Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/1-J-e1yZKQjniCTBUsTAX0feZFZA.roa
File: 1-J-e1yZKQjniCTBUsTAX0feZFZA.roa (raw, json)
Hash identifier: qhLrnHHSbHBzApeyA65212TNy/4+dELtg8jI+g1gne0=
Subject key identifier: F8:9F:9E:D7:26:4A:42:39:E2:09:30:54:B1:30:17:D1:F7:99:15:90
Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial: 0195478D09700AB8393380CCB48E03612594
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/1-J-e1yZKQjniCTBUsTAX0feZFZA.roa
Signing time: Thu 27 Feb 2025 13:16:20 +0000
ROA not before: Thu 27 Feb 2025 13:16:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50053
IP address blocks: 193.32.188.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:47:8d:09:70:0a:b8:39:33:80:cc:b4:8e:03:61:25:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
Validity
Not Before: Feb 27 13:16:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f89f9ed7264a4239e2093054b13017d1f7991590
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:6b:e5:39:17:c7:c4:69:bb:c4:56:92:da:f9:
30:f6:72:69:7d:c3:99:3f:aa:48:91:f5:61:14:ce:
e6:42:64:48:95:1f:81:8d:75:be:24:ea:a2:de:e0:
05:6c:f9:47:67:25:31:54:72:83:94:76:4e:83:57:
45:0d:cd:51:0c:89:ed:dd:75:1b:df:e5:0e:be:e3:
db:75:85:e6:2d:d8:57:a0:40:00:4b:ae:ce:a3:64:
d5:bc:e4:f3:87:34:64:68:6c:0e:5c:8b:9e:ac:0e:
e2:e1:5b:8a:54:a5:a1:53:9f:54:c3:a2:b9:86:12:
95:d5:fc:23:51:fc:82:56:66:5a:17:60:16:1d:93:
d3:06:d3:60:da:6a:9a:6e:93:e8:71:53:63:89:7a:
bc:97:bb:00:de:02:3f:88:68:43:76:c9:e0:30:ce:
bc:70:47:2a:5e:14:75:f1:56:14:bd:63:11:e5:3c:
db:ed:9e:69:e9:27:67:bc:da:d4:68:a3:c9:ec:5c:
65:91:e9:15:8c:8a:97:61:91:5c:6a:56:9e:9c:cf:
e1:6c:58:35:47:7b:39:3c:07:d2:f6:e4:28:b2:5f:
b0:a9:ce:69:a7:a0:0d:bb:8e:12:cc:21:fb:30:f9:
e1:09:86:8f:42:ea:92:c8:d1:55:aa:37:c4:8a:2c:
e3:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:9F:9E:D7:26:4A:42:39:E2:09:30:54:B1:30:17:D1:F7:99:15:90
X509v3 Authority Key Identifier:
keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/1-J-e1yZKQjniCTBUsTAX0feZFZA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.32.188.0/24
Signature Algorithm: sha256WithRSAEncryption
86:eb:87:75:1b:4a:84:11:1c:e1:f2:68:d9:96:89:4c:46:db:
f2:f3:89:fb:75:c1:ff:90:ec:a3:0a:13:e3:4e:c2:3e:7b:94:
b4:4f:ca:9c:6a:9b:d7:ca:0a:7a:30:41:72:ff:f0:75:a8:d4:
0c:40:fa:fa:5a:89:62:6a:4e:c7:a0:72:fd:64:9f:33:15:d2:
9e:79:a4:e2:a5:9e:59:cb:68:a9:d0:eb:58:07:67:66:59:98:
7c:57:23:3d:f9:e7:98:86:2b:43:0d:2f:34:16:bd:93:15:88:
1b:55:eb:9a:9f:f6:70:e0:1f:90:20:87:ef:8e:3e:3b:d5:90:
5a:21:37:56:b7:71:e7:a1:58:16:16:03:cb:fd:75:f9:e1:e9:
42:6e:27:54:94:2a:3b:1d:31:cd:de:3a:6f:30:46:94:0d:80:
a2:31:f3:a8:10:49:c6:39:06:b2:29:93:87:42:a1:35:bd:2f:
a0:30:84:69:c8:1f:3f:4f:79:19:f0:fb:33:c5:2d:4c:fa:a6:
ea:75:84:62:d1:3c:6f:47:58:fc:0d:62:10:8a:69:a0:ec:13:
dc:50:9f:78:6c:69:20:05:60:67:b3:34:f0:9e:14:23:5a:3e:
75:65:f3:f1:84:56:c2:1c:19:8d:b2:b4:c7:d2:e9:4b:c2:ba:
44:e5:17:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:57:09 2025 by rpki-client