Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/a19d51-07e5-4db5-9d0e-66d3198bf1a2/1/p62oDeoT4vvUHo4yGegZ6_TWKY0.roa
File: p62oDeoT4vvUHo4yGegZ6_TWKY0.roa (raw, json)
Hash identifier: JITepKVcCtsEzEyKS9PibwaqvpfOsAJXxc4iERP2W4s=
Subject key identifier: A7:AD:A8:0D:EA:13:E2:FB:D4:1E:8E:32:19:E8:19:EB:F4:D6:29:8D
Certificate issuer: /CN=3d4276373b040fa9ac77e566c5b6cdf35b53b937
Certificate serial: 01942825F58F18990F0797F803328B9FA1A2
Authority key identifier: 3D:42:76:37:3B:04:0F:A9:AC:77:E5:66:C5:B6:CD:F3:5B:53:B9:37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PUJ2NzsED6msd-VmxbbN81tTuTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/a19d51-07e5-4db5-9d0e-66d3198bf1a2/1/p62oDeoT4vvUHo4yGegZ6_TWKY0.roa
Signing time: Thu 02 Jan 2025 17:52:43 +0000
ROA not before: Thu 02 Jan 2025 17:52:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15830
IP address blocks: 193.238.232.0/24 maxlen: 24
193.238.233.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:25:f5:8f:18:99:0f:07:97:f8:03:32:8b:9f:a1:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d4276373b040fa9ac77e566c5b6cdf35b53b937
Validity
Not Before: Jan 2 17:52:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a7ada80dea13e2fbd41e8e3219e819ebf4d6298d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:1f:e2:92:e4:8f:c7:9d:3f:d5:90:6c:09:f7:
87:cc:da:5c:52:90:65:f7:6d:54:72:cd:c5:2b:c4:
97:b1:ea:fc:2d:21:4c:cf:a5:ae:2b:67:d6:4c:0e:
70:c4:df:fe:a1:80:46:73:1c:28:f2:5a:8d:b4:58:
cc:5b:d3:e6:16:6e:cd:c2:07:d0:ee:44:fa:26:41:
be:cb:c0:92:f6:4c:46:1d:a6:42:0a:ad:74:73:44:
c6:ce:79:e9:ee:3d:06:94:58:2b:e3:71:9b:f4:50:
e6:7c:3d:6c:01:44:5c:a7:68:b0:75:73:0e:45:67:
4c:af:7c:d2:46:de:6d:0a:0f:f2:82:3a:67:67:4f:
8a:00:9c:f7:d9:89:65:5b:63:c4:9a:a6:f9:d7:04:
87:9b:a5:85:6e:15:0b:ab:8b:78:d2:25:82:f0:bb:
3e:b6:7d:69:a9:92:93:71:6d:71:6d:12:c0:77:b8:
fa:cb:d6:40:6d:44:78:74:07:7e:ca:ee:1b:4d:e5:
3b:ad:ec:e6:d9:7a:d1:c8:a7:32:8d:0b:83:9a:21:
59:fc:7d:2e:65:8b:1f:77:23:a7:dc:18:2e:80:ab:
94:ee:79:af:2d:f1:e6:52:bf:36:17:89:fa:4e:47:
b8:f7:bc:4a:ea:8d:f2:7c:f2:2f:12:c0:a3:5c:12:
5c:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:AD:A8:0D:EA:13:E2:FB:D4:1E:8E:32:19:E8:19:EB:F4:D6:29:8D
X509v3 Authority Key Identifier:
keyid:3D:42:76:37:3B:04:0F:A9:AC:77:E5:66:C5:B6:CD:F3:5B:53:B9:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PUJ2NzsED6msd-VmxbbN81tTuTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/a19d51-07e5-4db5-9d0e-66d3198bf1a2/1/p62oDeoT4vvUHo4yGegZ6_TWKY0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/a19d51-07e5-4db5-9d0e-66d3198bf1a2/1/PUJ2NzsED6msd-VmxbbN81tTuTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.238.232.0/23
Signature Algorithm: sha256WithRSAEncryption
27:d7:63:94:0f:5b:41:56:2d:26:d9:e5:f9:a0:3c:c5:8f:aa:
42:02:80:96:e7:5f:aa:9e:5e:d6:25:0a:36:4e:23:44:c8:97:
59:1c:35:fa:a2:4d:4c:d8:d2:75:91:0d:bd:27:42:58:04:78:
c0:e7:cb:fb:bd:2f:d6:bf:f2:63:a7:75:0a:97:49:c4:26:50:
b7:e7:1b:d4:e3:c1:2f:9f:f8:0e:01:55:70:3e:28:cd:da:b5:
f2:18:f1:ee:b8:b9:55:ab:4e:87:d3:b2:66:29:44:0a:15:24:
81:d2:3c:db:60:2a:d4:19:8c:b1:99:27:7e:37:53:61:ec:fb:
34:a1:87:9b:cc:5a:ee:c0:d9:4a:1f:a9:b1:c9:df:c7:1d:53:
29:73:00:2d:d0:07:26:a3:41:cf:be:72:31:e5:d4:18:3d:46:
bc:c4:54:e4:7b:e5:13:b8:55:23:31:e8:83:e0:09:3c:c1:ff:
a7:c4:42:bb:ca:81:72:71:8c:bb:03:f9:1c:e0:17:d2:58:6a:
48:43:64:46:4f:19:c7:b2:a1:77:5e:a4:2b:35:fa:fb:c0:75:
10:30:b4:2b:af:d8:51:73:7b:e4:be:63:bf:4e:73:5d:76:d9:
c7:d1:90:b7:19:79:3c:0d:3e:d9:b8:99:0e:05:8d:9f:ba:97:
9b:5d:0c:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:03:18 2025 by rpki-client