Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/1caa79-b8c4-4d08-9bbe-386c1f8b0640/1/bce44foTbAKg3tHOJ0Qgt1xOcf8.roa
File: bce44foTbAKg3tHOJ0Qgt1xOcf8.roa (raw, json)
Hash identifier: F4bF540q8PJ+GpaHKowNj8adXBg7SShvDYJVRvSviDg=
Subject key identifier: 6D:C7:B8:E1:FA:13:6C:02:A0:DE:D1:CE:27:44:20:B7:5C:4E:71:FF
Certificate issuer: /CN=8da824bc631ccee1ae99d7103afd2dc74f1e29c4
Certificate serial: 019421B226D3066D9D8A4B3229DA5E1C67E4
Authority key identifier: 8D:A8:24:BC:63:1C:CE:E1:AE:99:D7:10:3A:FD:2D:C7:4F:1E:29:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jagkvGMczuGumdcQOv0tx08eKcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/1caa79-b8c4-4d08-9bbe-386c1f8b0640/1/bce44foTbAKg3tHOJ0Qgt1xOcf8.roa
Signing time: Wed 01 Jan 2025 11:48:30 +0000
ROA not before: Wed 01 Jan 2025 11:48:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201228
IP address blocks: 192.33.87.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:26:d3:06:6d:9d:8a:4b:32:29:da:5e:1c:67:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8da824bc631ccee1ae99d7103afd2dc74f1e29c4
Validity
Not Before: Jan 1 11:48:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6dc7b8e1fa136c02a0ded1ce274420b75c4e71ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:01:2d:a0:e8:14:8b:46:c8:a4:cf:46:9e:ba:
d2:b8:08:af:84:58:46:db:c2:c2:e0:1e:a7:9c:73:
0b:8c:0b:3b:87:a2:50:10:08:62:94:f8:ca:75:d3:
6b:af:96:4e:26:03:7e:4a:49:1a:9f:14:a3:68:d8:
f9:ab:af:5f:4c:92:dc:7a:98:8e:78:7d:e3:9d:64:
91:9c:c1:16:14:a0:7f:27:3c:e1:f0:48:95:11:b1:
f5:a5:d0:d0:2a:68:57:55:22:a1:ea:82:78:bd:b4:
f9:22:8c:0f:df:a3:da:d1:f0:7c:9d:c7:cc:8e:5c:
83:d1:8e:99:25:82:29:3b:be:74:19:ef:28:f0:33:
d2:ce:04:aa:de:3b:50:f2:92:d9:e8:99:e4:0d:79:
3f:7a:e5:2f:b4:6a:64:43:9a:94:7a:e1:b4:9f:b2:
c3:c1:65:50:c0:14:67:d2:2d:e2:30:51:2e:da:5e:
ba:f4:42:b0:c9:75:07:c0:79:98:cb:b7:ef:2f:ee:
48:75:66:8c:2e:3d:12:9d:09:7e:a4:73:57:79:2f:
26:4d:b8:71:09:5e:08:c1:10:59:4c:2b:34:0d:3d:
00:42:a5:47:52:d6:bc:4d:fd:83:78:a9:94:e8:d2:
0b:2a:e3:35:ff:f5:b4:41:51:9d:e3:05:ee:1e:e9:
94:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:C7:B8:E1:FA:13:6C:02:A0:DE:D1:CE:27:44:20:B7:5C:4E:71:FF
X509v3 Authority Key Identifier:
keyid:8D:A8:24:BC:63:1C:CE:E1:AE:99:D7:10:3A:FD:2D:C7:4F:1E:29:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jagkvGMczuGumdcQOv0tx08eKcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/1caa79-b8c4-4d08-9bbe-386c1f8b0640/1/bce44foTbAKg3tHOJ0Qgt1xOcf8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/1caa79-b8c4-4d08-9bbe-386c1f8b0640/1/jagkvGMczuGumdcQOv0tx08eKcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.33.87.0/24
Signature Algorithm: sha256WithRSAEncryption
57:b5:45:9f:4a:8d:66:e6:59:7c:81:bd:5c:07:04:b5:9d:04:
13:06:e4:8b:d6:89:a7:8d:92:2d:fe:f3:db:14:e4:20:a2:20:
40:c0:9e:ca:71:b5:aa:ec:2b:1b:2b:83:c8:5b:dd:73:00:3e:
9d:24:8d:5f:b5:3d:b1:62:54:12:a5:8f:f4:61:46:7b:73:ec:
c2:aa:b4:97:ab:5e:4a:cf:4f:1e:3e:92:43:47:f6:7e:43:1e:
24:0a:94:2a:d8:45:7b:92:35:c8:d8:ff:8a:c2:34:c8:e9:a6:
8d:a3:c5:0c:f6:f4:f9:aa:d4:62:8d:29:7e:ba:f7:82:51:8d:
ac:2b:b3:eb:bb:e9:9e:bd:a0:67:33:65:7a:b9:cd:a1:36:fb:
8e:3c:fe:0e:65:ca:6e:53:e1:ae:2b:a3:6a:af:eb:61:2d:7a:
e2:6d:71:c7:cd:7b:75:4b:4a:69:21:64:37:19:c7:65:5d:b7:
34:1d:a0:d0:7c:82:b3:3e:0d:c0:cb:5c:20:f7:e6:8b:d4:6b:
ce:11:cd:8f:13:3a:0b:49:73:7d:1c:27:53:35:13:b2:62:14:
c0:7a:5f:29:e3:a9:23:af:cc:49:f9:fe:85:6a:cd:ec:7e:5e:
ea:33:ff:a5:d1:c1:f7:af:8b:56:00:08:e5:ae:d3:d9:27:38:
0b:28:cc:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 02:47:02 2025 by rpki-client