Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/IJoxcEd7VggD3on9VNdBwQ2ai4M.roa
File: IJoxcEd7VggD3on9VNdBwQ2ai4M.roa (raw, json)
Hash identifier: l1C0lwy47+vk4Lvd7mWl9lGXam1kddh45sEhzv6D1cA=
Subject key identifier: 20:9A:31:70:47:7B:56:08:03:DE:89:FD:54:D7:41:C1:0D:9A:8B:83
Certificate issuer: /CN=ea2d102b6112b0d9a8b8eebac4b97c819f97c606
Certificate serial: 01942143ADBF8ED20B8C3BDF011573DB7F53
Authority key identifier: EA:2D:10:2B:61:12:B0:D9:A8:B8:EE:BA:C4:B9:7C:81:9F:97:C6:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6i0QK2ESsNmouO66xLl8gZ-XxgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/IJoxcEd7VggD3on9VNdBwQ2ai4M.roa
Signing time: Wed 01 Jan 2025 09:47:50 +0000
ROA not before: Wed 01 Jan 2025 09:47:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 134823
IP address blocks: 193.42.40.0/22 maxlen: 24
2a13:2200::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:ad:bf:8e:d2:0b:8c:3b:df:01:15:73:db:7f:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea2d102b6112b0d9a8b8eebac4b97c819f97c606
Validity
Not Before: Jan 1 09:47:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=209a3170477b560803de89fd54d741c10d9a8b83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:55:bb:9d:ab:13:10:f6:cb:8c:98:6a:d1:48:
2e:ff:9b:e6:d6:07:5e:73:8a:44:9a:59:c9:1f:9d:
f7:ef:62:61:1c:8b:20:ea:1c:55:2c:a4:17:2b:27:
52:ea:3e:50:7a:c3:2f:a0:ba:17:48:7e:85:8d:3c:
3d:f7:7a:2d:db:b2:07:03:ad:e4:a7:da:15:a0:3e:
97:dc:e4:57:53:2a:aa:00:32:d4:00:60:bd:6f:a3:
72:6b:44:b7:2c:57:a3:0f:9a:3b:8e:41:37:cc:20:
67:fc:6a:24:70:00:78:e8:b2:c4:7c:fc:04:5b:29:
a6:4a:ce:17:10:2c:67:25:e3:43:56:5a:d4:77:b8:
f9:12:c8:31:d8:6b:c6:9a:5d:6c:c3:01:e2:50:75:
bf:27:9b:70:c5:d9:bf:80:4f:e3:65:6a:5f:5e:63:
27:c3:34:00:c1:62:3c:42:73:6b:2c:01:e7:5d:ae:
cd:5c:43:7f:9e:c8:c6:a9:da:74:b5:fd:b7:1a:ef:
e4:b2:80:fe:6a:63:0f:09:1d:20:16:cb:f0:39:48:
98:cd:d0:76:36:d4:6e:e7:92:d8:5a:71:15:6c:a8:
84:bd:7e:c7:9b:64:ee:d6:c9:8a:38:6f:5d:e9:97:
79:3e:a0:3d:97:30:21:d0:c2:51:07:1d:13:1e:69:
d1:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:9A:31:70:47:7B:56:08:03:DE:89:FD:54:D7:41:C1:0D:9A:8B:83
X509v3 Authority Key Identifier:
keyid:EA:2D:10:2B:61:12:B0:D9:A8:B8:EE:BA:C4:B9:7C:81:9F:97:C6:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6i0QK2ESsNmouO66xLl8gZ-XxgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/IJoxcEd7VggD3on9VNdBwQ2ai4M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.42.40.0/22
IPv6:
2a13:2200::/29
Signature Algorithm: sha256WithRSAEncryption
97:7f:a5:d6:9b:c5:79:b3:d0:91:d1:a8:e3:93:4d:0e:e4:9e:
c5:13:cc:c7:f1:32:99:d2:a9:47:c4:b1:4a:0c:fb:53:70:25:
2a:ed:51:47:a1:39:20:2f:a5:80:ca:7c:cc:36:84:d7:3d:35:
29:8e:a7:83:a8:01:ff:9e:55:2c:32:7c:77:86:55:2e:bc:7c:
39:85:f0:f3:d5:1b:e6:57:3a:2b:b8:23:30:4c:de:43:e3:aa:
b8:ab:b2:dd:e5:0d:b6:a2:99:61:ee:92:5c:57:19:35:05:e0:
16:f3:11:e7:08:a9:6a:8b:62:94:90:c0:cc:3b:c3:14:e6:23:
46:b5:50:77:e5:51:28:b3:f0:bc:fd:65:93:4b:47:64:1e:0a:
d1:1e:e7:c8:f8:8a:22:76:ea:08:d4:68:46:7b:90:b7:d5:44:
20:81:8d:ba:59:e7:f3:c0:71:73:93:3a:b7:79:4e:b9:4e:a7:
ca:75:c5:8c:0b:00:9f:be:e2:12:bd:21:4a:1c:b0:7e:66:55:
7b:ed:bf:29:99:d8:fd:f1:40:b1:43:60:95:dd:fe:89:67:7b:
3a:e4:d1:cc:8b:a8:71:dc:02:4d:93:a2:95:48:b1:8e:1d:9c:
48:ad:27:a8:a8:52:cc:c8:df:a8:04:fc:fa:f8:53:05:6e:d6:
6c:0f:34:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 20:05:12 2025 by rpki-client