Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/2yzVxzG7uQe2LVhqlP7Tr3E5Ua8.roa
File: 2yzVxzG7uQe2LVhqlP7Tr3E5Ua8.roa (raw, json)
Hash identifier: 7WmY5HJWFY2WSRPe8rY9sHCgMMOeO2KLl6zSMuuSa3k=
Subject key identifier: DB:2C:D5:C7:31:BB:B9:07:B6:2D:58:6A:94:FE:D3:AF:71:39:51:AF
Certificate issuer: /CN=1e5b334965788794d6f147a2f004d13be3257dc4
Certificate serial: 0194206830756CA42DCA7BF26E483E438AC9
Authority key identifier: 1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/2yzVxzG7uQe2LVhqlP7Tr3E5Ua8.roa
Signing time: Wed 01 Jan 2025 05:48:06 +0000
ROA not before: Wed 01 Jan 2025 05:48:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35308
IP address blocks: 193.151.167.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:30:75:6c:a4:2d:ca:7b:f2:6e:48:3e:43:8a:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e5b334965788794d6f147a2f004d13be3257dc4
Validity
Not Before: Jan 1 05:48:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=db2cd5c731bbb907b62d586a94fed3af713951af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c9:39:93:95:2f:0d:c2:6e:7a:af:59:d0:93:
68:75:7a:7c:d7:71:74:fb:44:e2:06:5a:ad:fc:3f:
e4:f6:3d:a4:12:b2:c5:c4:d7:a3:64:cb:37:b4:90:
de:f2:a9:8a:50:1a:9f:71:b5:4c:7e:27:79:6a:19:
64:ff:2f:ed:5b:ae:f6:d9:4e:b2:29:9a:7d:a5:73:
8d:b6:7e:72:0e:ec:c3:04:32:3d:43:48:e6:53:63:
e8:ef:ac:9e:59:77:0e:d2:af:1b:8e:78:78:cb:22:
9a:1c:91:f8:09:cc:01:d4:8e:2c:b4:6e:32:10:79:
ad:3b:b1:96:e1:6a:b4:35:86:63:45:d6:9f:b5:db:
59:98:5a:f5:0b:bc:57:65:8f:84:9c:6a:7c:98:d5:
16:bd:69:af:82:12:b0:0d:14:33:a2:95:0f:39:e2:
f8:e6:05:12:87:c9:a8:92:d2:53:ca:7b:1b:d8:2f:
b0:9e:fe:03:51:15:5a:1a:18:14:7b:ee:2f:46:a7:
26:2b:03:f9:7a:cc:ea:e5:87:49:30:68:3c:3b:ae:
17:6c:88:08:f8:1e:5e:e2:8e:91:34:e8:c7:f3:75:
e5:71:91:60:61:3e:14:d1:20:1c:e3:4f:da:c5:67:
4d:ad:42:73:90:cb:26:19:ff:82:c8:40:21:4e:4a:
4f:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:2C:D5:C7:31:BB:B9:07:B6:2D:58:6A:94:FE:D3:AF:71:39:51:AF
X509v3 Authority Key Identifier:
keyid:1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/2yzVxzG7uQe2LVhqlP7Tr3E5Ua8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.151.167.0/24
Signature Algorithm: sha256WithRSAEncryption
75:70:94:2f:81:b9:e3:03:3a:2e:34:e8:55:26:24:80:7f:7d:
8c:b7:cd:25:1c:15:65:7a:63:53:16:f4:1b:7e:86:69:1d:62:
2c:3a:90:e9:27:5f:d5:3f:12:bc:00:83:ae:c6:9d:1a:f7:c5:
a2:fd:67:9e:93:3c:8a:91:49:00:c5:26:8a:64:8d:01:66:3d:
70:52:bd:cc:7a:70:f1:c3:94:d1:37:ea:aa:21:38:70:12:af:
8d:76:29:b9:71:bc:39:03:3d:1c:1c:07:b2:f4:e3:c0:27:1e:
e8:04:2b:ad:e5:ac:61:40:88:89:02:2f:0f:d9:d7:a0:ef:c5:
24:48:19:8b:1b:47:9f:b5:2d:3c:1d:8d:5f:2b:57:21:54:fc:
c4:08:71:27:79:33:40:ee:29:ab:23:7b:20:c8:a5:ea:eb:1e:
94:f1:01:25:91:08:7f:55:b7:87:6b:8b:c8:dd:ec:f9:d5:a8:
76:9b:13:95:0d:8c:20:89:fd:34:e1:96:88:dc:1f:a4:dc:27:
6e:a4:7d:b1:e5:ec:54:d5:62:04:65:dc:51:88:4b:5a:8a:f5:
89:f8:c9:71:70:7c:31:0b:9f:fe:42:1b:ce:f1:da:d8:2c:7d:
a6:d5:f7:f6:10:fc:d7:9a:53:e6:e7:7e:96:a0:01:84:42:b0:
d4:cf:f1:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:39:49 2025 by rpki-client