Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/42710b-65c3-4c0f-ae97-b1f4384313c0/1/CxQQAahzMolSX6a9lJ0-pCP5sb4.roa
File: CxQQAahzMolSX6a9lJ0-pCP5sb4.roa (raw, json)
Hash identifier: 3ZL3ARUaIfvA3i9cxAwflRHX+yAdbwGwcvxYxx4l2zc=
Subject key identifier: 0B:14:10:01:A8:73:32:89:52:5F:A6:BD:94:9D:3E:A4:23:F9:B1:BE
Certificate issuer: /CN=f78b6354748fe3e852e06498282c21540075fc66
Certificate serial: 019426D965A678149812D9132DF0BD495EA5
Authority key identifier: F7:8B:63:54:74:8F:E3:E8:52:E0:64:98:28:2C:21:54:00:75:FC:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/94tjVHSP4-hS4GSYKCwhVAB1_GY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/42710b-65c3-4c0f-ae97-b1f4384313c0/1/CxQQAahzMolSX6a9lJ0-pCP5sb4.roa
Signing time: Thu 02 Jan 2025 11:49:29 +0000
ROA not before: Thu 02 Jan 2025 11:49:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 30058
IP address blocks: 193.47.0.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:65:a6:78:14:98:12:d9:13:2d:f0:bd:49:5e:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f78b6354748fe3e852e06498282c21540075fc66
Validity
Not Before: Jan 2 11:49:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0b141001a8733289525fa6bd949d3ea423f9b1be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:89:8d:bb:38:9d:14:36:38:3a:bf:2d:0d:e2:
e8:8c:8b:84:8f:f0:5f:db:a8:96:58:bb:36:e4:4a:
ff:e5:2d:29:67:f0:d8:0e:44:68:4c:e1:20:c8:b2:
31:2b:a6:b8:c6:c6:33:5b:8f:c4:00:b0:4c:dc:05:
93:b4:27:df:3a:18:3b:50:01:04:e3:0a:d3:a6:91:
e8:c7:fc:aa:ae:da:f1:e3:d5:83:85:09:0e:f4:10:
c9:e4:66:e6:3c:1f:e3:93:69:f7:23:7e:da:63:22:
01:98:44:88:9f:d7:26:97:75:d3:56:75:6a:8e:54:
72:df:00:1f:34:eb:dc:29:80:43:9c:f8:76:6d:25:
7a:5b:ad:a2:15:4c:4b:4f:54:22:bd:43:58:fb:db:
f0:3d:75:dc:7a:42:28:65:7c:55:00:1f:2a:fd:ae:
8c:5b:53:84:c7:15:ab:c0:f8:6e:fd:99:44:cd:a0:
f4:c4:0d:84:3b:68:28:68:dd:6a:88:9b:2f:e0:8e:
68:a9:67:30:2c:6a:e3:bc:f2:97:2d:18:ec:54:e1:
0a:d6:b0:45:e5:f6:7b:cc:dc:90:48:e7:e1:f9:08:
4b:56:28:18:1d:7d:38:b5:10:37:b3:19:53:d4:7b:
b1:1d:b1:41:02:96:f8:02:5b:93:61:d2:fa:61:73:
fe:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:14:10:01:A8:73:32:89:52:5F:A6:BD:94:9D:3E:A4:23:F9:B1:BE
X509v3 Authority Key Identifier:
keyid:F7:8B:63:54:74:8F:E3:E8:52:E0:64:98:28:2C:21:54:00:75:FC:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/94tjVHSP4-hS4GSYKCwhVAB1_GY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/42710b-65c3-4c0f-ae97-b1f4384313c0/1/CxQQAahzMolSX6a9lJ0-pCP5sb4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/42710b-65c3-4c0f-ae97-b1f4384313c0/1/94tjVHSP4-hS4GSYKCwhVAB1_GY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.47.0.0/24
Signature Algorithm: sha256WithRSAEncryption
79:a5:74:b8:43:cd:56:1f:23:a2:66:0f:b1:d4:a8:bd:8f:87:
ba:39:cd:5a:7a:04:81:5d:a2:07:d8:a0:44:bc:fc:d6:d4:0c:
7c:84:be:22:72:39:c1:96:60:ab:31:5c:4a:3d:7a:4f:b0:86:
26:af:f6:66:98:a1:91:a3:7d:a3:03:0e:34:7f:71:7f:81:88:
c2:bf:b4:fa:8b:c6:bb:2b:4c:62:b9:ec:80:f1:54:52:94:5b:
20:ee:00:0d:0a:ee:72:9e:ae:bf:17:a7:33:03:aa:1e:61:e1:
3e:c9:36:7d:90:5b:e8:f1:b9:21:02:76:2a:4d:e2:76:33:63:
0a:23:b0:66:d3:ac:93:4e:03:8c:db:7b:58:50:9d:83:50:bf:
01:d9:a6:a5:04:a8:e7:ee:e0:b1:d5:1f:bc:69:81:ef:b9:79:
ca:27:53:3e:c1:19:ea:77:f4:34:e5:c3:4a:a4:55:6b:d5:72:
49:84:3f:e2:22:ed:6d:cb:f5:3a:1f:ab:80:0a:26:8c:02:98:
1e:fe:e6:1a:b4:53:80:6d:c3:1c:e6:f3:5a:fa:9e:ec:d2:50:
21:ba:3f:f5:05:c9:90:7c:ad:1a:14:95:23:e5:8f:38:fc:a4:
0c:e4:7d:9b:30:3e:67:98:86:5e:d8:f8:bc:d2:11:c4:65:c5:
70:dc:ba:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:20:07 2025 by rpki-client