Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/J0mrTDoDAe4tdcNY4ZTx8ruuu9g.roa
File: J0mrTDoDAe4tdcNY4ZTx8ruuu9g.roa (raw, json)
Hash identifier: SdkYwpw3qIRaB5VQaHi9AMXoPRVnXFJoZo9ChQzY2P8=
Subject key identifier: 27:49:AB:4C:3A:03:01:EE:2D:75:C3:58:E1:94:F1:F2:BB:AE:BB:D8
Certificate issuer: /CN=1f68138d4ec2ea51cacef09ff1058a370a5be190
Certificate serial: 019497B0B0524A506398BCDBD70BBB1ED766
Authority key identifier: 1F:68:13:8D:4E:C2:EA:51:CA:CE:F0:9F:F1:05:8A:37:0A:5B:E1:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/J0mrTDoDAe4tdcNY4ZTx8ruuu9g.roa
Signing time: Fri 24 Jan 2025 09:42:06 +0000
ROA not before: Fri 24 Jan 2025 09:42:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5411
IP address blocks: 193.44.76.0/22 maxlen: 22
193.44.76.0/23 maxlen: 23
193.44.78.0/23 maxlen: 23
193.44.172.0/22 maxlen: 22
193.44.172.0/23 maxlen: 23
193.44.174.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:97:b0:b0:52:4a:50:63:98:bc:db:d7:0b:bb:1e:d7:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f68138d4ec2ea51cacef09ff1058a370a5be190
Validity
Not Before: Jan 24 09:42:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2749ab4c3a0301ee2d75c358e194f1f2bbaebbd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:9e:06:cd:9f:7e:bc:49:a9:be:73:3b:45:5c:
79:c4:de:7e:76:72:49:b5:93:80:99:35:02:b3:23:
ae:87:fb:0b:04:b2:7a:de:1f:56:6f:10:88:84:95:
a7:e2:d4:82:c9:ce:8e:28:5f:dc:bb:0c:27:8e:77:
e8:f3:ca:8d:1e:d2:9f:48:94:98:d7:24:88:41:10:
bc:ea:99:2d:3a:37:16:cc:15:b8:8a:ac:71:6f:3d:
34:ae:e2:ec:92:dd:9b:46:81:36:51:8e:7f:e5:e8:
7c:04:e8:4b:9a:fd:6b:9b:eb:d6:47:01:1a:15:4a:
5b:39:a2:4c:b5:5a:e8:7a:0f:77:6c:75:7f:cd:97:
2b:9a:83:e8:6b:5b:4b:a2:a5:ae:99:99:ad:7a:84:
5b:be:fd:aa:d9:37:02:73:8c:18:0c:28:95:56:6d:
f2:ad:d9:d5:b4:ac:38:ca:d8:cf:98:a7:55:84:55:
9d:88:16:68:03:f3:57:1a:a5:8c:7b:87:aa:c0:2c:
10:8e:ea:a7:71:e1:7c:e8:ec:5a:ed:22:d1:0b:3e:
d6:84:80:8a:a8:11:ee:66:52:37:5b:6b:32:d0:28:
aa:55:c8:f7:89:0b:16:75:96:81:4b:d5:8a:48:93:
ec:8e:44:65:20:01:04:2c:6c:3d:9f:1d:5b:c7:72:
54:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:49:AB:4C:3A:03:01:EE:2D:75:C3:58:E1:94:F1:F2:BB:AE:BB:D8
X509v3 Authority Key Identifier:
keyid:1F:68:13:8D:4E:C2:EA:51:CA:CE:F0:9F:F1:05:8A:37:0A:5B:E1:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/J0mrTDoDAe4tdcNY4ZTx8ruuu9g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.44.76.0/22
193.44.172.0/22
Signature Algorithm: sha256WithRSAEncryption
63:71:c7:6e:47:7a:ff:66:52:1b:84:e1:25:31:66:d0:9d:c5:
11:cf:3e:cc:77:29:2b:b2:fc:76:66:29:3b:58:15:5e:68:9b:
1f:f0:bf:28:f9:4b:d2:a6:60:4f:6f:88:72:57:69:4e:b1:57:
ad:e6:eb:c6:c9:4e:82:fc:c8:fa:a8:95:a6:52:b8:82:b6:79:
52:3b:e9:b4:df:37:b3:6e:3f:08:80:d9:4a:0d:bf:03:be:2f:
d2:48:f4:46:e3:07:2e:aa:3d:5c:5a:65:df:06:d8:9a:d3:5e:
33:ac:7c:20:b9:ce:24:66:75:25:e4:9d:19:24:a7:cb:00:f4:
2b:e6:3e:02:88:5b:ec:3a:24:18:5f:db:0a:a0:23:c7:e4:44:
e0:f9:11:e6:c6:ee:dc:c3:39:d5:16:84:43:8d:59:c7:7c:02:
27:3b:64:18:04:32:24:e5:28:e4:57:b3:24:29:18:23:d8:b7:
b4:0a:02:75:41:35:81:bf:03:60:19:8a:d4:b3:71:d0:b4:33:
87:ea:90:c2:1c:e6:99:45:00:b0:ed:fd:a0:f7:c6:86:70:64:
51:07:1c:61:52:63:a5:f6:17:c6:9b:53:d7:07:67:90:64:b3:
28:6f:15:a0:be:8f:c9:2a:ce:8b:d9:74:7f:8f:cf:05:60:35:
9f:10:9d:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:58:29 2025 by rpki-client