Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/bf426a-3a8f-4252-a17f-ba02c960b8f4/1/pi-26F4PeqiMAjfpczMwVUa13T4.roa
File: pi-26F4PeqiMAjfpczMwVUa13T4.roa (raw, json)
Hash identifier: Vruq+xuvPpEjrPLqBdBog4T5WQxUoJKp5FP5nL6SSoA=
Subject key identifier: A6:2F:B6:E8:5E:0F:7A:A8:8C:02:37:E9:73:33:30:55:46:B5:DD:3E
Certificate issuer: /CN=4516e53b32caa761906f0fcdea275b720e1742c8
Certificate serial: 019473BB0F995D743FCFC3A180A124E67E8E
Authority key identifier: 45:16:E5:3B:32:CA:A7:61:90:6F:0F:CD:EA:27:5B:72:0E:17:42:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RRblOzLKp2GQbw_N6idbcg4XQsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/bf426a-3a8f-4252-a17f-ba02c960b8f4/1/pi-26F4PeqiMAjfpczMwVUa13T4.roa
Signing time: Fri 17 Jan 2025 10:07:06 +0000
ROA not before: Fri 17 Jan 2025 10:07:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1103
IP address blocks: 193.177.176.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:73:bb:0f:99:5d:74:3f:cf:c3:a1:80:a1:24:e6:7e:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4516e53b32caa761906f0fcdea275b720e1742c8
Validity
Not Before: Jan 17 10:07:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a62fb6e85e0f7aa88c0237e97333305546b5dd3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a6:50:26:ce:64:32:2f:1f:c5:d2:98:b6:26:
f9:c6:b8:63:3e:ce:7e:e1:0e:96:55:eb:67:c8:3d:
dd:8c:10:80:7e:f9:94:e7:60:d2:f1:58:c3:6b:ec:
b5:b8:3f:ef:55:7e:59:10:75:6a:e5:a6:cf:0f:83:
d3:83:5e:a0:33:9f:e6:b6:9f:b4:c8:c5:d1:70:ca:
45:6b:f0:9b:a5:bb:ec:21:af:5a:b4:24:89:b7:53:
a0:59:e1:e5:0b:65:a8:c7:e0:e2:d3:d4:29:ba:30:
05:e4:7d:2d:45:c6:66:c2:95:67:5a:d3:ea:e6:f8:
b9:4b:b0:87:46:e0:90:63:c1:49:44:44:2a:f0:9d:
30:4b:db:33:fe:dd:9b:1f:7a:ac:85:3b:59:70:bc:
7b:e6:f1:bc:41:10:f5:12:b4:a0:11:4e:7e:c5:55:
af:39:60:79:2f:79:4a:4b:bd:e3:24:f4:a3:6b:9b:
59:0d:8e:7f:34:b4:73:be:a8:14:17:84:b4:58:4d:
ba:cc:c3:c2:cf:cc:54:7d:28:72:c0:00:d4:0a:63:
92:79:b9:b8:00:cf:5b:04:04:80:1c:74:83:50:19:
e6:7b:f3:0a:1e:1c:9d:28:5d:58:bd:66:ee:4f:09:
93:73:80:6f:ba:26:73:50:b9:52:cc:14:8e:43:49:
e2:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:2F:B6:E8:5E:0F:7A:A8:8C:02:37:E9:73:33:30:55:46:B5:DD:3E
X509v3 Authority Key Identifier:
keyid:45:16:E5:3B:32:CA:A7:61:90:6F:0F:CD:EA:27:5B:72:0E:17:42:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RRblOzLKp2GQbw_N6idbcg4XQsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/bf426a-3a8f-4252-a17f-ba02c960b8f4/1/pi-26F4PeqiMAjfpczMwVUa13T4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/bf426a-3a8f-4252-a17f-ba02c960b8f4/1/RRblOzLKp2GQbw_N6idbcg4XQsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.177.176.0/22
Signature Algorithm: sha256WithRSAEncryption
97:e6:2c:84:58:4c:50:81:01:5e:73:69:3e:bb:85:19:82:63:
d5:1b:f4:87:eb:e2:09:2e:4c:2e:20:c3:f0:bc:89:c2:ad:5b:
8f:6b:65:50:26:e4:42:2e:b1:82:8d:e3:1b:8c:5b:63:14:e9:
e9:e0:68:03:2e:03:15:15:78:f5:ce:56:0b:79:82:c2:ee:d0:
e8:a0:85:2a:ec:51:e5:4b:5d:0f:2c:e4:81:fc:09:e4:08:cc:
21:2a:1f:3a:b5:fa:6d:a9:08:a8:e0:09:56:89:f8:58:bf:e8:
fc:7e:67:39:f2:ab:36:1f:1a:2e:a4:b8:e2:79:9c:d5:e4:34:
98:2a:a9:bf:41:85:63:58:6a:90:54:99:17:8e:f4:3a:f2:25:
77:3c:61:3c:88:04:c0:3d:a2:fd:f3:0e:40:21:44:34:bb:b7:
1a:d9:e5:0a:b3:25:f6:04:7e:29:bd:63:8d:61:2a:ee:08:20:
7a:d9:b2:e6:4a:0b:42:df:55:24:80:05:ea:a0:fe:e7:1a:70:
b8:17:c5:5e:cc:4f:c9:91:af:0e:b6:2e:eb:ac:42:af:c7:7a:
58:05:60:ef:f5:ee:ec:dd:f7:93:37:1c:c8:d8:2d:cc:7d:df:
82:2a:90:e0:59:bc:1a:b3:0e:30:91:8e:f6:db:98:ae:31:3e:
0a:47:26:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:54:33 2025 by rpki-client