Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/SZ53uttYg0xKbkk27OrRq0QhMl8.roa
File: SZ53uttYg0xKbkk27OrRq0QhMl8.roa (raw, json)
Hash identifier: XsR4pHqobKwqWF8Uv+EVlPEIfYlVn9IQ1PioNVvm5uo=
Subject key identifier: 49:9E:77:BA:DB:58:83:4C:4A:6E:49:36:EC:EA:D1:AB:44:21:32:5F
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 0194236A592FAAA7ACDC7AEB468E57F29AE7
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/SZ53uttYg0xKbkk27OrRq0QhMl8.roa
Signing time: Wed 01 Jan 2025 19:49:19 +0000
ROA not before: Wed 01 Jan 2025 19:49:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215081
IP address blocks: 193.22.157.0/24 maxlen: 32
193.22.158.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:59:2f:aa:a7:ac:dc:7a:eb:46:8e:57:f2:9a:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Jan 1 19:49:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=499e77badb58834c4a6e4936ecead1ab4421325f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:92:3f:78:70:92:e8:2d:83:94:13:d1:29:c0:
4d:60:5f:68:ee:c1:fc:12:67:2d:ed:e0:0b:41:d3:
af:2a:1e:32:ec:e3:6e:90:6e:30:92:47:78:29:3d:
c1:2e:8c:40:f4:d4:85:4a:cf:cc:33:fb:d1:53:24:
21:0e:97:a1:77:c3:40:7c:2c:43:1c:0d:99:7f:37:
ea:21:6f:15:fa:87:d1:58:9e:70:56:e8:0f:9a:0b:
bb:54:33:5f:c0:b1:4c:c0:cc:12:7e:05:11:08:64:
47:78:03:b1:45:68:66:f8:9c:a8:a4:f3:34:b1:5e:
4e:ae:05:db:e8:b0:60:ac:c1:06:58:98:ec:1f:60:
72:13:f5:87:73:3e:88:19:f4:ce:c7:19:44:72:93:
6a:03:30:31:4d:93:43:48:43:62:03:71:89:d1:8f:
57:9e:6d:43:ae:e7:8f:b7:46:43:e0:cb:45:eb:32:
05:76:18:25:ff:7b:8e:0d:4b:53:66:ba:ef:be:cf:
b6:88:46:21:d7:12:8d:c1:86:eb:3a:7f:e3:c1:a3:
5a:69:9b:e1:95:0c:c2:0a:2c:a8:32:24:f1:93:39:
d4:41:90:43:05:98:0c:e5:d0:c2:75:30:78:96:e7:
a0:ae:b7:4a:e8:c3:ec:05:06:40:01:a1:65:75:75:
0c:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:9E:77:BA:DB:58:83:4C:4A:6E:49:36:EC:EA:D1:AB:44:21:32:5F
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/SZ53uttYg0xKbkk27OrRq0QhMl8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.22.157.0-193.22.158.255
Signature Algorithm: sha256WithRSAEncryption
1f:40:a3:95:ad:43:ae:21:26:9c:4f:35:3f:d9:93:e0:aa:d2:
62:09:8b:57:31:da:9a:76:66:bc:11:ef:63:91:96:83:72:b3:
d0:a2:83:2a:21:06:18:8f:93:55:11:96:31:c8:c6:15:e6:fa:
92:0c:f5:db:fb:6a:92:39:45:6e:73:62:76:e3:f6:ee:f2:3f:
98:3c:4f:af:b7:ed:d7:64:59:6d:1a:26:f6:b5:9f:f3:1c:90:
4d:1b:ef:38:f6:ab:79:0f:06:01:e1:96:a2:52:29:19:31:13:
8c:1e:a9:60:9e:31:89:99:b7:6b:84:71:87:fd:cd:a4:4a:df:
1b:32:01:b0:4e:95:ca:ba:42:5e:9a:5c:ed:a5:a0:95:bf:b4:
66:41:3c:5a:c4:61:73:3c:03:2f:07:16:35:25:05:48:d2:bf:
51:d2:90:8f:d2:ee:1f:7b:de:cf:aa:dd:5c:af:a2:53:e8:fc:
1c:c9:2c:74:15:02:3c:e8:04:be:98:b4:e1:58:11:6d:75:15:
64:b0:38:c1:ee:4b:d7:46:34:27:c3:5c:18:4d:ea:f6:63:92:
ad:ba:62:71:04:3d:04:6d:a2:25:ae:ff:f6:7d:87:ff:18:9b:
5a:8d:09:17:16:a2:1b:d4:c4:a3:35:4d:aa:11:fd:c6:d1:bb:
c3:67:28:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 20:42:58 2025 by rpki-client