Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/_cqSVKRbOyk619njVO3BkxC7VZM.roa
File: _cqSVKRbOyk619njVO3BkxC7VZM.roa (raw, json)
Hash identifier: KHpjFs+W/K6Mn9B5pdqjFFnZB47S+h6UdUjzvhUDZWk=
Subject key identifier: FD:CA:92:54:A4:5B:3B:29:3A:D7:D9:E3:54:ED:C1:93:10:BB:55:93
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01950C27B13A914F28A78A0AD13510201A34
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/_cqSVKRbOyk619njVO3BkxC7VZM.roa
Signing time: Sun 16 Feb 2025 00:28:02 +0000
ROA not before: Sun 16 Feb 2025 00:28:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208972
IP address blocks: 193.23.222.0/24 maxlen: 24
193.23.223.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:0c:27:b1:3a:91:4f:28:a7:8a:0a:d1:35:10:20:1a:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Feb 16 00:28:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fdca9254a45b3b293ad7d9e354edc19310bb5593
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:e0:ee:7a:56:6b:7b:2f:12:c5:b2:ab:d8:e1:
80:43:ea:9b:ad:55:db:2d:b0:e8:00:61:2a:c5:b0:
c7:e8:4d:8f:67:27:09:2e:c6:f9:2d:4c:87:d4:14:
ce:23:41:55:8f:e4:c7:5e:9d:6c:11:3c:ca:fd:c6:
b4:de:8e:86:39:a0:e3:88:11:02:65:b5:09:d1:08:
67:a8:76:1a:97:02:0e:1f:7c:b9:50:90:c4:f2:33:
89:60:fd:de:ee:e1:a5:49:6b:d3:16:22:10:26:c4:
6d:7e:e9:3c:cb:4c:ee:d8:27:46:c8:34:2d:b0:82:
df:e0:5b:c2:db:e8:a6:06:7f:fd:87:4b:36:04:d7:
6f:d0:75:59:f8:f2:d8:f2:07:65:1a:0e:4c:d5:08:
3a:b9:56:35:3e:b1:9b:80:e0:76:5c:90:63:f5:da:
23:e2:ec:c5:c3:8e:25:5c:12:d4:5e:a0:8f:b3:cd:
75:a7:0b:44:c1:ef:ce:d9:30:96:f5:b1:9e:05:e3:
61:e7:03:12:b2:87:06:ef:df:fc:09:66:7c:5d:80:
8c:45:be:a3:0a:a2:d1:8e:dc:00:87:02:75:9d:f9:
9f:6b:f7:ef:ee:7b:79:e7:50:8a:81:23:47:48:b5:
2a:c2:ff:1c:5d:a9:58:ed:9f:a5:ba:93:b1:b4:27:
e6:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:CA:92:54:A4:5B:3B:29:3A:D7:D9:E3:54:ED:C1:93:10:BB:55:93
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/_cqSVKRbOyk619njVO3BkxC7VZM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.23.222.0/23
Signature Algorithm: sha256WithRSAEncryption
43:1d:59:3a:60:71:4f:fa:e4:7c:ae:0f:63:fb:95:16:e6:a0:
33:05:f2:66:9a:0b:21:8f:70:d2:2d:da:65:bb:b2:cc:1a:13:
f8:d4:f4:a9:18:01:c9:1e:fd:81:4e:db:04:81:bc:87:0e:7f:
50:5c:4c:45:86:7f:1b:6c:68:3a:19:b0:c4:d1:50:ff:94:1c:
96:24:a5:e7:a2:9e:51:af:09:73:5a:84:5e:35:df:09:cb:96:
90:f8:97:a1:73:98:80:61:79:bf:f9:23:01:c5:95:f0:9a:1c:
d5:c6:1c:f1:05:13:78:a5:ec:3c:4c:85:a3:91:b3:85:e9:18:
e2:08:e0:f1:47:14:c0:88:03:d4:89:6b:ff:d1:24:bd:c1:7b:
63:c2:e0:3c:66:c2:1f:43:ec:e4:b0:dd:0e:f4:90:af:3b:eb:
57:43:29:66:d7:30:68:9b:47:1b:40:ca:81:be:22:3a:d5:01:
2a:cd:34:36:6c:ba:08:d3:42:c2:1a:8a:96:77:7b:bb:f6:9d:
91:d9:73:32:de:9a:b8:49:b7:da:73:46:38:c2:d1:ba:4f:2d:
86:28:8b:d3:4d:77:4a:84:25:78:8a:89:fe:7c:53:05:d9:19:
79:22:c2:5b:c8:2c:0f:24:fa:ed:97:11:d5:62:35:11:ff:33:
31:3d:3f:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:28:09 2025 by rpki-client