Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2df6af-edc3-498e-a5fd-09303e418e7d/1/RymBY7lnNBMXp_yUGm6cXmk9pIY.roa
File: RymBY7lnNBMXp_yUGm6cXmk9pIY.roa (raw, json)
Hash identifier: NXhw0vi4/QtrtywYV0kwabkAShMb2W3sLGUUgAEfvq0=
Subject key identifier: 47:29:81:63:B9:67:34:13:17:A7:FC:94:1A:6E:9C:5E:69:3D:A4:86
Certificate issuer: /CN=0be6d52874a0c8edbea9c81c420676b614ea29c8
Certificate serial: 0194236A1B7617A2DA170990D06A2B579F69
Authority key identifier: 0B:E6:D5:28:74:A0:C8:ED:BE:A9:C8:1C:42:06:76:B6:14:EA:29:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C-bVKHSgyO2-qcgcQgZ2thTqKcg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2df6af-edc3-498e-a5fd-09303e418e7d/1/RymBY7lnNBMXp_yUGm6cXmk9pIY.roa
Signing time: Wed 01 Jan 2025 19:49:03 +0000
ROA not before: Wed 01 Jan 2025 19:49:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15404
IP address blocks: 193.193.188.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:1b:76:17:a2:da:17:09:90:d0:6a:2b:57:9f:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0be6d52874a0c8edbea9c81c420676b614ea29c8
Validity
Not Before: Jan 1 19:49:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=47298163b967341317a7fc941a6e9c5e693da486
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ef:fe:ea:e8:ab:12:e4:f1:34:1c:34:9f:24:
8a:4b:33:7e:17:6f:0a:9d:e0:e9:06:43:ed:34:a6:
6c:25:7e:9a:fe:b9:3e:da:79:eb:bd:67:3f:40:f4:
3e:aa:a1:bb:5f:c2:2f:17:b6:9e:ad:d3:c4:d9:7c:
8c:94:84:c8:61:46:2d:5b:22:bd:e4:7c:0b:e4:e1:
93:e2:b0:7e:3b:3f:97:c6:de:95:a4:c1:e2:7b:e2:
e2:5c:68:7f:d0:1f:55:b3:3a:ca:5e:74:dd:93:0d:
85:c1:a9:bb:03:a4:52:95:20:16:d9:7a:29:82:f6:
cb:17:27:64:9e:b2:e0:1f:d5:62:1a:3d:a8:ef:db:
00:23:33:f9:d2:f9:69:bf:31:f1:e9:df:31:cb:d3:
b5:88:b3:e2:18:22:46:7d:d6:b1:2c:87:eb:bc:1f:
49:4d:e3:d2:94:ea:a0:10:ed:e0:72:fd:c6:d7:9f:
59:2b:17:aa:9c:4f:d1:f0:af:76:21:1d:12:a4:ca:
80:b4:39:dd:14:1d:d0:db:a3:3c:03:05:70:c2:83:
f8:11:99:66:47:64:94:ca:71:89:22:86:58:85:96:
1e:9f:11:5f:c8:b2:c3:38:83:d1:68:dc:20:1b:a0:
e1:ea:02:4c:ce:49:25:05:a6:cb:dc:08:27:9b:59:
96:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:29:81:63:B9:67:34:13:17:A7:FC:94:1A:6E:9C:5E:69:3D:A4:86
X509v3 Authority Key Identifier:
keyid:0B:E6:D5:28:74:A0:C8:ED:BE:A9:C8:1C:42:06:76:B6:14:EA:29:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C-bVKHSgyO2-qcgcQgZ2thTqKcg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2df6af-edc3-498e-a5fd-09303e418e7d/1/RymBY7lnNBMXp_yUGm6cXmk9pIY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2df6af-edc3-498e-a5fd-09303e418e7d/1/C-bVKHSgyO2-qcgcQgZ2thTqKcg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.193.188.0/24
Signature Algorithm: sha256WithRSAEncryption
55:a7:63:25:cc:c5:4d:6a:b5:f4:1e:26:84:50:5c:25:60:d5:
fc:37:e9:70:67:97:ec:f4:90:10:eb:57:a1:bb:d0:fe:51:96:
f4:a4:78:a6:03:45:85:24:12:30:83:61:84:dd:73:c8:3a:21:
21:46:6c:a2:f7:b2:96:7c:b5:de:7a:6a:c6:f6:0f:8c:0e:c7:
ee:70:55:75:13:0d:28:f7:f6:13:26:72:ee:5a:99:64:13:7d:
03:5f:1e:9a:d6:27:5c:f0:6e:8b:21:29:7a:7e:5f:2e:97:5a:
7a:b2:b3:ce:55:23:dc:34:9a:d9:85:01:b2:92:54:c9:47:a9:
39:d1:d7:b9:e4:ef:54:3d:3e:9f:c0:bf:93:63:c8:6f:7c:d2:
1e:80:62:a6:b1:8a:bc:6b:a9:ea:8c:ee:ce:c7:5c:0f:b0:3e:
d5:f3:71:45:0c:cc:bd:4e:ba:e8:21:62:ec:ff:71:a0:35:43:
2e:63:11:1a:85:ca:f6:d3:3d:b8:1e:14:38:e5:24:2c:84:6a:
51:c9:75:a4:62:05:9a:7a:81:7f:92:2f:3b:dd:0e:6f:38:14:
57:5d:a0:ad:14:e6:6f:80:99:ee:a5:7e:08:cd:fe:38:17:4a:
73:30:ce:e6:d9:21:5f:51:8a:a5:4d:95:a0:35:e2:e0:06:c9:
69:59:20:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:55:32 2025 by rpki-client