Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/818e10-409b-451a-82b7-e5c1c62cfe37/1/R2rdc7iEL-QEpfpveQ8XLi794UY.roa
File: R2rdc7iEL-QEpfpveQ8XLi794UY.roa (raw, json)
Hash identifier: NOUYuQT3ToD/1aYOE1fR2p8arsC0PmHYqq5MEGhXZLs=
Subject key identifier: 47:6A:DD:73:B8:84:2F:E4:04:A5:FA:6F:79:0F:17:2E:2E:FD:E1:46
Certificate issuer: /CN=3938a907772a59fdf59f62f9ad90be502171946e
Certificate serial: 01941F8C83A32727521849B62372F2557ED8
Authority key identifier: 39:38:A9:07:77:2A:59:FD:F5:9F:62:F9:AD:90:BE:50:21:71:94:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OTipB3cqWf31n2L5rZC-UCFxlG4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/818e10-409b-451a-82b7-e5c1c62cfe37/1/R2rdc7iEL-QEpfpveQ8XLi794UY.roa
Signing time: Wed 01 Jan 2025 01:48:09 +0000
ROA not before: Wed 01 Jan 2025 01:48:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8717
IP address blocks: 193.109.54.0/24 maxlen: 24
193.109.55.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:83:a3:27:27:52:18:49:b6:23:72:f2:55:7e:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3938a907772a59fdf59f62f9ad90be502171946e
Validity
Not Before: Jan 1 01:48:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=476add73b8842fe404a5fa6f790f172e2efde146
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:75:20:ca:82:d5:9b:3d:b5:95:bf:7a:4c:3e:
d1:2c:8d:20:78:8f:c9:8e:cf:17:55:37:fe:f1:17:
af:65:15:98:0d:25:09:f5:45:1f:bd:db:a0:45:f1:
74:29:37:24:d1:43:af:f8:56:bb:b4:8e:4a:ff:10:
6a:c8:36:a7:d3:9c:09:30:03:97:bd:01:30:5f:30:
6c:1a:e0:2e:2b:9b:60:8a:99:58:75:53:37:ef:6d:
e8:e1:8b:d0:f6:0c:4d:32:14:8c:d0:a8:03:c3:25:
35:be:f1:c0:55:2f:dc:ac:d2:4b:b6:7d:c4:81:a8:
39:af:45:e0:02:c7:d8:1f:a6:e6:84:da:c8:0c:1b:
53:8f:b3:28:42:d3:63:35:0a:9b:41:80:f4:c6:b4:
35:7b:10:fa:ac:03:5a:9e:88:70:44:13:89:77:dd:
68:2d:27:9f:6d:87:c0:32:2b:12:d9:f4:d0:cc:14:
16:d6:86:4b:53:00:ae:63:57:de:da:e7:35:d1:6f:
d9:77:e5:a6:85:f9:60:35:b1:9a:99:35:1d:0a:81:
2e:49:4d:66:06:92:60:b8:8e:c0:42:1d:c1:26:47:
95:04:f4:ee:c6:23:0f:11:8d:95:ac:4f:4c:85:3f:
6e:5e:4e:40:8a:9b:48:7e:96:5b:a0:1a:17:86:93:
19:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:6A:DD:73:B8:84:2F:E4:04:A5:FA:6F:79:0F:17:2E:2E:FD:E1:46
X509v3 Authority Key Identifier:
keyid:39:38:A9:07:77:2A:59:FD:F5:9F:62:F9:AD:90:BE:50:21:71:94:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OTipB3cqWf31n2L5rZC-UCFxlG4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/818e10-409b-451a-82b7-e5c1c62cfe37/1/R2rdc7iEL-QEpfpveQ8XLi794UY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/818e10-409b-451a-82b7-e5c1c62cfe37/1/OTipB3cqWf31n2L5rZC-UCFxlG4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.109.54.0/23
Signature Algorithm: sha256WithRSAEncryption
44:f7:04:eb:00:f1:6c:25:4c:0c:87:23:0c:a3:40:1f:f8:ba:
57:1f:9c:7b:4b:b3:97:35:a3:fb:f0:1c:6b:f9:06:80:59:9f:
e3:e5:9d:c8:8b:ef:a5:ba:45:ca:e1:46:d0:69:6d:00:4e:9d:
e2:a5:1d:16:62:60:6d:b5:ac:df:d9:30:d9:b4:3d:c6:4b:c9:
79:95:62:ec:cc:f4:a0:f9:68:1d:5f:b4:a1:ec:36:d0:3b:db:
4e:37:8c:23:80:2b:c6:a9:37:29:d7:64:5a:c9:b5:4f:18:bc:
9b:78:c2:50:ce:e9:ce:43:f5:c0:09:54:5e:12:24:e7:ca:66:
2f:b7:3b:bf:09:f7:db:d5:db:11:1d:a1:f9:c2:2e:6c:a2:67:
27:11:d8:81:43:ac:37:3a:c7:f2:ff:16:7f:b7:c2:20:bb:49:
ec:bb:5e:8f:a2:25:3b:cb:be:23:c7:62:87:c8:0e:02:dd:e6:
a6:68:ca:fb:c0:20:7a:00:57:9b:a8:29:99:12:73:6f:74:6f:
a9:b2:ad:d4:c2:d3:ff:d9:c3:fb:a7:5a:2f:f3:8b:8b:f4:21:
c0:25:79:44:9e:52:7b:97:ef:ff:c7:ee:00:9b:7f:6f:cc:be:
b4:f3:5c:f7:5d:9f:6f:17:92:5e:cf:27:7b:05:55:74:86:35:
89:70:fc:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:08:24 2025 by rpki-client