Thu 02 Jan 2025 11:49:49 +0000
ROA not before: Thu 02 Jan 2025 11:49:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12301
IP address blocks: 193.194.159.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:b6:3a:cf:b1:99:b8:3f:80:b0:f6:83:b3:93:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f36103344fcd3b5759f2db3f3c7071376f9e233
Validity
Not Before: Jan 2 11:49:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5fbdf349f7b29ee4361c585983dd89263b82fa12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:53:1e:57:36:7c:da:84:9c:6b:e9:92:1e:b4:
44:f6:93:50:e5:16:01:0c:3a:10:ff:c0:fe:c3:52:
e2:16:31:e2:c9:f4:e7:10:3b:e1:6e:99:a6:77:ca:
2a:7b:15:41:27:07:f2:3f:bc:bc:f5:56:38:c1:be:
bb:9b:8f:d1:eb:a1:ce:9f:45:a9:2d:59:8e:8a:03:
ee:b5:0d:af:d9:d4:68:a5:e5:aa:02:7f:56:f4:a6:
f9:04:e6:71:c0:e5:1b:69:15:1e:05:51:80:f2:f8:
4a:70:8b:6c:43:57:c9:16:95:a9:da:8d:e5:be:a7:
0d:5e:2f:ab:05:ba:69:c4:9f:cb:26:ba:e2:b9:fe:
7a:58:01:95:62:a6:19:b3:16:fe:d5:a0:b9:ff:0b:
3b:71:76:bf:b2:a0:db:61:92:7d:7d:58:04:81:d0:
20:f2:8a:1f:2f:dc:48:da:7f:54:2b:7f:96:f9:e2:
14:ca:7d:3f:d9:42:d6:e9:8b:a1:49:dc:ef:e8:6b:
0a:4b:a0:aa:79:ad:dd:c7:93:2d:e9:31:44:7e:64:
37:a9:f3:74:5d:5d:41:ba:34:fb:22:d5:fe:88:bd:
71:6e:5a:68:5c:71:f0:50:75:f5:f7:64:3b:57:2c:
c1:36:a3:31:41:8a:88:1b:ef:b4:67:73:35:a7:2f:
e7:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:BD:F3:49:F7:B2:9E:E4:36:1C:58:59:83:DD:89:26:3B:82:FA:12
X509v3 Authority Key Identifier:
keyid:4F:36:10:33:44:FC:D3:B5:75:9F:2D:B3:F3:C7:07:13:76:F9:E2:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TzYQM0T807V1ny2z88cHE3b54jM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/X73zSfeynuQ2HFhZg92JJjuC-hI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/TzYQM0T807V1ny2z88cHE3b54jM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.194.159.0/24
Signature Algorithm: sha256WithRSAEncryption
54:5d:07:7e:84:37:bf:93:ed:39:3b:ed:27:d5:d7:f8:a3:0b:
05:4c:47:44:98:db:ac:98:f5:5a:cd:81:d7:1f:a1:c0:b0:29:
98:68:27:4a:17:2d:68:cc:29:07:d1:60:3e:c1:67:24:bd:d3:
9c:79:c0:4c:07:01:79:2d:86:27:a3:3b:e7:bf:bb:8c:9b:6a:
73:f6:f1:ea:11:fb:e5:96:39:df:52:b4:3a:c1:1c:02:08:8a:
3d:78:bd:b8:ed:12:37:c6:fd:bb:8e:f4:65:70:39:0a:54:83:
d0:21:4b:a1:b4:82:ae:5c:20:a3:ab:29:56:cd:60:6f:ca:94:
4f:9f:05:8d:f2:1d:8b:d9:64:4d:4f:fd:1f:53:bb:30:3c:3e:
5c:c8:00:94:1d:a7:07:2a:f7:ad:b4:04:d7:1c:bc:4d:db:c9:
d6:5c:80:0a:97:41:4a:0c:27:1e:5f:3b:d9:94:e3:ab:03:fc:
40:a2:6b:fa:d9:1a:a7:dc:5c:c4:12:43:1b:4e:c9:ed:8d:b3:
ad:e0:c9:fd:27:fa:8b:6b:03:55:54:78:e2:9f:13:05:a1:f5:
42:74:ad:df:cd:a7:82:3f:44:2e:51:f2:8e:36:ea:70:46:9e:
4d:a9:69:61:68:11:f9:df:89:e7:cc:39:c0:a8:ed:b9:f4:d7:
08:20:27:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 03:22:45 2025 by rpki-client