Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/6db797-a3d3-4241-903a-0c66840198d0/1/SsPMfuLYiptAn1KbqNePMw_A4VY.roa
File: SsPMfuLYiptAn1KbqNePMw_A4VY.roa (raw, json)
Hash identifier: s7uhDyPNR/o8+HrZcEPeZiMphtLlmdxbZNwJprWhgdg=
Subject key identifier: 4A:C3:CC:7E:E2:D8:8A:9B:40:9F:52:9B:A8:D7:8F:33:0F:C0:E1:56
Certificate issuer: /CN=6a8edda2f21c885fbe67286218b8318d6ad23896
Certificate serial: 0194280589A57009FFABB6ECD3D345FC514C
Authority key identifier: 6A:8E:DD:A2:F2:1C:88:5F:BE:67:28:62:18:B8:31:8D:6A:D2:38:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ao7dovIciF--ZyhiGLgxjWrSOJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/6db797-a3d3-4241-903a-0c66840198d0/1/SsPMfuLYiptAn1KbqNePMw_A4VY.roa
Signing time: Thu 02 Jan 2025 17:17:18 +0000
ROA not before: Thu 02 Jan 2025 17:17:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34471
IP address blocks: 193.151.246.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:05:89:a5:70:09:ff:ab:b6:ec:d3:d3:45:fc:51:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a8edda2f21c885fbe67286218b8318d6ad23896
Validity
Not Before: Jan 2 17:17:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4ac3cc7ee2d88a9b409f529ba8d78f330fc0e156
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:aa:54:ce:2f:d1:ea:d2:7c:7f:be:68:19:ca:
b5:8f:b2:fe:f6:68:81:e9:ba:f8:5a:98:4b:8a:62:
7d:8c:24:c6:a2:81:dd:e8:aa:8a:9a:9b:ed:8b:9c:
bd:88:c2:bd:0e:22:d6:f6:95:28:8a:42:6f:46:36:
39:38:78:6d:77:7e:e4:9e:2a:c0:30:e1:7f:5c:56:
f7:16:36:0f:e1:65:27:07:f4:bd:46:e9:5a:7f:44:
07:fb:e7:d8:2d:66:3d:c7:06:c3:8b:4e:c9:cb:ae:
01:d4:45:d4:f2:09:d4:a0:ef:1a:80:a1:98:7d:74:
4a:93:c5:ea:d0:a2:99:9a:82:c1:e5:bf:69:ee:aa:
71:37:30:71:fa:96:db:09:e7:3f:07:6e:23:75:29:
2f:93:22:1c:cc:fb:bd:98:53:9a:1d:5a:74:08:0e:
9e:da:1d:a9:af:80:45:49:04:ca:dc:61:7b:46:ca:
f7:34:3e:40:c2:57:0e:71:02:b0:c6:2f:1c:8c:d3:
55:86:e9:c6:79:de:41:68:96:6f:5a:a4:57:96:ca:
9b:60:51:a8:59:a2:1d:34:0c:58:c7:28:cb:ea:c0:
3d:8c:25:1a:2d:e1:13:25:2f:79:f9:af:b3:c6:a8:
c7:79:5a:f0:fd:e7:1b:f4:88:3e:8a:a7:b7:c0:19:
44:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:C3:CC:7E:E2:D8:8A:9B:40:9F:52:9B:A8:D7:8F:33:0F:C0:E1:56
X509v3 Authority Key Identifier:
keyid:6A:8E:DD:A2:F2:1C:88:5F:BE:67:28:62:18:B8:31:8D:6A:D2:38:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ao7dovIciF--ZyhiGLgxjWrSOJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/6db797-a3d3-4241-903a-0c66840198d0/1/SsPMfuLYiptAn1KbqNePMw_A4VY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/6db797-a3d3-4241-903a-0c66840198d0/1/ao7dovIciF--ZyhiGLgxjWrSOJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.151.246.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:65:ac:7a:65:b6:cb:a1:26:da:04:cc:e2:eb:e0:7a:ff:90:
b5:28:da:48:95:0c:03:a6:7e:8c:2a:f5:d9:45:7a:a0:5f:a8:
1f:5b:c5:79:0f:11:05:03:f5:b0:f1:74:44:d7:0a:95:af:29:
1e:7b:a1:d8:d2:ff:98:40:15:1f:72:86:21:14:ab:1c:af:d9:
3b:33:a6:00:89:2f:0a:a6:4a:37:0d:51:6d:df:c5:c9:fd:d8:
88:64:cf:a4:87:a5:ad:25:76:f1:b7:13:1a:a8:7d:b2:c9:5e:
82:68:13:df:2c:f4:e8:0a:5d:ec:24:55:fd:77:35:10:03:a8:
af:1f:c0:25:73:56:70:fc:b1:8c:5a:70:81:35:ab:67:d2:e5:
a2:26:5d:c9:9f:3f:eb:fd:dc:8c:d3:92:32:e0:1e:17:32:54:
e1:44:ee:0e:58:59:69:33:19:ee:ae:10:5e:3b:92:bf:c4:39:
19:de:d0:6c:9e:d7:e2:d5:88:fa:f5:71:ab:e5:cc:94:ff:c5:
1c:e1:69:69:a7:ff:2f:5c:1a:b7:a4:3c:4e:0c:d3:5f:2c:18:
7f:cb:f5:04:e1:82:43:7b:2a:86:d6:ca:e4:a5:7e:50:2a:c6:
48:c3:1a:5b:11:11:3b:42:34:f7:1f:2e:bb:fd:5a:a7:90:f3:
e9:96:34:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:05:25 2025 by rpki-client