Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/580769-a9c4-499a-b9db-bc5ab81987f0/1/my3o3dT-eplM7qhNIqgkY-xUMAU.roa
File: my3o3dT-eplM7qhNIqgkY-xUMAU.roa (raw, json)
Hash identifier: FEhLISLzUVk+az2cUSg9otpj4LY6SNS67CMNyG2sJTs=
Subject key identifier: 9B:2D:E8:DD:D4:FE:7A:99:4C:EE:A8:4D:22:A8:24:63:EC:54:30:05
Certificate issuer: /CN=d2f9789e1b59fa2f2c50ce1e8e12eb97655bbcdd
Certificate serial: 01941FFA595E302963DFB72CDE243070E3D1
Authority key identifier: D2:F9:78:9E:1B:59:FA:2F:2C:50:CE:1E:8E:12:EB:97:65:5B:BC:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/580769-a9c4-499a-b9db-bc5ab81987f0/1/my3o3dT-eplM7qhNIqgkY-xUMAU.roa
Signing time: Wed 01 Jan 2025 03:48:08 +0000
ROA not before: Wed 01 Jan 2025 03:48:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15404
IP address blocks: 193.53.174.0/24 maxlen: 24
193.53.185.0/24 maxlen: 24
193.53.186.0/24 maxlen: 24
193.53.188.0/24 maxlen: 24
193.53.190.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:59:5e:30:29:63:df:b7:2c:de:24:30:70:e3:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2f9789e1b59fa2f2c50ce1e8e12eb97655bbcdd
Validity
Not Before: Jan 1 03:48:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9b2de8ddd4fe7a994ceea84d22a82463ec543005
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:1d:b6:50:91:46:2a:92:a2:e1:98:44:fd:fc:
c6:43:cd:db:3e:e7:c5:d2:51:a1:a0:3f:e4:7c:63:
60:75:d1:63:98:94:4d:8e:0e:e7:51:e5:06:5b:76:
c0:94:b2:1e:05:d2:b3:e5:56:29:41:62:27:6b:9d:
2d:0e:48:10:43:39:c3:66:90:61:ba:da:54:ef:00:
f3:da:9c:96:f2:55:ac:29:d5:66:92:cf:7b:da:b1:
0b:5d:e9:04:28:6b:3f:ca:ad:48:1e:8d:9b:9c:e5:
54:af:d3:f9:fe:b3:7a:00:e8:26:41:f4:5a:00:a5:
b1:60:52:4a:e3:b8:db:08:dd:90:b8:de:f6:c7:24:
0e:29:1d:56:b2:28:56:06:38:5c:7a:85:4b:b8:2d:
50:c9:f2:a5:89:f4:72:8e:b5:b0:ce:41:08:59:f3:
b3:f9:c2:66:86:fa:25:9b:24:e9:30:14:02:00:f4:
bc:6b:eb:55:72:3c:6c:16:be:3b:f1:4d:8e:39:f1:
0f:37:40:5b:d3:93:8a:5c:19:b6:4b:3e:e1:b2:8f:
df:29:21:6c:24:20:40:67:0c:08:06:20:01:67:35:
ff:a8:0d:0e:a2:51:ff:ec:3b:54:80:15:c5:e1:d2:
6c:e4:d5:c7:a0:e1:4a:59:c8:8d:86:aa:8d:5c:43:
c9:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:2D:E8:DD:D4:FE:7A:99:4C:EE:A8:4D:22:A8:24:63:EC:54:30:05
X509v3 Authority Key Identifier:
keyid:D2:F9:78:9E:1B:59:FA:2F:2C:50:CE:1E:8E:12:EB:97:65:5B:BC:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/580769-a9c4-499a-b9db-bc5ab81987f0/1/my3o3dT-eplM7qhNIqgkY-xUMAU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/580769-a9c4-499a-b9db-bc5ab81987f0/1/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.53.174.0/24
193.53.185.0-193.53.186.255
193.53.188.0/24
193.53.190.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:28:91:b7:6c:7d:c0:02:aa:a3:b7:c2:af:be:23:c1:77:32:
90:d3:4d:04:86:4c:09:ed:12:19:9d:5e:62:55:63:82:e2:9c:
27:44:34:b9:a8:59:c5:c9:06:f8:2b:67:49:a9:6b:e7:bb:a5:
14:dc:bd:63:a2:2c:e1:74:59:15:f3:62:20:a0:76:4f:a0:b6:
05:d5:49:7f:af:62:8a:66:49:cb:a5:81:c2:c9:07:da:94:7b:
0e:42:3a:57:f1:94:c1:ce:2a:92:eb:b2:dc:1b:14:50:5c:a3:
aa:cc:a3:98:f1:7b:24:65:cd:f3:40:17:be:ef:61:a4:ba:c1:
19:3c:be:25:09:52:42:9c:59:2a:cd:75:05:ea:4b:bb:82:5a:
35:9d:00:b3:ee:8c:c3:c3:c1:54:1b:ff:3c:55:1c:76:f7:99:
d7:23:4e:19:ca:d8:fd:45:10:35:9e:cf:f4:35:79:f3:5a:3c:
1b:ed:44:3a:1c:b5:5e:d0:da:f3:e2:4a:19:51:a3:0a:46:aa:
3a:9d:83:eb:24:33:eb:c4:3d:8b:b0:8c:6f:d3:c3:89:2c:c8:
fa:d3:45:b7:5a:96:86:6e:c1:1f:0a:a8:09:20:39:1a:38:ee:
95:cf:48:ec:b3:d8:67:fb:64:ea:92:40:59:74:7e:ea:bc:54:
1e:e4:69:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:44:25 2025 by rpki-client