Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/fef2e0-ba37-4812-95ad-411a2712164d/1/H-gKJ0jecc_epGWL1KeKZGljJsk.roa
File: H-gKJ0jecc_epGWL1KeKZGljJsk.roa (raw, json)
Hash identifier: DugijbjySOcyT+ldEPL+0Bc6mUPT5+rGRZ55YajcPYw=
Subject key identifier: 1F:E8:0A:27:48:DE:71:CF:DE:A4:65:8B:D4:A7:8A:64:69:63:26:C9
Certificate issuer: /CN=53c35ca83fcdf71b244ed803ac468e1453d8268f
Certificate serial: 019421B24EDF7BE788EE768B64BA3EAC8767
Authority key identifier: 53:C3:5C:A8:3F:CD:F7:1B:24:4E:D8:03:AC:46:8E:14:53:D8:26:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U8NcqD_N9xskTtgDrEaOFFPYJo8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/fef2e0-ba37-4812-95ad-411a2712164d/1/H-gKJ0jecc_epGWL1KeKZGljJsk.roa
Signing time: Wed 01 Jan 2025 11:48:41 +0000
ROA not before: Wed 01 Jan 2025 11:48:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201575
IP address blocks: 193.228.1.0/24 maxlen: 24
2a12:e342::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:4e:df:7b:e7:88:ee:76:8b:64:ba:3e:ac:87:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53c35ca83fcdf71b244ed803ac468e1453d8268f
Validity
Not Before: Jan 1 11:48:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1fe80a2748de71cfdea4658bd4a78a64696326c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:6e:8c:84:51:03:ce:8c:df:96:34:10:40:d6:
8f:13:f7:38:88:f0:0b:be:a3:a0:5e:67:fd:68:37:
cf:02:e3:87:aa:e1:e7:49:a3:15:4b:9d:f1:c4:7a:
05:ea:c2:54:07:ed:76:bb:23:9f:c6:0d:1a:93:59:
35:0e:e4:97:c1:62:71:9b:32:80:27:2d:b4:eb:d6:
50:47:30:8c:26:88:82:ae:c5:66:21:93:23:5b:21:
d7:65:71:86:52:92:a0:38:2e:b4:9d:a5:cb:7e:04:
dd:af:49:52:c9:f9:d0:15:ed:0a:03:01:f1:d2:22:
81:2b:1e:d6:6c:4b:ca:b3:ad:62:d1:74:29:a3:e9:
fb:8c:69:be:cc:11:79:cf:55:eb:96:8a:f1:ce:16:
f9:73:e5:65:8e:ba:ac:74:3d:ba:91:c9:f3:9f:33:
47:a7:57:08:5e:dd:23:84:ad:46:24:26:ed:6b:f0:
d7:b1:39:ff:d3:aa:a4:1e:71:1e:1f:d5:f9:9d:d7:
69:02:d5:db:29:6e:df:12:5a:01:08:64:7f:bc:2b:
89:56:d0:49:f3:58:6f:31:cc:90:95:92:f4:d0:bc:
3f:e6:04:e5:88:e8:c0:18:1b:a7:da:ab:8e:c2:28:
9d:07:eb:95:91:d9:0e:47:d4:10:19:2c:47:d5:d2:
b6:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:E8:0A:27:48:DE:71:CF:DE:A4:65:8B:D4:A7:8A:64:69:63:26:C9
X509v3 Authority Key Identifier:
keyid:53:C3:5C:A8:3F:CD:F7:1B:24:4E:D8:03:AC:46:8E:14:53:D8:26:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U8NcqD_N9xskTtgDrEaOFFPYJo8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/fef2e0-ba37-4812-95ad-411a2712164d/1/H-gKJ0jecc_epGWL1KeKZGljJsk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/fef2e0-ba37-4812-95ad-411a2712164d/1/U8NcqD_N9xskTtgDrEaOFFPYJo8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.228.1.0/24
IPv6:
2a12:e342::/32
Signature Algorithm: sha256WithRSAEncryption
c7:ce:5e:1e:2e:10:89:9e:79:90:77:34:62:d8:cd:e0:37:1b:
7f:be:68:b2:f2:ec:a3:a4:50:ff:a5:70:29:31:cc:f1:fb:f4:
6a:eb:84:fa:54:ba:7a:58:38:91:ed:7c:f4:7b:13:f3:38:59:
a8:36:e9:45:6a:d3:5f:1d:30:2e:75:a3:31:2e:99:31:d8:dd:
d5:85:46:1c:f1:c8:cf:fa:aa:10:4a:14:fe:20:40:01:78:d1:
67:28:62:6d:d0:9b:7d:5a:d7:90:76:83:f2:19:8d:ec:5f:00:
be:36:fc:09:e6:5c:f1:6b:8c:a4:19:e9:98:16:b9:ab:a1:e6:
c4:c9:77:e0:64:69:f0:21:e9:c7:42:77:94:87:10:11:68:e7:
c3:da:3f:97:c3:77:82:ec:6d:aa:68:a9:12:7a:05:62:07:90:
28:e9:01:2f:42:90:f4:b6:31:f6:ee:7d:39:34:0c:ce:d0:40:
43:42:98:a0:b4:34:cf:aa:2d:49:f7:5c:a2:1a:2f:ce:79:ab:
02:53:9e:b1:01:a0:a8:c5:fa:98:db:d3:0b:b5:1c:42:05:10:
ba:22:ff:5d:aa:e5:70:95:0b:df:5f:46:31:bd:40:0b:07:64:
c3:f9:bf:92:ed:f4:78:c9:f1:97:94:5f:c7:27:c9:6f:8d:b2:
5b:f4:ca:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 15:04:18 2025 by rpki-client