Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/Saq3VYHlza0IcEZF1whMhjsSAlA.roa
File: Saq3VYHlza0IcEZF1whMhjsSAlA.roa (raw, json)
Hash identifier: iAqLC/j/inixhiy0KGKP177bZAzmIcZH/0FDe0WAUeQ=
Subject key identifier: 49:AA:B7:55:81:E5:CD:AD:08:70:46:45:D7:08:4C:86:3B:12:02:50
Certificate issuer: /CN=7539b7a123417aa719325946aa89e0f30ab0ca09
Certificate serial: 0194266C190FAD858D2B857AF7469FAE9A70
Authority key identifier: 75:39:B7:A1:23:41:7A:A7:19:32:59:46:AA:89:E0:F3:0A:B0:CA:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dTm3oSNBeqcZMllGqong8wqwygk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/Saq3VYHlza0IcEZF1whMhjsSAlA.roa
Signing time: Thu 02 Jan 2025 09:50:06 +0000
ROA not before: Thu 02 Jan 2025 09:50:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 28716
IP address blocks: 193.219.30.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:19:0f:ad:85:8d:2b:85:7a:f7:46:9f:ae:9a:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7539b7a123417aa719325946aa89e0f30ab0ca09
Validity
Not Before: Jan 2 09:50:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=49aab75581e5cdad08704645d7084c863b120250
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:43:ca:65:23:1b:19:f7:82:b3:c0:a4:24:5b:
b6:b8:d4:04:96:b8:b8:15:10:d1:88:a4:6a:9e:90:
30:70:00:d3:ff:ed:74:a7:42:d2:b0:df:21:a8:af:
33:69:6e:62:fb:e0:e8:14:49:bb:5b:17:cb:2b:1d:
5e:db:ce:8d:c7:ae:f0:d5:56:7d:39:2c:7b:af:c3:
73:60:fc:40:bc:41:91:f3:9a:74:a7:8e:90:fe:06:
ad:1f:ec:02:3d:6a:73:db:a4:98:f8:47:c8:a5:05:
ad:e4:d8:b0:d4:94:7a:c3:a0:2e:04:fb:ed:fd:c6:
f3:76:e4:d3:b8:e8:9e:06:71:80:6a:04:48:cc:e0:
52:bc:1b:6f:d6:58:23:42:82:93:be:04:3d:8c:8b:
fe:79:ad:4d:b4:cb:34:01:be:81:c6:74:ab:7c:5b:
52:78:ee:84:b3:07:df:6a:e8:d4:9b:b8:3b:8a:be:
f0:68:86:77:b7:8d:58:1c:9c:b9:b7:57:34:6e:c7:
e4:fb:5a:4b:2e:43:eb:7d:4d:02:29:fd:7c:7e:39:
9d:03:5f:13:ac:fe:bb:59:3d:d6:95:21:77:5f:af:
49:f3:c1:51:76:6a:40:9e:e4:e0:9c:22:30:d7:ff:
c0:cc:2e:a3:3d:cd:12:d7:f7:61:4c:ef:ff:55:47:
cd:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:AA:B7:55:81:E5:CD:AD:08:70:46:45:D7:08:4C:86:3B:12:02:50
X509v3 Authority Key Identifier:
keyid:75:39:B7:A1:23:41:7A:A7:19:32:59:46:AA:89:E0:F3:0A:B0:CA:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dTm3oSNBeqcZMllGqong8wqwygk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/Saq3VYHlza0IcEZF1whMhjsSAlA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/dTm3oSNBeqcZMllGqong8wqwygk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.219.30.0/24
Signature Algorithm: sha256WithRSAEncryption
af:04:cc:46:38:a7:33:10:e2:10:c0:07:71:ea:28:8e:d6:cc:
e3:07:d9:a7:67:e5:49:03:b6:d5:9a:ea:b2:2d:8b:b6:17:53:
73:24:7f:15:0c:3c:7d:fe:6a:6a:b2:a3:e3:cb:0d:f4:34:f9:
87:26:e8:0f:55:e1:98:c4:9b:97:df:54:7b:32:99:fa:aa:5e:
09:b5:da:bb:94:7c:2f:21:9c:22:69:e6:8c:28:f2:e8:45:4f:
00:f5:22:72:f6:99:16:ae:53:43:cd:d4:00:f9:ea:f2:f9:01:
d3:58:55:8b:f7:66:68:ef:fd:c5:5f:4c:a8:a7:9b:e1:c5:bc:
35:bb:b6:08:a1:2e:1b:0f:45:c6:45:89:00:08:57:04:5f:ea:
8a:7c:16:76:cb:48:ab:75:9b:a7:0a:d7:b9:80:fe:da:bc:18:
55:6a:2b:a3:43:cf:41:f5:10:41:81:2a:b5:03:82:04:fb:95:
bb:3e:93:0b:51:f0:f0:a7:c0:63:69:d4:da:ae:16:5e:ea:ea:
3d:ec:80:69:92:47:1a:01:7e:5c:06:a8:ee:19:36:4a:b8:44:
9d:19:58:33:eb:a9:5e:8a:8e:8c:7a:72:d3:37:8f:d3:0d:52:
f4:5b:35:85:b4:f7:b1:0f:bd:27:76:76:62:ed:0a:65:47:1c:
24:ea:83:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 03:35:31 2025 by rpki-client