Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/86802e-3f43-4bca-9cc2-4fb40485ff7b/1/7XfhLun6Ve5uRxXwPsgdrE6D-fI.roa
File: 7XfhLun6Ve5uRxXwPsgdrE6D-fI.roa (raw, json)
Hash identifier: b8AATSifx7/LvpsKfDCuwWcrOC9fgkYZg2ZM6+VpEfM=
Subject key identifier: ED:77:E1:2E:E9:FA:55:EE:6E:47:15:F0:3E:C8:1D:AC:4E:83:F9:F2
Certificate issuer: /CN=c0ddd2d4f030fa3638c04be636ef93d289271652
Certificate serial: 01942746CFA3FDDF1E89AC907638FBBDF6F5
Authority key identifier: C0:DD:D2:D4:F0:30:FA:36:38:C0:4B:E6:36:EF:93:D2:89:27:16:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wN3S1PAw-jY4wEvmNu-T0oknFlI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/86802e-3f43-4bca-9cc2-4fb40485ff7b/1/7XfhLun6Ve5uRxXwPsgdrE6D-fI.roa
Signing time: Thu 02 Jan 2025 13:48:59 +0000
ROA not before: Thu 02 Jan 2025 13:48:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214232
IP address blocks: 193.93.40.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:46:cf:a3:fd:df:1e:89:ac:90:76:38:fb:bd:f6:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0ddd2d4f030fa3638c04be636ef93d289271652
Validity
Not Before: Jan 2 13:48:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ed77e12ee9fa55ee6e4715f03ec81dac4e83f9f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:49:3a:b7:61:4a:37:79:86:ae:f5:d0:d4:85:
ae:37:b7:0f:cf:67:d5:bc:d1:b6:a3:a1:ad:87:e0:
4b:b2:f8:d2:e6:b9:98:7d:13:b6:45:24:63:68:66:
af:9e:ac:e4:53:60:c9:82:e4:d0:34:60:73:ce:1a:
98:52:e3:c6:9a:d3:60:03:d1:51:8e:23:fe:d6:ab:
d0:4a:25:d6:d1:b9:29:6a:48:73:e2:e3:4c:57:3b:
ef:12:7d:07:04:7f:47:87:5a:f1:ff:7c:5d:a5:e6:
61:a2:9a:31:03:b1:8a:5a:e2:c7:1b:fa:9b:f3:b5:
3b:d8:33:12:fe:21:09:90:55:79:fc:80:bf:58:5f:
ff:ea:c4:cc:68:0f:d5:13:fa:28:80:78:a0:1c:84:
86:77:c7:56:1c:45:91:27:30:0b:9f:05:32:a0:e7:
d3:39:ff:2e:63:e8:93:36:86:85:4b:f2:6c:11:aa:
4f:a4:d6:cb:a0:7b:82:d4:f6:c0:71:a5:d4:92:b0:
37:ab:c9:0a:a6:8b:37:87:4b:5d:14:a0:75:9e:40:
eb:f3:32:5a:01:f0:61:f6:a8:f6:87:1b:6a:a0:66:
d1:02:16:f2:41:c5:67:b4:dd:f7:42:f8:e9:c3:2c:
57:c5:12:1b:04:66:3d:e6:bb:ec:73:e5:ac:6e:80:
83:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:77:E1:2E:E9:FA:55:EE:6E:47:15:F0:3E:C8:1D:AC:4E:83:F9:F2
X509v3 Authority Key Identifier:
keyid:C0:DD:D2:D4:F0:30:FA:36:38:C0:4B:E6:36:EF:93:D2:89:27:16:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wN3S1PAw-jY4wEvmNu-T0oknFlI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/86802e-3f43-4bca-9cc2-4fb40485ff7b/1/7XfhLun6Ve5uRxXwPsgdrE6D-fI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/86802e-3f43-4bca-9cc2-4fb40485ff7b/1/wN3S1PAw-jY4wEvmNu-T0oknFlI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.93.40.0/22
Signature Algorithm: sha256WithRSAEncryption
3b:f4:3a:6d:c1:25:b2:b8:1d:71:23:94:87:fb:90:9d:6f:1a:
2e:c0:cf:be:a9:d5:3a:a3:7b:83:23:ea:dd:83:85:0f:51:6b:
66:e7:40:15:24:a9:24:27:f0:b6:4c:36:e9:50:d9:c1:c4:40:
3d:59:dd:05:85:81:23:2b:af:1c:53:17:70:f6:9e:11:04:46:
b8:58:39:4c:71:a4:eb:5c:58:19:5b:15:5e:59:06:55:3e:51:
49:15:eb:99:d2:f9:b7:4a:5e:9e:01:70:5f:19:5a:63:9d:b4:
e3:44:7a:0f:80:dd:1f:59:80:47:67:69:be:35:92:7e:00:af:
73:d4:f9:4e:b1:11:4b:de:ce:b8:4f:73:1f:d8:3b:dc:dc:95:
d9:16:d4:c9:f0:35:e4:d5:98:c7:2d:3f:83:2a:f8:8e:b6:48:
e5:4e:4b:78:9f:e1:15:28:b2:09:4c:4c:cd:94:a3:a7:b6:54:
8c:3a:ea:2c:9e:cc:bd:6a:45:c7:bc:6f:04:ca:92:99:ef:e3:
a4:36:4c:16:71:39:e0:57:d6:fa:58:c9:d9:08:58:da:7c:30:
21:41:22:f0:e1:5e:31:6a:b5:45:ac:9e:6d:95:ea:65:71:ba:
81:7e:5d:41:6c:7f:bc:dd:70:fb:ef:61:b2:5e:dc:26:0e:fc:
7d:4a:7f:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:58:43 2025 by rpki-client