Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d8679e-46bb-44f5-ba52-b52b3a236fa7/1/sGNKOVYjDTSby3HV0d5UrQif03o.roa
File: sGNKOVYjDTSby3HV0d5UrQif03o.roa (raw, json)
Hash identifier: fEt1u0Pnd1OgLhD2ZLaC3l+U/rkH+wDu1pDtZ8ZNq+Q=
Subject key identifier: B0:63:4A:39:56:23:0D:34:9B:CB:71:D5:D1:DE:54:AD:08:9F:D3:7A
Certificate issuer: /CN=acc48f7a59120588d4170ea2815e6ae51be6bcff
Certificate serial: 0194D5CF66AB17DF79FE462FD0CCA0926D1E
Authority key identifier: AC:C4:8F:7A:59:12:05:88:D4:17:0E:A2:81:5E:6A:E5:1B:E6:BC:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rMSPelkSBYjUFw6igV5q5RvmvP8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d8679e-46bb-44f5-ba52-b52b3a236fa7/1/sGNKOVYjDTSby3HV0d5UrQif03o.roa
Signing time: Wed 05 Feb 2025 11:12:06 +0000
ROA not before: Wed 05 Feb 2025 11:12:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15830
IP address blocks: 193.56.44.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:d5:cf:66:ab:17:df:79:fe:46:2f:d0:cc:a0:92:6d:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acc48f7a59120588d4170ea2815e6ae51be6bcff
Validity
Not Before: Feb 5 11:12:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b0634a3956230d349bcb71d5d1de54ad089fd37a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d9:a0:81:b0:33:5a:61:60:a2:4e:f6:6c:f7:
b6:1f:b8:68:c7:b0:bb:9c:92:50:a0:27:ec:28:09:
68:e5:8e:3a:1e:a6:50:17:0b:89:ad:ad:ad:bd:66:
81:c9:bc:48:7e:9e:f2:bb:5b:97:2a:c5:2f:93:35:
1b:4f:03:28:55:0d:1d:47:b2:6e:e9:98:84:6f:c3:
87:1a:63:20:76:45:06:d9:d2:3d:ba:b4:20:37:95:
80:60:bc:ae:b7:17:46:8e:18:89:52:3a:59:4c:25:
ab:c6:28:a0:f9:4d:80:e4:81:1d:db:11:fb:5e:e7:
b4:0d:30:b8:f7:3e:c3:8e:b6:8c:ed:00:bf:3d:8c:
ba:af:12:ae:08:25:ce:e5:c4:42:45:21:4c:97:1b:
6e:05:ec:a2:50:ac:25:af:e2:a2:69:35:e6:bf:ba:
62:39:a9:c0:3d:18:a4:c3:3a:88:ec:f7:4a:bc:e1:
c2:92:9c:ed:2c:9d:32:78:0c:4c:f5:37:aa:62:42:
86:1f:20:fe:8f:7a:66:48:ee:a3:83:4d:5a:04:20:
a4:73:21:53:97:15:e0:e1:2b:1a:ce:03:8d:96:20:
96:af:ad:b0:71:47:b3:d7:83:1a:39:88:6f:14:a5:
fc:2b:15:cb:26:17:d4:1c:07:32:2e:0f:de:7b:88:
3e:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:63:4A:39:56:23:0D:34:9B:CB:71:D5:D1:DE:54:AD:08:9F:D3:7A
X509v3 Authority Key Identifier:
keyid:AC:C4:8F:7A:59:12:05:88:D4:17:0E:A2:81:5E:6A:E5:1B:E6:BC:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rMSPelkSBYjUFw6igV5q5RvmvP8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d8679e-46bb-44f5-ba52-b52b3a236fa7/1/sGNKOVYjDTSby3HV0d5UrQif03o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d8679e-46bb-44f5-ba52-b52b3a236fa7/1/rMSPelkSBYjUFw6igV5q5RvmvP8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.56.44.0/24
Signature Algorithm: sha256WithRSAEncryption
64:d5:1f:7b:af:89:7b:a7:28:6a:e5:8b:da:b7:67:0f:d1:07:
00:12:17:f3:3e:72:31:b5:e9:1b:dc:0d:d7:fa:81:0d:e1:6b:
05:3c:78:21:b6:2f:7e:e5:20:dc:c7:3e:35:f7:a8:b7:a6:73:
84:b2:f0:f7:3e:ce:87:5e:21:e6:cc:a4:7e:18:ac:cc:cf:59:
fd:50:27:88:35:86:89:b9:09:7e:df:b5:1b:0c:79:88:86:cc:
2d:0c:02:69:e5:30:ad:1b:69:b7:ba:21:48:22:99:9a:02:4f:
1d:2a:38:75:b8:99:a9:84:29:32:7b:32:6a:78:85:1a:6f:ff:
e8:b2:a9:9f:60:d5:8a:81:7f:76:e9:e7:76:8d:f5:10:09:06:
e4:ae:31:81:8a:ed:6c:15:67:c4:55:2d:21:5f:9f:7d:94:95:
eb:b1:c2:6a:2d:f5:f0:80:d1:86:03:c7:31:53:c1:55:d0:d7:
d2:6d:be:d2:74:45:b4:2b:33:bc:d7:61:b6:a2:5b:49:ab:ad:
0c:07:90:e1:83:73:a1:b3:c9:3e:41:b5:68:8b:20:af:dd:0d:
38:88:dd:94:2f:bc:81:83:1e:3e:7e:3c:9f:39:15:68:bd:f7:
81:de:65:0b:f2:dd:29:35:09:f8:2c:4b:6e:72:e7:6f:95:b0:
8d:48:04:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:36:06 2025 by rpki-client