Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/08482f-a7c5-4627-a068-25f79d2d8c17/1/oXdvfaAw2HX5k9hgoYRskK2gnZ0.roa
File: oXdvfaAw2HX5k9hgoYRskK2gnZ0.roa (raw, json)
Hash identifier: RsMteruai2QKgImCyNPBir6yRcbFaU5c9mP5yO+ruyE=
Subject key identifier: A1:77:6F:7D:A0:30:D8:75:F9:93:D8:60:A1:84:6C:90:AD:A0:9D:9D
Certificate issuer: /CN=c221258974ee8e054560c7176f8347d4355b9a87
Certificate serial: 019420D5D0CA03FE1B569DFD5A77CC083372
Authority key identifier: C2:21:25:89:74:EE:8E:05:45:60:C7:17:6F:83:47:D4:35:5B:9A:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wiEliXTujgVFYMcXb4NH1DVbmoc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/08482f-a7c5-4627-a068-25f79d2d8c17/1/oXdvfaAw2HX5k9hgoYRskK2gnZ0.roa
Signing time: Wed 01 Jan 2025 07:47:51 +0000
ROA not before: Wed 01 Jan 2025 07:47:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42926
IP address blocks: 193.84.102.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:d0:ca:03:fe:1b:56:9d:fd:5a:77:cc:08:33:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c221258974ee8e054560c7176f8347d4355b9a87
Validity
Not Before: Jan 1 07:47:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a1776f7da030d875f993d860a1846c90ada09d9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:14:70:f0:20:84:e8:2c:6d:76:7d:43:1f:a1:
1b:3b:73:35:0d:85:e4:d1:3e:44:ea:65:1f:f5:57:
d1:fa:6a:1f:1f:3c:8f:f7:7e:5b:b7:84:28:9c:6d:
09:b3:43:9a:c9:de:92:e4:68:62:a8:37:b8:1d:73:
18:0e:7d:61:ce:97:4e:52:6b:ac:0a:ab:8a:54:f2:
48:4d:da:b1:ab:b3:31:e2:1b:d9:2f:60:44:2d:50:
2f:ff:5a:d2:43:d1:93:2b:d1:2c:f9:aa:b4:05:b9:
6a:f7:00:d8:b9:46:37:c8:5d:c6:b0:23:b9:ad:79:
9c:a7:c1:5c:9c:8a:fb:86:9c:57:0e:75:6f:2d:41:
db:7b:83:4e:9b:f9:06:6b:9a:96:e3:52:8a:05:9b:
2b:22:01:2a:09:0c:06:7e:98:ac:93:58:92:c2:7f:
c7:7d:80:38:48:72:69:56:84:85:73:05:8f:0f:7a:
03:20:66:16:f7:bf:dd:a3:e4:49:65:21:9e:f2:7f:
38:ee:5a:0c:1f:94:e4:a3:e1:b8:69:db:ff:71:d9:
01:b9:a5:90:10:06:64:22:d5:e1:8b:d3:f5:b3:ea:
43:05:04:9d:8f:c5:fd:dc:c9:e5:8a:d9:24:71:8d:
7b:67:b9:43:1d:a7:74:f7:ee:c2:09:17:7d:87:7a:
0e:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:77:6F:7D:A0:30:D8:75:F9:93:D8:60:A1:84:6C:90:AD:A0:9D:9D
X509v3 Authority Key Identifier:
keyid:C2:21:25:89:74:EE:8E:05:45:60:C7:17:6F:83:47:D4:35:5B:9A:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wiEliXTujgVFYMcXb4NH1DVbmoc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/08482f-a7c5-4627-a068-25f79d2d8c17/1/oXdvfaAw2HX5k9hgoYRskK2gnZ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/08482f-a7c5-4627-a068-25f79d2d8c17/1/wiEliXTujgVFYMcXb4NH1DVbmoc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.84.102.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:75:6f:e7:f5:8d:72:af:34:c8:aa:ff:4b:98:50:51:47:b0:
df:58:28:6a:35:2f:f4:25:f8:2d:51:36:22:af:0f:e4:f3:dc:
5c:6c:e9:5d:56:44:34:9d:a5:af:17:05:89:b3:d5:f2:6c:00:
88:f5:db:db:64:ba:4d:af:e0:51:9f:4c:4b:e9:4f:65:05:a7:
3d:34:4d:ea:ac:f6:b2:5c:5a:0c:7f:e8:9e:6f:cc:40:ae:f5:
78:ab:24:87:d2:3a:a7:02:eb:50:83:83:6f:2a:c2:ae:40:ac:
90:64:db:7b:1a:6f:f5:8d:cb:19:f5:57:79:9d:75:2b:15:df:
c2:fb:6a:c6:86:97:4f:a5:8c:76:b0:d7:ed:c7:08:28:a8:41:
bb:bb:92:97:00:ae:0a:93:35:5f:92:9d:f7:15:2e:c1:0b:cc:
13:34:2d:23:d2:8d:a1:83:d6:84:fd:5e:20:59:73:64:6d:06:
b7:21:37:06:75:9b:50:7c:13:6e:63:8a:71:8a:a9:88:ef:88:
de:24:2d:aa:55:de:bf:84:2d:ee:9b:2f:5c:68:f2:a1:d9:58:
79:08:93:7b:c9:0a:c5:ca:93:f2:f7:ea:92:67:16:ff:10:b2:
6c:4f:6a:0e:10:12:14:a0:c6:be:e7:31:cf:f6:56:7c:5e:97:
7e:e3:74:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:52:24 2025 by rpki-client