Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/sRV_sfyE6xHPAxpro9COHQz8l8c.roa
File: sRV_sfyE6xHPAxpro9COHQz8l8c.roa (raw, json)
Hash identifier: l+fO+9twAkGC2AqzTlwKaHNYn1zr/IQP6m+2PPnO5zg=
Subject key identifier: B1:15:7F:B1:FC:84:EB:11:CF:03:1A:6B:A3:D0:8E:1D:0C:FC:97:C7
Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Certificate serial: 01942369D0A248353FB3EE24B189A898895E
Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/sRV_sfyE6xHPAxpro9COHQz8l8c.roa
Signing time: Wed 01 Jan 2025 19:48:44 +0000
ROA not before: Wed 01 Jan 2025 19:48:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57785
IP address blocks: 193.22.230.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:d0:a2:48:35:3f:b3:ee:24:b1:89:a8:98:89:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Validity
Not Before: Jan 1 19:48:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b1157fb1fc84eb11cf031a6ba3d08e1d0cfc97c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c2:d2:7c:c6:87:63:15:f2:7d:2c:14:01:79:
c9:fb:e9:d6:96:64:22:38:ea:e3:75:9a:50:57:22:
6d:88:e0:31:85:fd:9d:47:c3:8b:cb:23:51:85:f3:
15:55:3c:a7:87:c4:73:1e:8a:c7:c6:cf:ee:f9:6e:
1b:e5:41:6c:ec:ff:2b:7d:fc:80:e0:dc:68:7d:ca:
ab:f7:8d:f9:e5:c1:6d:3f:50:d1:32:e5:44:fc:29:
95:b0:ab:8f:f4:e9:f9:6f:47:1d:69:e3:6f:eb:47:
c5:01:74:99:b1:ad:00:5f:db:38:60:eb:43:64:9c:
e7:8a:82:7d:0b:55:37:1d:af:ba:4a:2e:28:fb:1c:
5d:78:92:c7:33:e6:56:52:13:a6:0d:19:36:9b:17:
26:20:59:84:1b:bb:0f:a7:19:5b:d1:7a:57:09:30:
5a:c2:d9:c4:d8:e3:94:c3:cf:61:e6:53:15:83:a0:
87:1b:1a:5b:85:32:b5:e6:a0:d7:55:35:76:aa:42:
08:e1:a8:33:18:0e:0c:36:ec:1a:04:ea:08:69:18:
c0:2a:9b:3f:42:65:3a:99:d2:6a:eb:d8:59:4a:38:
a4:a9:5d:75:10:a3:96:e5:d1:36:5a:5e:5b:6a:f8:
97:a8:a9:70:ed:58:c4:73:f8:60:2c:0d:6d:02:dd:
b2:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:15:7F:B1:FC:84:EB:11:CF:03:1A:6B:A3:D0:8E:1D:0C:FC:97:C7
X509v3 Authority Key Identifier:
keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/sRV_sfyE6xHPAxpro9COHQz8l8c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.22.230.0/24
Signature Algorithm: sha256WithRSAEncryption
72:ca:0e:6d:36:2c:83:c7:ef:28:38:37:c8:03:35:d6:1a:a6:
17:b6:78:43:ba:52:55:9a:d9:cf:57:73:33:5e:6a:f3:e4:ad:
f0:b5:79:85:eb:de:71:6d:92:a1:82:3c:d6:f7:f6:89:be:07:
31:cd:1a:a1:70:d6:2c:b3:88:74:99:37:7a:1a:fd:b9:21:39:
05:36:fa:e6:3b:fd:a5:27:0a:4e:e0:8a:07:ad:cb:3f:d3:ce:
1d:7e:b6:11:ce:71:d1:53:9d:82:ff:a4:28:7d:d9:33:07:3a:
37:a2:cd:29:27:3e:06:35:4d:8c:0f:7c:b6:a3:09:33:77:bf:
4b:16:02:70:8e:d8:af:9c:06:66:d1:7c:64:04:0e:4a:ba:47:
c5:d2:38:81:bb:f7:c1:00:f3:18:60:3f:e2:e3:c7:45:99:7f:
7a:e0:93:00:70:1b:d9:bf:96:d2:d3:1b:2c:4a:ab:5f:94:f6:
92:53:15:8d:20:19:75:0e:cd:39:4e:24:69:cd:f4:fc:5d:3e:
ce:8f:ec:0e:b4:85:d5:68:76:db:83:fe:ef:cd:af:d8:1f:4c:
2b:37:dc:13:d6:e2:3c:76:ea:65:4e:8d:d9:61:cc:67:28:2e:
d1:0b:fd:45:39:9c:fd:93:7a:37:a7:8f:db:43:81:3e:9d:21:
5d:70:dd:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:11:52 2025 by rpki-client