Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/c6b906-9150-443d-ba30-739c198c513f/1/9dcg4kop7SgWnE6_RqxuTw6E4S0.roa
File: 9dcg4kop7SgWnE6_RqxuTw6E4S0.roa (raw, json)
Hash identifier: 0Gyw3aRec61kP8ssDusbhrk3Tfc+FxYebdPIc+4lPH0=
Subject key identifier: F5:D7:20:E2:4A:29:ED:28:16:9C:4E:BF:46:AC:6E:4F:0E:84:E1:2D
Certificate issuer: /CN=1ad5d174cbb46aaf86555b80e1773331b870b568
Certificate serial: 01942444C926A856DEA5C31B99D72EFAF3CF
Authority key identifier: 1A:D5:D1:74:CB:B4:6A:AF:86:55:5B:80:E1:77:33:31:B8:70:B5:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GtXRdMu0aq-GVVuA4XczMbhwtWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/c6b906-9150-443d-ba30-739c198c513f/1/9dcg4kop7SgWnE6_RqxuTw6E4S0.roa
Signing time: Wed 01 Jan 2025 23:47:55 +0000
ROA not before: Wed 01 Jan 2025 23:47:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41004
IP address blocks: 79.171.0.0/22 maxlen: 22
193.32.37.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:c9:26:a8:56:de:a5:c3:1b:99:d7:2e:fa:f3:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ad5d174cbb46aaf86555b80e1773331b870b568
Validity
Not Before: Jan 1 23:47:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f5d720e24a29ed28169c4ebf46ac6e4f0e84e12d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:9a:be:61:14:55:b8:18:0e:63:56:64:01:10:
04:f5:91:ce:86:c3:bf:8d:fe:1b:c5:39:20:dd:ed:
58:a5:ee:b2:bd:c2:60:cb:1e:fc:34:72:df:4e:f3:
7e:3e:68:53:96:91:e9:ff:5e:56:cf:26:c9:8a:0c:
b4:02:9b:c4:75:09:76:b3:b0:d8:31:ed:6a:a7:89:
5c:5f:e2:e5:4f:ec:e3:08:04:66:d2:80:22:29:d4:
1b:2a:f4:10:32:a3:f5:37:64:5a:bc:38:de:17:9a:
7b:9a:c7:fc:9d:de:93:b2:03:85:5f:10:20:10:6f:
3f:3a:db:c6:34:7a:14:ac:79:96:36:82:d7:ad:a0:
95:c6:e6:61:1c:6b:ff:c2:15:53:34:0e:85:50:95:
ec:10:a2:82:c1:9e:58:8e:72:a1:20:53:3b:9b:2f:
aa:b2:0a:ef:2d:3e:0c:be:bd:b7:54:0a:90:fc:fa:
fe:82:b0:69:34:c1:be:b1:cc:0e:51:1d:ea:e2:e6:
04:db:57:cb:d2:a7:47:f1:7c:b7:2f:ed:1e:aa:08:
dc:02:d3:0b:c2:b9:f4:7f:da:d4:45:01:57:7e:8c:
42:7c:41:60:c4:28:bf:92:5c:9b:68:43:45:05:79:
21:2f:ab:ee:64:21:7f:c4:ca:0c:a4:a9:a7:09:63:
f6:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:D7:20:E2:4A:29:ED:28:16:9C:4E:BF:46:AC:6E:4F:0E:84:E1:2D
X509v3 Authority Key Identifier:
keyid:1A:D5:D1:74:CB:B4:6A:AF:86:55:5B:80:E1:77:33:31:B8:70:B5:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GtXRdMu0aq-GVVuA4XczMbhwtWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c6b906-9150-443d-ba30-739c198c513f/1/9dcg4kop7SgWnE6_RqxuTw6E4S0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c6b906-9150-443d-ba30-739c198c513f/1/GtXRdMu0aq-GVVuA4XczMbhwtWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.171.0.0/22
193.32.37.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:79:52:09:54:28:0f:f3:25:b6:e9:8c:d1:e9:f5:65:fc:77:
01:39:9a:a8:1b:bb:72:54:1c:55:a6:81:97:0c:7d:1c:cd:79:
e0:13:e6:da:19:58:c9:f9:be:f3:7a:80:d1:ed:72:55:27:e8:
9e:a6:b8:df:9d:68:d8:d0:82:7d:9f:ce:1a:53:a0:91:5e:72:
f4:24:f7:30:fc:12:29:87:be:1c:94:69:5e:8d:a2:93:90:d2:
18:c0:cc:b0:53:a6:1c:19:14:7b:62:35:4e:fe:1a:5d:3c:62:
f5:15:9f:af:36:7c:d4:00:f2:95:f5:01:5c:87:d8:83:de:d8:
1e:fd:d0:a5:19:f4:29:a1:52:70:3f:fb:29:a4:e3:6d:4d:a4:
13:b0:23:0c:68:3c:31:9e:ce:98:92:43:73:1d:42:36:30:8d:
8a:56:43:a8:0e:ab:02:d5:ed:26:b2:f0:48:af:89:e8:a9:b9:
3c:25:84:f9:36:1b:f1:3d:e8:90:b6:13:aa:14:2b:56:c5:0c:
54:a6:90:45:41:dd:c8:07:51:19:3d:f5:10:2d:ff:64:11:30:
fc:30:4f:b1:c7:79:bb:1b:17:97:4e:ae:6c:fb:25:99:60:24:
1d:60:82:b3:b2:cb:de:d0:12:72:65:95:a5:27:67:a2:ce:28:
fe:5d:b0:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:36:14 2025 by rpki-client