Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/49881e-b0a9-4d5f-b072-a53772b01cb2/1/r-28W7p2cDJvCgLzOQBlRQJral0.roa
File: r-28W7p2cDJvCgLzOQBlRQJral0.roa (raw, json)
Hash identifier: UHzSXGk7KneB035Tlu46305yUHm6EAg31b6sSaT63g0=
Subject key identifier: AF:ED:BC:5B:BA:76:70:32:6F:0A:02:F3:39:00:65:45:02:6B:6A:5D
Certificate issuer: /CN=57494670e956e3fb1511948c5956e2a426793388
Certificate serial: 0194258EE6D9CE146489B31C805B97DFFBBD
Authority key identifier: 57:49:46:70:E9:56:E3:FB:15:11:94:8C:59:56:E2:A4:26:79:33:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V0lGcOlW4_sVEZSMWVbipCZ5M4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/49881e-b0a9-4d5f-b072-a53772b01cb2/1/r-28W7p2cDJvCgLzOQBlRQJral0.roa
Signing time: Thu 02 Jan 2025 05:48:29 +0000
ROA not before: Thu 02 Jan 2025 05:48:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209336
IP address blocks: 193.42.44.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:e6:d9:ce:14:64:89:b3:1c:80:5b:97:df:fb:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57494670e956e3fb1511948c5956e2a426793388
Validity
Not Before: Jan 2 05:48:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=afedbc5bba7670326f0a02f339006545026b6a5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:41:e8:e1:97:63:e2:10:98:cf:16:2f:44:0c:
17:9a:7f:1d:25:97:f7:8d:a8:e5:27:96:87:40:56:
be:3c:37:5b:e8:dd:cc:fd:fa:36:9e:50:68:7f:91:
df:c9:b7:55:41:a4:43:f1:89:78:0d:2d:3e:25:4c:
c1:2b:0a:3a:a4:25:32:3b:7f:41:f4:5c:49:f2:38:
a4:9e:cb:9a:78:ed:65:be:a5:8a:0a:3e:99:fd:a5:
44:17:4f:83:e2:8d:53:bd:b9:32:f1:6e:54:f9:1e:
ad:27:6a:0c:4e:53:f3:6b:93:af:e2:ec:3c:73:2e:
5b:b7:2e:14:6a:11:7c:e2:23:53:17:ce:04:6e:c3:
2e:b3:e2:7f:37:48:9d:3a:4a:6d:a5:a8:5a:fc:63:
84:95:8b:24:d9:a1:22:19:d6:a7:41:79:e3:89:04:
49:5b:73:92:59:10:93:c1:c1:93:05:14:50:fe:fd:
de:aa:4e:0c:59:93:de:2d:be:b0:fb:95:11:14:72:
1a:e2:65:e9:37:0a:b4:d5:ab:f3:6e:8d:4a:7b:67:
ec:20:88:47:66:3f:2a:61:32:2b:4c:49:f8:e7:1e:
8e:f1:f3:14:a2:df:fa:99:14:1c:0c:67:e4:e1:07:
2e:af:b0:c4:e6:5b:f1:b5:d4:04:21:4b:11:d5:5c:
e5:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:ED:BC:5B:BA:76:70:32:6F:0A:02:F3:39:00:65:45:02:6B:6A:5D
X509v3 Authority Key Identifier:
keyid:57:49:46:70:E9:56:E3:FB:15:11:94:8C:59:56:E2:A4:26:79:33:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V0lGcOlW4_sVEZSMWVbipCZ5M4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/49881e-b0a9-4d5f-b072-a53772b01cb2/1/r-28W7p2cDJvCgLzOQBlRQJral0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/49881e-b0a9-4d5f-b072-a53772b01cb2/1/V0lGcOlW4_sVEZSMWVbipCZ5M4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.42.44.0/22
Signature Algorithm: sha256WithRSAEncryption
1b:cd:49:75:28:01:b8:c1:8d:9c:c9:f8:de:44:bf:32:4d:ac:
2d:b4:08:f1:b6:27:98:1c:8f:45:f6:cb:0f:27:98:83:08:31:
0e:df:d8:58:5f:b0:78:ed:4f:82:9b:b2:73:d8:d0:26:3d:7c:
94:bc:8a:83:ff:3d:50:55:da:fb:c5:7b:03:cf:eb:bc:d4:a5:
9a:6e:06:89:1d:6f:62:9c:11:f4:16:11:68:d5:67:d2:83:fc:
7e:52:ed:f5:3d:f2:70:b7:7e:5d:c3:c4:dd:3b:09:03:e2:39:
48:c6:07:ec:d2:0f:ef:75:1e:4a:88:df:af:5d:9e:df:46:da:
56:83:e8:db:ee:3c:25:9d:32:39:ac:a3:43:b0:b2:67:ba:42:
c4:cd:c8:44:85:0a:58:fd:35:a6:dc:fb:01:ef:7c:07:fb:ae:
6d:b3:2b:d1:bb:56:45:c0:52:b8:bc:25:96:00:78:42:81:33:
63:5c:f1:c4:27:8e:eb:8e:c9:c7:92:f6:0a:9f:bf:d5:3a:f8:
97:ad:8f:e1:05:0e:23:f6:c0:a2:3f:f5:d6:12:bd:3a:ad:ff:
a2:8a:ae:2c:e3:e5:3c:69:ca:e6:aa:59:bf:c2:a3:c7:ea:cb:
2e:1d:5e:d1:d9:32:10:b9:cd:6c:b8:a0:fb:6f:f7:9f:99:57:
d6:7b:a7:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:44:18 2025 by rpki-client