Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/5cf431-4d57-4503-b28a-90ef7bda1dc3/1/9VIpFT_uZfwTVVoxe7PNJO0XppE.roa
File: 9VIpFT_uZfwTVVoxe7PNJO0XppE.roa (raw, json)
Hash identifier: dBqoAsOTvzrDylULyUsZPwgLS85TPwI2yvXP5iugyTk=
Subject key identifier: F5:52:29:15:3F:EE:65:FC:13:55:5A:31:7B:B3:CD:24:ED:17:A6:91
Certificate issuer: /CN=c1eb2c601fa6d07507973081faa1325fe190b276
Certificate serial: 01942444DE5348653DDB7623AB73786B903C
Authority key identifier: C1:EB:2C:60:1F:A6:D0:75:07:97:30:81:FA:A1:32:5F:E1:90:B2:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wessYB-m0HUHlzCB-qEyX-GQsnY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/5cf431-4d57-4503-b28a-90ef7bda1dc3/1/9VIpFT_uZfwTVVoxe7PNJO0XppE.roa
Signing time: Wed 01 Jan 2025 23:48:00 +0000
ROA not before: Wed 01 Jan 2025 23:48:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49456
IP address blocks: 193.169.70.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:de:53:48:65:3d:db:76:23:ab:73:78:6b:90:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1eb2c601fa6d07507973081faa1325fe190b276
Validity
Not Before: Jan 1 23:48:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f55229153fee65fc13555a317bb3cd24ed17a691
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b9:76:fb:16:6d:9b:c3:20:69:e2:1b:2a:b7:
ca:42:f0:8e:93:5f:e6:80:1c:fb:eb:a6:fc:f1:37:
7e:ad:77:7f:39:21:42:92:3b:10:5d:5a:d0:ed:68:
54:e2:ad:c4:99:0e:84:8e:85:49:51:74:02:f3:f3:
26:41:4e:aa:59:d6:e5:7d:ec:3f:51:99:11:13:85:
b3:56:7d:c3:85:65:ae:2e:5c:b9:77:2d:e1:a3:49:
43:61:24:d7:fd:3b:00:e3:fc:e1:71:c4:0a:19:b5:
7e:f0:f7:5c:80:84:8c:57:04:7c:89:c5:16:8d:f6:
b6:0d:03:80:07:fb:77:ab:10:88:18:e9:51:b9:a5:
e4:40:30:74:97:13:9c:44:56:92:0a:5e:12:06:8f:
44:ba:c2:9d:03:a9:47:97:c1:6d:ec:61:75:53:5a:
c3:dc:fd:4d:8c:84:c6:74:48:dc:bc:6e:16:ec:28:
0c:30:21:08:1d:14:98:69:a7:dc:08:04:9e:7b:16:
f6:0a:5b:a7:a0:be:94:50:06:fb:92:a1:d5:ee:b8:
f6:ed:00:90:65:8e:ff:91:ce:19:9b:a3:28:41:26:
09:5e:85:13:85:c0:b2:73:2a:3d:ed:cf:de:65:62:
dd:5c:4f:d5:24:7c:46:f2:64:37:a6:52:10:e4:fe:
0e:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:52:29:15:3F:EE:65:FC:13:55:5A:31:7B:B3:CD:24:ED:17:A6:91
X509v3 Authority Key Identifier:
keyid:C1:EB:2C:60:1F:A6:D0:75:07:97:30:81:FA:A1:32:5F:E1:90:B2:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wessYB-m0HUHlzCB-qEyX-GQsnY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/5cf431-4d57-4503-b28a-90ef7bda1dc3/1/9VIpFT_uZfwTVVoxe7PNJO0XppE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/5cf431-4d57-4503-b28a-90ef7bda1dc3/1/wessYB-m0HUHlzCB-qEyX-GQsnY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.169.70.0/23
Signature Algorithm: sha256WithRSAEncryption
1e:d4:cb:76:6f:1e:91:b6:90:f6:14:6b:53:82:bb:98:ef:ee:
2f:d8:08:71:e2:1c:5e:94:ae:15:32:ae:2f:5c:43:60:6c:27:
52:7c:84:ad:59:c3:86:1b:cb:40:9f:9d:e1:f9:2d:c6:89:a0:
13:e9:09:fe:14:9b:2a:57:5b:36:8e:37:67:f3:36:f8:d2:a8:
cf:26:8b:5e:89:99:c7:17:9f:4f:5e:fb:df:14:ce:9d:4e:e1:
81:1b:88:3d:1a:ba:a0:52:1d:94:61:db:13:fe:89:3f:4e:44:
ab:e5:4d:78:dd:33:e4:28:7e:27:ba:b5:25:6b:13:38:d4:69:
80:b0:80:18:33:cb:ab:01:a9:91:a5:97:87:4e:18:e5:13:87:
5c:73:52:72:cf:42:05:ec:8f:96:73:6a:b9:fc:eb:40:39:a0:
a1:86:c5:f3:98:ed:27:f8:25:6c:dd:4d:e5:37:3f:96:d3:93:
03:e4:91:0d:8e:17:d2:76:1a:73:10:03:e5:54:bc:d1:ad:6a:
2a:4d:27:5a:69:f9:90:40:0f:67:2d:d4:67:0a:0d:51:6d:20:
ed:a0:14:a3:5a:cb:3c:71:0e:d1:18:b8:9f:18:26:8d:40:ed:
04:68:d0:fa:87:22:5d:95:b8:a9:72:a7:9f:eb:05:7b:c6:25:
75:7e:ae:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 01:10:01 2025 by rpki-client