Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/aer8a26VEmmy2Cy7_8hze3JY1ak.roa
File: aer8a26VEmmy2Cy7_8hze3JY1ak.roa (raw, json)
Hash identifier: 7q3S2TY/+jxhv9AP9xHCanK4ZXfND8pGXb4R0LjZhXM=
Subject key identifier: 69:EA:FC:6B:6E:95:12:69:B2:D8:2C:BB:FF:C8:73:7B:72:58:D5:A9
Certificate issuer: /CN=28855852a4bcd1bf1ec813f3c13b0f1f372f3971
Certificate serial: 01942444E190BBA4C7D0561CCD5BAAD6A68B
Authority key identifier: 28:85:58:52:A4:BC:D1:BF:1E:C8:13:F3:C1:3B:0F:1F:37:2F:39:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KIVYUqS80b8eyBPzwTsPHzcvOXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/aer8a26VEmmy2Cy7_8hze3JY1ak.roa
Signing time: Wed 01 Jan 2025 23:48:01 +0000
ROA not before: Wed 01 Jan 2025 23:48:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205231
IP address blocks: 193.201.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:e1:90:bb:a4:c7:d0:56:1c:cd:5b:aa:d6:a6:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28855852a4bcd1bf1ec813f3c13b0f1f372f3971
Validity
Not Before: Jan 1 23:48:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69eafc6b6e951269b2d82cbbffc8737b7258d5a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:00:31:a3:04:aa:47:b6:0c:c0:29:ca:ff:a9:
bd:dd:27:82:ef:cc:90:22:99:12:25:2c:87:9f:f3:
1d:62:14:a7:0e:15:d5:ed:23:6a:45:c0:4e:3b:b3:
78:59:12:8f:33:90:0e:cc:dd:02:2f:be:87:80:c1:
94:5a:10:ce:93:76:48:57:52:a7:0b:80:da:e6:1c:
97:38:42:0f:f0:ab:83:8f:cd:99:08:ff:45:8b:b5:
65:0b:b8:86:e4:52:2d:79:94:d1:db:4b:d1:a5:c6:
f8:48:ea:1f:94:25:43:db:82:04:59:3c:8a:82:41:
dc:b2:99:fc:65:be:a6:fc:46:ab:fd:c6:eb:f9:09:
41:ce:6d:ef:1d:58:43:b3:13:dd:36:ec:fb:a7:1c:
bb:73:6d:81:14:6c:e6:58:d1:83:b7:4b:d7:7d:c7:
77:85:c5:25:52:44:17:9a:1d:e6:ef:be:e4:0f:1b:
cf:24:ab:b4:40:9d:cc:c7:b7:3a:cd:99:48:89:7c:
d0:89:fd:a5:9a:f1:65:55:a7:a7:f6:2e:03:33:1e:
ff:2b:8c:c6:c9:ed:17:8d:c0:8f:7e:70:fe:d1:04:
77:19:a1:b2:c6:bf:d0:11:c8:07:7e:a4:73:f5:e2:
7e:22:76:a9:f9:b3:b1:3e:19:9d:6f:fc:11:72:8b:
ed:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:EA:FC:6B:6E:95:12:69:B2:D8:2C:BB:FF:C8:73:7B:72:58:D5:A9
X509v3 Authority Key Identifier:
keyid:28:85:58:52:A4:BC:D1:BF:1E:C8:13:F3:C1:3B:0F:1F:37:2F:39:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KIVYUqS80b8eyBPzwTsPHzcvOXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/aer8a26VEmmy2Cy7_8hze3JY1ak.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.201.11.0/24
Signature Algorithm: sha256WithRSAEncryption
48:0d:65:b4:05:27:a1:87:2e:cd:b3:4a:51:be:31:ef:53:d7:
a9:f9:7e:be:b7:1b:30:4b:23:6f:68:f9:0a:84:19:2e:fb:bb:
0b:54:e1:1f:d3:a8:a9:da:e3:d4:29:ab:3a:bc:8b:29:f4:fb:
ce:3e:df:0d:87:f8:36:0e:23:b6:a9:4c:b4:de:75:b3:55:80:
28:a4:2a:24:d5:a0:9b:f0:29:c1:01:34:e7:79:46:9a:97:86:
f2:2e:d7:b5:bd:b4:32:55:f8:c3:28:90:8b:76:7e:df:5e:9c:
68:72:8f:ca:be:6f:65:86:77:2d:f4:5c:df:1d:03:06:f5:b6:
af:29:44:2d:ee:62:29:ac:22:53:ad:e4:cd:b6:cf:c4:e1:ad:
00:2a:9a:44:aa:29:54:69:5c:fe:fb:b8:83:42:86:d6:3b:26:
b0:ad:b2:bb:49:a4:d8:cf:42:14:34:a5:b0:84:c8:99:58:b7:
b1:88:d8:a2:eb:d3:b5:a2:6c:3b:67:fa:de:11:40:3f:95:eb:
e2:92:64:50:3c:ca:96:83:e9:98:b7:1a:85:67:08:72:81:22:
c6:e5:21:09:30:69:b2:3f:80:37:ae:70:b0:27:d5:ba:7c:ba:
d3:2c:64:2c:2d:4f:2f:f3:a5:24:e3:51:b6:84:cb:df:65:f5:
00:6f:16:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 07:06:12 2025 by rpki-client