Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/514cf4-126b-4cc5-b4d5-79ab48d83bab/1/f4uXUqTz6EMLfxnYPkQ3ht2dRz0.roa
File: f4uXUqTz6EMLfxnYPkQ3ht2dRz0.roa (raw, json)
Hash identifier: WwKae4E8mCPYphGvXV9B/QCbohcENp4wZ1ekmYvPPps=
Subject key identifier: 7F:8B:97:52:A4:F3:E8:43:0B:7F:19:D8:3E:44:37:86:DD:9D:47:3D
Certificate issuer: /CN=3edee0ae8834705088805044be75c7403b1dc7e2
Certificate serial: 0194236941ADC46BE5F12F3C984B307BEE2B
Authority key identifier: 3E:DE:E0:AE:88:34:70:50:88:80:50:44:BE:75:C7:40:3B:1D:C7:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pt7grog0cFCIgFBEvnXHQDsdx-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/514cf4-126b-4cc5-b4d5-79ab48d83bab/1/f4uXUqTz6EMLfxnYPkQ3ht2dRz0.roa
Signing time: Wed 01 Jan 2025 19:48:08 +0000
ROA not before: Wed 01 Jan 2025 19:48:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15404
IP address blocks: 193.26.246.0/24 maxlen: 24
193.26.247.0/24 maxlen: 24
193.26.248.0/24 maxlen: 24
193.26.249.0/24 maxlen: 24
193.26.250.0/24 maxlen: 24
193.26.251.0/24 maxlen: 24
193.26.252.0/24 maxlen: 24
193.26.253.0/24 maxlen: 24
193.26.254.0/24 maxlen: 24
193.26.255.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:41:ad:c4:6b:e5:f1:2f:3c:98:4b:30:7b:ee:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3edee0ae8834705088805044be75c7403b1dc7e2
Validity
Not Before: Jan 1 19:48:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7f8b9752a4f3e8430b7f19d83e443786dd9d473d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:73:9e:88:22:d3:07:22:97:50:ac:87:13:f7:
bd:4e:11:36:0a:29:c5:e5:1f:7d:4d:85:30:7f:e1:
fd:3f:2c:c7:14:66:ac:58:07:30:aa:67:25:4b:18:
2b:a4:39:2d:17:f0:6f:d0:98:72:42:38:65:be:83:
e3:37:0e:66:c7:2a:cb:43:b4:a7:75:04:aa:51:ec:
de:75:35:df:9f:0b:c2:d5:31:49:76:32:bd:f5:d7:
18:74:97:eb:f2:5f:34:8b:f5:01:5e:9a:ef:41:02:
d4:14:c8:1e:cd:75:ed:47:24:db:37:6a:d7:4e:36:
5a:b2:88:93:fc:6f:87:ca:ef:cf:a6:3c:55:c0:4f:
4d:28:71:5c:37:cf:3a:6c:9b:9a:af:3d:d4:0c:96:
0d:32:b5:46:c3:50:49:53:62:7b:73:cb:8a:b5:0a:
b8:a3:e0:3e:7c:2e:de:e8:d2:87:14:b6:66:15:7f:
d2:87:4f:94:f7:c6:fb:1f:eb:db:ef:a1:26:19:17:
b3:95:3d:46:42:70:67:f0:ae:e9:9c:ec:95:88:a0:
2d:ff:8d:24:72:21:9f:a6:fb:5f:47:04:4c:99:ee:
14:24:5c:46:28:6d:27:4a:a1:b9:6b:dc:90:61:69:
a9:58:41:d9:09:46:91:b0:4e:d2:75:2a:0f:b8:4d:
da:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:8B:97:52:A4:F3:E8:43:0B:7F:19:D8:3E:44:37:86:DD:9D:47:3D
X509v3 Authority Key Identifier:
keyid:3E:DE:E0:AE:88:34:70:50:88:80:50:44:BE:75:C7:40:3B:1D:C7:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pt7grog0cFCIgFBEvnXHQDsdx-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/514cf4-126b-4cc5-b4d5-79ab48d83bab/1/f4uXUqTz6EMLfxnYPkQ3ht2dRz0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/514cf4-126b-4cc5-b4d5-79ab48d83bab/1/Pt7grog0cFCIgFBEvnXHQDsdx-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.26.246.0-193.26.255.255
Signature Algorithm: sha256WithRSAEncryption
0a:13:22:24:3d:0e:c3:98:46:b0:ac:49:f0:d7:3f:68:75:ef:
c2:d3:d4:b4:84:c1:ea:25:bd:44:55:62:2a:80:58:04:54:13:
68:40:16:5e:e6:ae:9a:4a:49:77:e2:45:50:a1:ab:8b:45:27:
b6:a7:8c:91:07:f2:a6:b9:b8:56:ec:8b:6d:27:00:95:c5:22:
48:6b:cf:02:9a:6a:c8:48:36:b7:1f:7e:18:64:cc:34:68:9a:
3f:80:9f:65:35:a1:26:11:d9:91:90:87:e4:2a:31:41:70:bc:
e0:ab:e0:e4:8d:85:91:f1:42:ab:b7:b3:d6:d5:f2:f5:8b:63:
d2:ca:89:10:15:8d:84:d0:e4:c4:fc:5c:48:5f:72:1d:13:ad:
32:e2:d8:d5:5e:3c:00:60:48:1d:08:89:f6:cb:8b:1b:76:1f:
66:c3:07:f5:d5:86:0d:86:67:8f:56:6f:6d:ab:d9:cd:20:0a:
73:fe:28:a3:4d:6e:c2:97:df:5e:28:82:3b:3e:52:24:fd:36:
16:97:bc:7e:7f:34:26:15:58:61:23:32:4e:c6:2b:94:bf:75:
28:87:94:bc:18:c5:be:c1:3c:90:04:13:23:9c:bf:ca:f3:f4:
b6:95:77:96:d6:58:e8:d4:e3:ae:e8:7e:e0:fc:72:98:21:e6:
d9:75:81:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 13:57:07 2025 by rpki-client