Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/6558ec-d568-4cb9-a03a-8366b164dd66/1/jeCifaYzZ5yF8G9Sciofq7w0n90.roa
File: jeCifaYzZ5yF8G9Sciofq7w0n90.roa (raw, json)
Hash identifier: HV83fet9uguwCmg88F5Wp34425cNOk2TAaGpYDTRo7Q=
Subject key identifier: 8D:E0:A2:7D:A6:33:67:9C:85:F0:6F:52:72:2A:1F:AB:BC:34:9F:DD
Certificate issuer: /CN=525ec93d7ca73744b2c1fbb6dda64493c2a495c1
Certificate serial: 01942445823AB023C60ADA08274B32D26C12
Authority key identifier: 52:5E:C9:3D:7C:A7:37:44:B2:C1:FB:B6:DD:A6:44:93:C2:A4:95:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ul7JPXynN0Sywfu23aZEk8KklcE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/6558ec-d568-4cb9-a03a-8366b164dd66/1/jeCifaYzZ5yF8G9Sciofq7w0n90.roa
Signing time: Wed 01 Jan 2025 23:48:42 +0000
ROA not before: Wed 01 Jan 2025 23:48:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210644
IP address blocks: 193.33.153.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:82:3a:b0:23:c6:0a:da:08:27:4b:32:d2:6c:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=525ec93d7ca73744b2c1fbb6dda64493c2a495c1
Validity
Not Before: Jan 1 23:48:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8de0a27da633679c85f06f52722a1fabbc349fdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f6:3f:82:24:24:7d:4d:c1:d5:57:a0:85:b6:
a0:16:be:ff:7e:e5:e4:82:db:5c:d3:12:11:d9:7b:
06:3e:90:ab:07:dc:bc:ca:79:35:be:e1:ec:92:5d:
98:20:9e:4b:6d:9c:15:72:f7:02:47:58:e6:51:0d:
3e:df:ef:db:73:43:e5:f1:7a:46:61:cb:be:a3:ac:
bc:1d:fd:0c:60:30:78:8f:a7:ac:ba:76:49:01:2a:
9a:88:7a:e4:4f:d7:16:c8:22:e2:db:b7:26:1c:7c:
cd:ab:d4:9b:b2:e0:77:9a:26:f8:55:5a:8f:49:c0:
09:35:b6:88:6b:e5:3b:fb:8e:06:65:00:88:5f:d0:
d4:27:9d:32:1a:db:2b:aa:49:4e:16:ef:a5:2e:bd:
37:4d:2f:a1:8e:1c:2b:87:11:0f:3d:79:92:bb:da:
b9:d1:d7:c9:ef:b2:86:28:08:57:7b:0c:78:bf:de:
a3:78:81:c5:dc:52:6b:34:56:43:b9:67:35:54:43:
68:b5:57:4d:f4:dc:59:6a:96:45:5b:4c:ac:44:7c:
c4:b7:5e:1f:bd:89:ca:18:bf:fc:28:03:ac:50:35:
31:31:a2:d5:92:3d:03:25:02:29:37:e4:4e:ee:2f:
b1:ff:f3:1e:87:5b:0c:be:87:7a:0b:a9:d0:ca:82:
3d:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:E0:A2:7D:A6:33:67:9C:85:F0:6F:52:72:2A:1F:AB:BC:34:9F:DD
X509v3 Authority Key Identifier:
keyid:52:5E:C9:3D:7C:A7:37:44:B2:C1:FB:B6:DD:A6:44:93:C2:A4:95:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ul7JPXynN0Sywfu23aZEk8KklcE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/6558ec-d568-4cb9-a03a-8366b164dd66/1/jeCifaYzZ5yF8G9Sciofq7w0n90.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/6558ec-d568-4cb9-a03a-8366b164dd66/1/Ul7JPXynN0Sywfu23aZEk8KklcE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.33.153.0/24
Signature Algorithm: sha256WithRSAEncryption
57:a3:17:06:78:d6:b5:05:01:3e:9b:fe:32:64:84:46:be:ce:
3f:f5:4e:65:ca:3d:ba:67:cf:d3:08:8f:4d:2e:e6:d3:f5:b7:
29:7b:3d:1a:5d:36:ad:14:ae:cc:be:bd:98:c4:e0:d2:bc:ff:
d5:d2:22:1c:a9:ee:4a:0b:d3:74:23:82:d8:18:22:16:9c:e5:
50:cb:1e:cc:9d:99:63:f1:81:5c:5b:d5:2f:fc:a3:29:3e:da:
ce:5f:d5:69:74:1b:e0:a3:41:ee:c2:d4:2f:86:1a:11:84:66:
1b:d0:65:9c:d7:23:90:2d:c3:97:8f:95:d8:4b:05:bb:6c:91:
a8:d9:2c:3a:88:4a:22:6e:63:50:7e:01:20:b4:b6:b3:7c:e2:
3b:8f:f8:f0:ce:81:0f:d8:7b:a5:2a:d9:47:06:1c:87:93:1b:
f4:c6:fc:05:d8:e5:6a:3c:ef:96:b7:fd:78:dd:04:78:50:c1:
c8:1b:01:ac:a3:8a:31:5f:c1:3d:b7:80:65:1c:7c:d3:f0:72:
67:63:b9:55:50:54:8d:22:76:0b:67:02:9b:03:f6:41:ee:d4:
6b:c8:39:1c:e2:69:23:56:0a:df:02:b0:01:35:cc:e4:aa:06:
e9:d1:5e:84:53:b0:bc:5a:3f:39:d5:29:f8:bd:05:24:72:bb:
e3:54:b2:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 23:35:18 2025 by rpki-client