Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/d885bb-a3dc-4390-bf24-103b17d3eb45/1/ehQIMYmYwJQIMwezxzrnCxQWXrQ.roa
File: ehQIMYmYwJQIMwezxzrnCxQWXrQ.roa (raw, json)
Hash identifier: K5j8O7wSUuuth3uj2946HM7L4q3WosF43ObE+K/eL8k=
Subject key identifier: 7A:14:08:31:89:98:C0:94:08:33:07:B3:C7:3A:E7:0B:14:16:5E:B4
Certificate issuer: /CN=4d3687742becf3d08082ed12e9f3470b82da7cff
Certificate serial: 019428268ABDD01D9732F7F0EF5518F3A0D9
Authority key identifier: 4D:36:87:74:2B:EC:F3:D0:80:82:ED:12:E9:F3:47:0B:82:DA:7C:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TTaHdCvs89CAgu0S6fNHC4LafP8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/d885bb-a3dc-4390-bf24-103b17d3eb45/1/ehQIMYmYwJQIMwezxzrnCxQWXrQ.roa
Signing time: Thu 02 Jan 2025 17:53:21 +0000
ROA not before: Thu 02 Jan 2025 17:53:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8930
IP address blocks: 193.47.101.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:26:8a:bd:d0:1d:97:32:f7:f0:ef:55:18:f3:a0:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d3687742becf3d08082ed12e9f3470b82da7cff
Validity
Not Before: Jan 2 17:53:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7a1408318998c094083307b3c73ae70b14165eb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b3:92:89:23:39:6f:0a:79:74:57:74:43:1f:
8f:b7:17:1e:20:a2:b7:d6:b1:5d:83:57:be:67:64:
a6:5f:6e:dc:0a:7a:b2:40:6b:3e:5d:08:8d:76:29:
a9:51:e0:55:cc:33:b8:cd:34:8c:00:8f:e0:f4:fe:
a5:05:9f:98:ea:35:2e:25:2a:f6:35:71:47:cb:1b:
15:30:49:c4:44:27:17:ec:df:dd:4d:a3:8f:bb:31:
7c:4a:a7:a8:2a:66:e3:86:1e:13:a3:77:b0:30:61:
93:b1:21:1e:2c:36:20:4a:fd:3a:90:0f:eb:f1:44:
25:a3:8e:da:47:bf:b8:55:e5:52:07:32:d0:e4:94:
59:a2:b7:04:d5:42:23:bb:be:37:04:b9:28:17:f2:
88:e5:1e:88:17:0c:42:3c:b2:eb:9d:40:ac:19:69:
85:f9:a5:3d:37:e0:53:86:72:00:20:36:b2:a7:7a:
ea:83:37:23:b7:d7:2c:f6:30:5a:ef:86:2c:3e:a3:
e1:c7:6f:92:07:ec:70:7c:64:a9:66:6a:1d:09:a6:
03:bb:20:f2:3f:af:74:8d:37:47:58:89:3e:74:50:
07:2e:41:63:ef:87:d8:b0:1e:26:82:bb:a3:9a:a2:
2b:3b:72:83:f1:c6:5c:66:cd:e2:98:37:09:11:dc:
9f:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:14:08:31:89:98:C0:94:08:33:07:B3:C7:3A:E7:0B:14:16:5E:B4
X509v3 Authority Key Identifier:
keyid:4D:36:87:74:2B:EC:F3:D0:80:82:ED:12:E9:F3:47:0B:82:DA:7C:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TTaHdCvs89CAgu0S6fNHC4LafP8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/d885bb-a3dc-4390-bf24-103b17d3eb45/1/ehQIMYmYwJQIMwezxzrnCxQWXrQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/d885bb-a3dc-4390-bf24-103b17d3eb45/1/TTaHdCvs89CAgu0S6fNHC4LafP8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.47.101.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:16:87:93:11:d1:f8:8a:4e:dd:ce:ce:12:39:e4:7e:70:02:
e0:7b:94:5f:c3:e7:fb:f0:90:2e:c0:21:d3:30:54:9e:f8:ac:
2e:ca:55:bb:d2:d2:16:48:1d:2c:6f:67:b6:de:30:2e:af:a7:
d2:86:b4:75:6f:56:96:7d:fe:73:68:d3:31:a4:d6:8d:cd:61:
d8:61:11:b1:06:9b:db:99:5b:98:62:32:0c:54:ef:b5:25:d0:
56:35:8f:f2:90:2a:af:ac:4a:39:31:52:8f:d0:14:79:6e:de:
ca:da:7e:a6:a0:18:03:3f:9e:fa:67:72:70:02:a0:d9:b4:e2:
2a:3a:bc:08:92:24:ae:eb:ae:17:98:5c:92:b1:56:a5:16:33:
e7:f2:56:2d:a0:1a:bf:d4:ee:b1:7e:b4:d2:c4:c2:cf:21:15:
fd:bd:c7:8f:62:6c:bf:34:b6:f4:8f:ff:ac:3c:e6:7e:36:11:
78:18:87:db:74:70:1b:3e:cc:a7:fa:5f:7e:5e:a9:11:f4:1c:
93:83:76:86:68:3b:f4:68:01:e6:63:1b:b6:c7:e4:a1:14:15:
d8:17:5f:38:16:1f:6f:c2:cf:9a:26:79:83:64:e0:eb:59:4c:
6b:db:87:df:95:3b:1f:94:99:25:cc:1a:21:4a:80:d1:e5:a0:
aa:84:53:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 12:40:06 2025 by rpki-client