Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f7ca4a-ca73-47f8-9fd7-9b2f51b80a98/1/skW6mTRnrJBXYcxt-Zc6z3gEdho.roa
File: skW6mTRnrJBXYcxt-Zc6z3gEdho.roa (raw, json)
Hash identifier: KM4A5R/ZQTLCtfP46l0wZ8+sKSHnCIdUTaB+eFvF1Eg=
Subject key identifier: B2:45:BA:99:34:67:AC:90:57:61:CC:6D:F9:97:3A:CF:78:04:76:1A
Certificate issuer: /CN=30d5e2022ea82ec77f92dddb776618cd6c057575
Certificate serial: 01942067ED94FCC7B592A25124C511C6DE63
Authority key identifier: 30:D5:E2:02:2E:A8:2E:C7:7F:92:DD:DB:77:66:18:CD:6C:05:75:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MNXiAi6oLsd_kt3bd2YYzWwFdXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f7ca4a-ca73-47f8-9fd7-9b2f51b80a98/1/skW6mTRnrJBXYcxt-Zc6z3gEdho.roa
Signing time: Wed 01 Jan 2025 05:47:49 +0000
ROA not before: Wed 01 Jan 2025 05:47:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39647
IP address blocks: 193.84.247.0/24 maxlen: 24
193.84.253.0/24 maxlen: 24
193.84.254.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:ed:94:fc:c7:b5:92:a2:51:24:c5:11:c6:de:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30d5e2022ea82ec77f92dddb776618cd6c057575
Validity
Not Before: Jan 1 05:47:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b245ba993467ac905761cc6df9973acf7804761a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:8e:1d:3d:df:c6:1d:55:bc:5c:57:08:9d:77:
88:6e:3c:b6:bb:ba:44:2f:08:4f:2f:e9:40:83:9f:
22:df:9a:26:ca:d4:a3:75:9c:8d:c3:0a:c2:21:21:
23:04:2d:e4:c6:fd:6c:5d:c1:fa:3d:0b:0f:dc:4b:
c5:4a:b2:c9:be:e8:ac:19:87:0b:3d:b1:5f:e2:fa:
7e:57:7a:d8:53:ed:e5:8a:7f:4f:12:1b:74:3a:32:
7b:2d:e4:a3:66:bc:26:b5:2d:e3:2c:cf:a7:a5:50:
69:6e:b8:2d:37:56:39:91:0c:ed:61:c2:ae:ce:9e:
d0:98:b2:bc:89:b3:b0:d8:ab:95:fd:40:b5:be:4f:
8e:e5:c4:f7:82:fe:8f:a9:bd:df:f0:0c:28:95:98:
1c:83:14:e2:7c:0b:63:9d:be:ab:46:ef:81:9b:82:
5d:25:37:02:01:ab:50:ec:5c:6d:49:66:37:f8:b1:
05:12:7b:97:83:5e:bd:1c:ed:34:45:01:26:d3:7f:
9b:0f:7c:d6:08:89:b7:04:d5:3c:1a:36:0c:41:06:
c7:4c:e6:e0:d4:1a:67:23:dc:96:fc:c6:c0:eb:f4:
7a:ab:62:dc:e6:e6:0e:ab:ab:02:80:d3:0e:f7:99:
0c:95:90:a6:6d:d8:4e:7d:76:47:d5:18:25:23:b4:
ee:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:45:BA:99:34:67:AC:90:57:61:CC:6D:F9:97:3A:CF:78:04:76:1A
X509v3 Authority Key Identifier:
keyid:30:D5:E2:02:2E:A8:2E:C7:7F:92:DD:DB:77:66:18:CD:6C:05:75:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MNXiAi6oLsd_kt3bd2YYzWwFdXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f7ca4a-ca73-47f8-9fd7-9b2f51b80a98/1/skW6mTRnrJBXYcxt-Zc6z3gEdho.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f7ca4a-ca73-47f8-9fd7-9b2f51b80a98/1/MNXiAi6oLsd_kt3bd2YYzWwFdXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.84.247.0/24
193.84.253.0-193.84.254.255
Signature Algorithm: sha256WithRSAEncryption
5d:f1:56:48:dd:51:95:01:41:ce:4e:b6:89:04:3f:de:7f:b0:
93:57:92:c2:14:10:68:76:30:02:5b:44:ec:0f:98:a9:3a:8f:
1c:a9:a5:b3:eb:bb:84:34:c0:31:a7:4d:32:d3:6c:b6:d4:8b:
54:e5:d2:bc:75:5d:47:4b:43:10:4d:db:f7:9b:8e:50:95:1b:
5b:67:54:27:a4:ab:10:57:5e:be:3a:20:6b:aa:91:bb:31:e7:
8e:84:51:61:ce:bc:54:12:c3:39:4e:78:72:66:4b:96:8f:5f:
20:bb:71:a5:d3:6d:ae:a8:ac:8a:5b:8a:e4:df:31:4b:bb:d9:
3f:a2:89:24:ce:b4:d8:73:04:a6:c9:67:7a:47:2b:e6:55:4e:
3c:f9:a1:bd:5a:ca:73:46:42:0f:c8:ae:d1:b3:79:8c:c5:ff:
3c:d5:a2:01:89:5d:25:8f:d7:40:20:5a:4f:b9:6a:b5:f0:4a:
ad:a1:5f:97:44:ff:ca:de:94:83:14:19:9f:fb:09:06:86:3c:
60:d3:d1:3a:5b:86:d1:ff:31:32:06:15:63:bc:d7:f6:ac:0b:
54:16:ee:09:ee:5b:9f:6b:8d:d6:45:5d:05:12:bc:04:35:db:
f2:e2:f5:a3:24:bd:09:bb:24:d3:81:81:ce:f2:a7:e4:45:e1:
50:b6:06:32
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Apr 9 02:00:41 2025 by rpki-client