Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/b0c0af-619b-4ad5-b95f-937e2523d6f7/1/Ifc9NwWgW96DB3jfdAd1eRUTItQ.roa
File: Ifc9NwWgW96DB3jfdAd1eRUTItQ.roa (raw, json)
Hash identifier: QwQYTZsG7IIaUp2W464uVveyT3Hy95wxA6B00yVfsE8=
Subject key identifier: 21:F7:3D:37:05:A0:5B:DE:83:07:78:DF:74:07:75:79:15:13:22:D4
Certificate issuer: /CN=db30f2fff4fe10b1a79c127a6a4ad82ca5326064
Certificate serial: 0194221FF404011DB5DFCF9F97480E2AB294
Authority key identifier: DB:30:F2:FF:F4:FE:10:B1:A7:9C:12:7A:6A:4A:D8:2C:A5:32:60:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2zDy__T-ELGnnBJ6akrYLKUyYGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/b0c0af-619b-4ad5-b95f-937e2523d6f7/1/Ifc9NwWgW96DB3jfdAd1eRUTItQ.roa
Signing time: Wed 01 Jan 2025 13:48:26 +0000
ROA not before: Wed 01 Jan 2025 13:48:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8075
IP address blocks: 193.53.155.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:f4:04:01:1d:b5:df:cf:9f:97:48:0e:2a:b2:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db30f2fff4fe10b1a79c127a6a4ad82ca5326064
Validity
Not Before: Jan 1 13:48:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=21f73d3705a05bde830778df74077579151322d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:19:06:08:f8:63:16:2b:db:ee:b7:f8:3a:78:
21:d2:f1:e5:a3:57:62:64:3c:c8:a1:cd:d4:12:25:
41:a9:97:70:c3:dd:25:be:6a:8f:3f:b0:af:ad:c0:
57:a7:7e:9b:4d:1c:e7:91:12:e7:69:4c:a9:44:3c:
ed:d1:f7:28:b6:4b:40:b5:21:ba:d1:c6:00:51:d5:
16:52:16:a7:cc:29:2d:40:a3:5a:4d:70:c1:5a:23:
fb:9a:1f:16:94:3c:78:82:1c:90:01:53:e2:ff:4e:
4c:51:a7:c8:90:de:ac:4c:2d:87:8f:fe:86:90:30:
fa:5e:06:59:ea:0f:93:cd:7c:b8:5a:87:95:9c:71:
c0:bf:92:2c:07:e8:65:59:af:d0:74:c5:d2:78:e2:
1d:af:da:d5:20:c2:02:33:10:a4:96:09:64:0c:6f:
08:1c:16:ee:b8:c5:fa:0d:ac:6f:ee:88:2b:9a:4c:
40:4e:a0:93:ca:d3:a2:f4:ca:f0:73:22:20:13:ea:
f5:56:d9:39:e5:90:b1:d8:91:79:b1:c5:9b:18:b5:
f3:65:1b:88:0e:be:8a:a6:65:85:b5:7f:8d:41:89:
4f:f3:16:9d:6d:36:e1:88:00:dc:02:ec:99:e0:7e:
c8:cc:ab:c4:4a:13:ff:b9:3d:b9:7c:31:e0:f3:4e:
fd:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:F7:3D:37:05:A0:5B:DE:83:07:78:DF:74:07:75:79:15:13:22:D4
X509v3 Authority Key Identifier:
keyid:DB:30:F2:FF:F4:FE:10:B1:A7:9C:12:7A:6A:4A:D8:2C:A5:32:60:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2zDy__T-ELGnnBJ6akrYLKUyYGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b0c0af-619b-4ad5-b95f-937e2523d6f7/1/Ifc9NwWgW96DB3jfdAd1eRUTItQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b0c0af-619b-4ad5-b95f-937e2523d6f7/1/2zDy__T-ELGnnBJ6akrYLKUyYGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.53.155.0/24
Signature Algorithm: sha256WithRSAEncryption
07:58:fb:a7:30:c4:29:7f:b5:79:79:f1:34:75:14:62:83:3e:
d0:b5:5e:40:24:cf:9b:17:28:53:6d:f7:91:3a:2e:21:69:d7:
9b:4e:cc:d4:1d:77:fb:dc:f9:2c:aa:c5:af:b5:09:0a:37:04:
b8:cf:8f:2a:db:37:95:bf:d0:8b:62:95:37:45:b7:29:cb:f7:
18:af:c6:27:87:d7:02:5f:f2:aa:51:e1:8b:95:6f:a8:3f:38:
f0:cb:1d:5e:e6:81:35:88:fc:89:06:71:75:45:2b:74:06:77:
e8:e7:9f:a1:dd:de:74:d6:81:f1:d0:dd:1c:35:99:01:43:1c:
3e:8a:68:70:5f:71:d9:39:4e:84:3b:60:b1:3a:ec:1a:a9:67:
14:28:10:79:d3:cc:b3:7b:1a:b5:f1:fc:b7:92:c8:d3:d5:32:
ef:e2:18:00:3a:63:db:ed:18:fc:7b:90:5a:1b:58:1a:8f:2a:
2d:17:bc:74:9d:46:0c:ca:9e:b1:9d:2e:34:33:bb:71:80:fa:
00:0e:46:cc:7b:82:da:14:5a:47:f4:52:34:ea:77:35:70:0f:
cb:68:b2:2a:a5:8d:8e:2a:61:41:44:93:13:b6:55:8d:63:30:
0e:4d:3a:ba:01:71:c1:32:6c:71:6b:8f:36:f8:b0:1c:6f:03:
17:6b:40:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:49:47 2025 by rpki-client