Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/7ebdee-a600-4776-8f02-fea92cbe2d2c/1/hWRauvdDJQt-oDXnvWA4MwMmCao.roa
File: hWRauvdDJQt-oDXnvWA4MwMmCao.roa (raw, json)
Hash identifier: XqDB4iBF4pQimyQpMd5E4c4AjMzIAL2t4iD/Z/oy7sk=
Subject key identifier: 85:64:5A:BA:F7:43:25:0B:7E:A0:35:E7:BD:60:38:33:03:26:09:AA
Certificate issuer: /CN=30460d73b5bbcbb5eee97a4a39eeb55572d35a80
Certificate serial: 0194266C009B5917FB151685E048A52E4C9F
Authority key identifier: 30:46:0D:73:B5:BB:CB:B5:EE:E9:7A:4A:39:EE:B5:55:72:D3:5A:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MEYNc7W7y7Xu6XpKOe61VXLTWoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/7ebdee-a600-4776-8f02-fea92cbe2d2c/1/hWRauvdDJQt-oDXnvWA4MwMmCao.roa
Signing time: Thu 02 Jan 2025 09:49:59 +0000
ROA not before: Thu 02 Jan 2025 09:49:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31184
IP address blocks: 193.22.253.0/24 maxlen: 24
195.74.40.0/22 maxlen: 24
2a13:6140::/29 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:00:9b:59:17:fb:15:16:85:e0:48:a5:2e:4c:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30460d73b5bbcbb5eee97a4a39eeb55572d35a80
Validity
Not Before: Jan 2 09:49:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=85645abaf743250b7ea035e7bd603833032609aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:f3:f2:ee:ea:dc:e9:57:f4:31:a4:f5:75:9b:
d9:db:0d:07:fa:f8:39:d8:9b:8a:1e:7d:19:a3:f3:
ac:3c:7b:3e:10:0b:51:81:2e:45:b9:57:c7:3f:59:
3b:f7:09:22:ec:52:f8:39:79:a6:e1:cd:88:b8:a4:
23:be:5b:65:1c:b2:78:94:b8:a6:2e:47:1d:0f:bb:
40:9e:24:c7:88:29:08:ec:11:09:71:f6:9b:22:d3:
c7:57:00:16:c3:f0:c6:da:28:60:59:53:5b:22:fc:
da:4e:aa:69:23:e9:f9:0b:33:7f:3f:6d:8c:3d:cf:
c5:83:5c:41:b0:f3:5e:3f:7c:b0:59:37:98:cf:ea:
64:a7:07:32:e5:c0:8d:0f:01:42:65:58:77:d3:39:
fe:d9:7b:8c:29:70:c7:0c:94:49:7d:53:25:94:20:
76:f1:e6:52:89:43:49:f7:6d:5c:12:91:42:7a:b2:
e7:a4:43:99:4a:59:a7:ba:8b:f8:be:68:0c:e4:2e:
db:f4:9c:d9:b7:6e:38:a0:39:83:c4:22:5b:4a:f4:
91:42:0f:37:23:1e:33:d8:f9:9d:b1:e4:12:d4:b4:
ad:b0:ae:a9:0f:42:12:70:67:ec:c6:81:93:b7:49:
f3:b4:6c:9b:06:90:43:b5:2d:db:60:f1:d3:7f:46:
48:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:64:5A:BA:F7:43:25:0B:7E:A0:35:E7:BD:60:38:33:03:26:09:AA
X509v3 Authority Key Identifier:
keyid:30:46:0D:73:B5:BB:CB:B5:EE:E9:7A:4A:39:EE:B5:55:72:D3:5A:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MEYNc7W7y7Xu6XpKOe61VXLTWoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/7ebdee-a600-4776-8f02-fea92cbe2d2c/1/hWRauvdDJQt-oDXnvWA4MwMmCao.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/7ebdee-a600-4776-8f02-fea92cbe2d2c/1/MEYNc7W7y7Xu6XpKOe61VXLTWoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.22.253.0/24
195.74.40.0/22
IPv6:
2a13:6140::/29
Signature Algorithm: sha256WithRSAEncryption
55:00:fe:4a:89:9e:ec:34:e4:3e:85:c6:02:db:b7:ad:93:26:
73:e0:5a:d2:9d:a1:0c:85:fc:cd:a1:ec:9d:97:fa:5a:d6:6e:
85:90:9b:96:0a:28:f2:22:86:af:58:9e:9b:a0:a7:60:a3:4b:
a1:4b:73:38:4e:4a:de:66:eb:be:83:1d:67:2f:27:59:cd:8d:
5d:54:87:77:74:c9:a5:6a:7d:e0:7b:36:c0:2d:c2:28:52:de:
ec:64:d6:2b:1d:f2:a3:f4:15:88:dd:b1:39:90:ca:d9:90:55:
62:57:9c:77:03:a6:b4:83:de:b5:f4:ab:a9:c2:30:59:8a:4b:
61:14:02:d6:14:6e:c1:62:31:88:93:86:6d:26:d5:6c:57:8f:
89:80:5a:05:a7:24:0d:76:3c:94:36:1a:2a:97:39:c7:f5:d3:
05:a5:3d:d7:dd:77:de:0a:3b:de:c2:83:1d:80:40:a0:77:50:
c3:61:18:09:d7:fa:66:d7:20:94:3d:0e:ac:2f:d8:a3:25:be:
6e:e8:4e:3f:7f:9d:00:3b:a0:c3:15:63:e6:fa:f5:27:8d:87:
9c:cc:0b:c1:71:e0:ed:ea:d6:b3:64:16:c2:d1:85:e3:dd:61:
0e:fa:a2:c2:1d:78:ef:d1:da:05:3a:34:0e:df:71:ee:5b:61:
74:b5:1b:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:49:50 2025 by rpki-client