Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/9758eb-4108-4087-a818-50ea67327cd1/1/6R0wvkFPscZQ2uww-ZvwnaXh--0.roa
File: 6R0wvkFPscZQ2uww-ZvwnaXh--0.roa (raw, json)
Hash identifier: wyiJ7rZP6x6kzeIfld1VjsLp4nIqzGhNhuxTGdTq1Ek=
Subject key identifier: E9:1D:30:BE:41:4F:B1:C6:50:DA:EC:30:F9:9B:F0:9D:A5:E1:FB:ED
Certificate issuer: /CN=d85022282e34699fe548b7528519a25a50d9133a
Certificate serial: 019424B39F6941A33922BADA9BCD99760172
Authority key identifier: D8:50:22:28:2E:34:69:9F:E5:48:B7:52:85:19:A2:5A:50:D9:13:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2FAiKC40aZ_lSLdShRmiWlDZEzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/9758eb-4108-4087-a818-50ea67327cd1/1/6R0wvkFPscZQ2uww-ZvwnaXh--0.roa
Signing time: Thu 02 Jan 2025 01:48:58 +0000
ROA not before: Thu 02 Jan 2025 01:48:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48943
IP address blocks: 193.25.98.0/23 maxlen: 23
193.27.40.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:9f:69:41:a3:39:22:ba:da:9b:cd:99:76:01:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d85022282e34699fe548b7528519a25a50d9133a
Validity
Not Before: Jan 2 01:48:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e91d30be414fb1c650daec30f99bf09da5e1fbed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:69:f2:db:75:09:90:17:2f:61:52:a9:85:20:
a6:c8:e1:c0:30:78:0e:71:a2:a5:fc:f4:a5:ff:4b:
d6:84:a4:2c:35:8c:2a:e4:57:5f:27:f7:15:8e:27:
3f:cf:4d:b4:28:e8:f7:19:b1:7a:c5:fe:76:4c:24:
4c:c8:aa:22:e7:4a:d2:2e:5e:16:86:5a:a5:cf:d5:
4b:a4:0d:ab:89:e6:80:48:f5:25:28:c0:98:1d:b2:
f0:6d:61:53:2e:6d:8d:9e:54:ba:64:e0:68:e6:a9:
e9:ef:0f:f8:02:4a:8d:74:04:b7:a1:99:fa:e8:ab:
95:8c:37:91:fc:e6:24:72:c7:a3:41:fc:4d:76:b6:
6a:29:97:74:d7:a4:ab:4d:46:a7:b0:0e:30:5a:54:
cd:e8:05:f4:4c:90:8f:04:a6:38:94:4a:63:76:7f:
d6:7d:9b:ce:09:47:84:6f:b0:6f:cb:9a:b2:de:af:
7d:8e:fb:cc:35:fc:df:f2:d4:9a:49:66:61:f1:89:
04:e2:6e:21:dd:74:ef:10:95:fb:47:43:58:b0:88:
db:9f:69:75:79:f7:3c:ec:9d:74:6d:c2:54:6c:16:
c4:0f:c7:5f:5d:c1:a5:e3:eb:db:0e:47:42:3b:54:
81:44:1a:41:d5:a8:47:04:86:a7:63:b7:ce:da:a2:
36:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:1D:30:BE:41:4F:B1:C6:50:DA:EC:30:F9:9B:F0:9D:A5:E1:FB:ED
X509v3 Authority Key Identifier:
keyid:D8:50:22:28:2E:34:69:9F:E5:48:B7:52:85:19:A2:5A:50:D9:13:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2FAiKC40aZ_lSLdShRmiWlDZEzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/9758eb-4108-4087-a818-50ea67327cd1/1/6R0wvkFPscZQ2uww-ZvwnaXh--0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/9758eb-4108-4087-a818-50ea67327cd1/1/2FAiKC40aZ_lSLdShRmiWlDZEzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.25.98.0/23
193.27.40.0/24
Signature Algorithm: sha256WithRSAEncryption
50:b3:d4:fd:ba:a5:c3:c3:c0:87:af:aa:73:e6:42:cd:e1:84:
b9:a3:60:e0:6b:0f:26:3a:b1:52:89:e6:e2:9d:61:6a:02:23:
3c:30:58:4d:78:a6:64:46:09:95:e8:00:13:1e:23:e5:8a:33:
5b:14:09:cd:23:84:f8:af:ab:60:3d:ea:04:2d:90:bf:6e:2d:
a6:a1:3a:62:15:df:79:82:f5:f2:40:dd:80:de:93:f9:29:8c:
72:47:e1:25:fb:f1:99:19:2e:f4:80:66:1a:1f:e7:b5:4b:c3:
bb:7b:84:a6:fa:4a:dc:9e:f2:1c:5a:69:e8:c6:a5:7f:c6:e0:
26:4b:eb:a3:e8:36:b9:54:4d:43:36:b0:37:5d:94:a4:a1:f6:
2a:71:21:0f:f4:4e:51:87:1e:68:72:1a:31:51:23:f6:28:b2:
03:5a:6a:56:b4:d7:91:d9:45:57:7f:54:e4:4e:bb:84:b1:24:
21:99:13:78:3d:1b:ff:a7:92:82:f8:7f:76:42:15:87:56:6a:
d1:a8:eb:3d:5f:b8:24:67:eb:7a:f8:27:19:b5:59:12:38:4a:
dd:5e:45:70:04:2d:29:77:24:83:4a:57:a3:72:78:20:0c:9a:
71:0b:fb:d2:10:cd:72:5f:14:99:7e:6f:b8:0d:03:67:41:5d:
35:7c:3e:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:37:49 2025 by rpki-client