Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/b14d71-3c10-4cab-9c35-e8da5a2410ee/1/3ae6NxopkLEPpljTigNrJD14Hz0.roa
File: 3ae6NxopkLEPpljTigNrJD14Hz0.roa (raw, json)
Hash identifier: Orwf5x1q6HQAaUUFUrMEVNT8NKTnokyVinqwYSAa6g0=
Subject key identifier: DD:A7:BA:37:1A:29:90:B1:0F:A6:58:D3:8A:03:6B:24:3D:78:1F:3D
Certificate issuer: /CN=c88e584456566ec53a6800f2cf55eb26a2882e12
Certificate serial: 4B3468
Authority key identifier: C8:8E:58:44:56:56:6E:C5:3A:68:00:F2:CF:55:EB:26:A2:88:2E:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yI5YRFZWbsU6aADyz1XrJqKILhI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/b14d71-3c10-4cab-9c35-e8da5a2410ee/1/3ae6NxopkLEPpljTigNrJD14Hz0.roa
Signing time: Sat 01 Jan 2022 02:00:53 +0000
ROA not before: Sat 01 Jan 2022 02:00:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48426
IP address blocks: 193.104.31.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4928616 (0x4b3468)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c88e584456566ec53a6800f2cf55eb26a2882e12
Validity
Not Before: Jan 1 02:00:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dda7ba371a2990b10fa658d38a036b243d781f3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:36:3b:00:6c:7f:6c:0b:6f:f9:e3:6a:c8:0d:
ac:b8:67:25:14:e0:c6:c6:46:31:00:96:41:56:5a:
95:f7:5e:db:7e:66:48:96:f4:5e:60:0e:a8:83:fc:
dc:ef:b8:9c:06:89:21:6c:e3:65:b9:da:8e:8f:0d:
83:81:36:dc:67:87:01:1f:4a:e7:8d:4a:bd:22:9f:
79:03:51:35:08:7f:cd:5c:b8:73:db:67:95:b5:b6:
a8:25:16:ca:3e:1f:df:24:3c:c8:39:7a:78:d8:b0:
ed:d1:16:e8:63:c2:18:fa:cd:d7:69:4c:31:61:4e:
5d:c5:cf:f6:45:82:3e:17:0c:4d:04:75:5f:21:ea:
d2:37:3c:cc:8f:1f:05:84:93:e8:e1:a5:fb:a1:c8:
ea:f4:98:1a:2e:7c:75:ee:91:42:5f:4d:a6:29:63:
a8:ec:e6:46:14:54:ab:44:12:f1:5a:98:8d:58:a9:
38:2d:66:a3:9a:4e:95:22:fb:9f:9d:21:40:a0:14:
aa:5c:7c:75:4b:99:61:8a:48:45:88:53:50:c9:e4:
09:36:6f:8b:1a:34:de:10:ac:89:c9:6f:69:19:5e:
43:14:e5:8e:83:43:31:70:1c:1b:ca:15:f7:4c:22:
41:06:bd:17:67:bb:8a:31:83:77:fa:51:58:01:8d:
e4:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:A7:BA:37:1A:29:90:B1:0F:A6:58:D3:8A:03:6B:24:3D:78:1F:3D
X509v3 Authority Key Identifier:
keyid:C8:8E:58:44:56:56:6E:C5:3A:68:00:F2:CF:55:EB:26:A2:88:2E:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yI5YRFZWbsU6aADyz1XrJqKILhI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b14d71-3c10-4cab-9c35-e8da5a2410ee/1/3ae6NxopkLEPpljTigNrJD14Hz0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b14d71-3c10-4cab-9c35-e8da5a2410ee/1/yI5YRFZWbsU6aADyz1XrJqKILhI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.104.31.0/24
Signature Algorithm: sha256WithRSAEncryption
79:d8:c5:1c:d8:46:4e:06:68:b1:ba:cb:c5:05:bf:7e:c0:2e:
f8:02:49:ae:02:a1:7d:48:f5:65:e2:78:a7:c0:29:11:a7:a0:
58:e9:11:0c:a5:f0:89:8d:50:22:f0:12:80:18:95:65:4e:48:
bc:6d:0b:15:6d:61:e5:91:d4:a2:2c:77:3d:65:0a:ff:05:9a:
23:a2:02:64:aa:3e:f3:b0:fb:c1:6f:e6:c9:4e:6e:49:e9:7d:
fb:03:3d:ef:c3:8a:48:3e:ce:a3:c8:bf:a5:89:07:49:1e:2f:
c6:c6:df:6c:a0:9e:92:5d:8d:e0:da:ee:04:16:93:5b:d0:77:
1c:cd:81:03:9a:0c:4c:b4:57:07:86:12:0a:87:3e:9c:6a:68:
a3:b0:4a:0a:ba:f8:d8:07:96:a6:e0:87:b0:48:d5:68:e5:27:
f2:01:9b:6e:5e:d5:48:fd:5f:f2:7a:8b:a7:a9:3a:d2:ea:92:
e5:ff:8a:99:16:c4:99:7d:ea:09:6a:42:7c:fd:07:0c:cd:ef:
4a:6a:a5:9b:22:d0:67:00:0a:98:cd:3f:6f:20:92:d4:fc:ae:
b4:89:ee:c9:10:8a:e8:dc:f4:fa:e3:97:d6:3e:92:45:23:16:
31:5f:27:9d:41:e6:a4:51:6d:45:a7:7a:5c:d4:7f:a5:f1:d3:
1a:62:c5:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 12:47:04 2025 by rpki-client