Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/SzyIBUJURbOXMTDJ4Z_haTgvNpI.roa
File: SzyIBUJURbOXMTDJ4Z_haTgvNpI.roa (raw, json)
Hash identifier: wJIDwOiFxDwrE3GURrkhai8iWOYh1f3lI6qeGAaNPyc=
Subject key identifier: 4B:3C:88:05:42:54:45:B3:97:31:30:C9:E1:9F:E1:69:38:2F:36:92
Certificate issuer: /CN=4c37f27eb4997b3bef9f28266a39694050fe74f9
Certificate serial: 0194258F9EAB96C241D0A99817884F550D41
Authority key identifier: 4C:37:F2:7E:B4:99:7B:3B:EF:9F:28:26:6A:39:69:40:50:FE:74:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDfyfrSZezvvnygmajlpQFD-dPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/SzyIBUJURbOXMTDJ4Z_haTgvNpI.roa
Signing time: Thu 02 Jan 2025 05:49:16 +0000
ROA not before: Thu 02 Jan 2025 05:49:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29310
IP address blocks: 193.223.252.0/23 maxlen: 24
213.244.115.0/24 maxlen: 24
213.244.116.0/24 maxlen: 24
213.244.117.0/24 maxlen: 24
213.244.122.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:9e:ab:96:c2:41:d0:a9:98:17:88:4f:55:0d:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c37f27eb4997b3bef9f28266a39694050fe74f9
Validity
Not Before: Jan 2 05:49:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4b3c8805425445b3973130c9e19fe169382f3692
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:0f:1c:48:ec:e9:dc:a7:5d:8d:39:0d:2e:e9:
09:27:25:bf:2d:fe:c6:52:16:55:75:b1:97:8b:39:
46:6b:ac:5b:4e:cc:1a:d0:61:7a:58:58:1e:a3:8f:
5a:4a:72:f5:97:02:35:0e:d0:c3:e6:d9:4d:fa:04:
e9:e7:9d:93:e5:d3:a9:46:2f:e9:f8:c7:97:bc:25:
d1:b9:5d:d3:97:b1:b6:67:b0:37:ba:47:d6:1a:98:
e5:00:d2:2c:ab:02:af:ac:4f:76:d0:6b:21:8e:97:
96:43:66:22:f5:5f:66:0f:64:f1:c0:eb:a5:66:6e:
53:33:ca:44:a5:f4:46:86:5b:98:32:3f:0a:ab:a4:
d7:ba:1b:25:11:79:01:65:01:da:9b:ec:c0:fc:d6:
53:a0:9b:6c:59:c9:ad:a5:31:00:5d:6c:93:7a:91:
e3:a8:cc:9f:20:9a:27:49:7b:35:9b:c2:18:6b:0f:
eb:2d:59:18:93:e8:d7:e5:56:d6:76:da:d2:5c:c4:
aa:79:0a:b0:b5:79:17:d3:19:ac:8f:d8:88:15:55:
10:0f:f8:a3:9b:d3:29:0f:7a:6f:38:86:b2:8b:a3:
6f:1e:1c:ad:46:97:c1:1f:08:da:34:52:0f:d0:67:
6c:de:dc:b3:89:bf:e1:26:85:ce:85:20:0b:bf:72:
a6:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:3C:88:05:42:54:45:B3:97:31:30:C9:E1:9F:E1:69:38:2F:36:92
X509v3 Authority Key Identifier:
keyid:4C:37:F2:7E:B4:99:7B:3B:EF:9F:28:26:6A:39:69:40:50:FE:74:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDfyfrSZezvvnygmajlpQFD-dPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/SzyIBUJURbOXMTDJ4Z_haTgvNpI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/TDfyfrSZezvvnygmajlpQFD-dPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.223.252.0/23
213.244.115.0-213.244.117.255
213.244.122.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:d2:f1:96:50:69:1b:ca:03:b9:ad:bd:0e:c4:e6:c8:52:f9:
c3:ca:33:f7:6d:8e:b4:fc:ca:0a:64:a1:c3:e0:54:de:aa:27:
2f:cc:c2:4c:29:b4:6c:88:f8:e1:ff:af:f8:54:d6:0d:fe:a3:
c2:22:78:b5:43:e7:56:e6:35:7a:0a:9b:e5:f5:25:c9:d8:06:
9a:95:a2:3a:7a:a6:06:e4:48:f3:3b:5c:64:4a:61:17:0a:bb:
09:5b:51:02:bb:5d:e7:71:16:12:ee:8a:61:f6:a9:cd:99:b4:
bd:68:e2:1a:66:53:38:f0:af:64:26:04:e1:c0:08:2e:77:14:
56:f1:da:43:dc:ae:00:7c:5f:72:f5:25:8e:77:d7:34:08:9a:
b4:68:68:13:e8:5d:45:2f:10:3a:57:38:30:ce:36:f9:79:ae:
c9:86:fe:20:20:61:d1:63:60:1d:c7:e1:cd:ab:ec:03:4c:49:
5a:2a:41:d6:cf:20:75:77:f6:13:1d:12:a1:e8:02:56:87:1e:
ae:e9:de:25:24:c4:45:3f:7b:27:f2:b9:c4:ea:75:d8:69:e3:
0e:a0:72:ae:2c:61:72:25:e2:ee:14:18:39:6c:e1:be:59:3a:
f4:73:e3:e0:04:6e:20:84:a1:11:08:3f:18:d4:88:98:fa:e6:
64:bf:d1:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 17:23:04 2025 by rpki-client