Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/e84920-f5cb-46d7-bc99-fe53210b57b6/1/8cYySboA2VaDBExXOdn2f8YI2Iw.roa
File: 8cYySboA2VaDBExXOdn2f8YI2Iw.roa (raw, json)
Hash identifier: XrQTlxZOLpNHFd8Q5dqkWIouJ0kbCEk8FXuJ6lAGYRM=
Subject key identifier: F1:C6:32:49:BA:00:D9:56:83:04:4C:57:39:D9:F6:7F:C6:08:D8:8C
Certificate issuer: /CN=961b9df745c32df27df33ebcfd536f19e13474fe
Certificate serial: 0194282323ADB3E5C1916F8FB2666DCA9CC8
Authority key identifier: 96:1B:9D:F7:45:C3:2D:F2:7D:F3:3E:BC:FD:53:6F:19:E1:34:74:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lhud90XDLfJ98z68_VNvGeE0dP4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/e84920-f5cb-46d7-bc99-fe53210b57b6/1/8cYySboA2VaDBExXOdn2f8YI2Iw.roa
Signing time: Thu 02 Jan 2025 17:49:39 +0000
ROA not before: Thu 02 Jan 2025 17:49:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60789
IP address blocks: 193.100.64.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:23:ad:b3:e5:c1:91:6f:8f:b2:66:6d:ca:9c:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=961b9df745c32df27df33ebcfd536f19e13474fe
Validity
Not Before: Jan 2 17:49:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f1c63249ba00d95683044c5739d9f67fc608d88c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:76:8e:a4:1e:d9:fc:57:e5:b8:39:ca:74:74:
7d:d6:a0:dc:4f:94:1a:34:af:b1:be:c4:87:70:46:
38:41:57:79:a9:b9:9f:1f:ef:28:00:fa:f6:a2:a6:
28:0a:18:91:d6:32:ef:78:24:30:81:4d:92:21:eb:
71:53:a7:dc:6d:ce:89:aa:32:54:87:dc:b1:67:79:
4c:4d:f4:cd:3e:af:54:87:c0:0d:35:f6:4d:d3:68:
1b:9d:57:0a:f5:bf:24:6e:3c:2e:e7:8b:98:89:92:
ff:43:89:dc:55:01:7b:dd:2d:7b:1c:ad:58:45:53:
13:31:23:cf:9d:63:6a:9d:3e:27:e6:89:b9:13:7a:
63:ea:7d:75:11:b1:5e:dd:ef:06:22:c0:06:f2:98:
b7:7a:cc:cd:0a:5a:41:a1:63:5a:ad:b2:65:e2:79:
74:bb:ce:f2:9e:d5:f0:23:dc:ea:bc:6a:e6:4b:e7:
28:b4:c6:65:67:61:f8:43:37:86:16:bb:3c:5b:32:
59:27:21:16:b3:47:15:a3:cb:fa:10:cb:f0:dc:d1:
55:6d:f8:43:74:2e:94:22:c3:3b:2f:d0:17:18:c7:
d9:3a:f9:e1:58:f3:b3:3b:9f:f6:56:20:30:59:d8:
63:20:49:7c:39:fe:08:df:e7:e2:90:19:55:85:02:
4b:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:C6:32:49:BA:00:D9:56:83:04:4C:57:39:D9:F6:7F:C6:08:D8:8C
X509v3 Authority Key Identifier:
keyid:96:1B:9D:F7:45:C3:2D:F2:7D:F3:3E:BC:FD:53:6F:19:E1:34:74:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lhud90XDLfJ98z68_VNvGeE0dP4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/e84920-f5cb-46d7-bc99-fe53210b57b6/1/8cYySboA2VaDBExXOdn2f8YI2Iw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/e84920-f5cb-46d7-bc99-fe53210b57b6/1/lhud90XDLfJ98z68_VNvGeE0dP4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.100.64.0/24
Signature Algorithm: sha256WithRSAEncryption
77:ca:d6:d3:be:8a:be:2f:cc:d7:d5:f9:d6:ab:3f:e1:b9:7f:
55:a8:bf:ce:fc:d4:14:1c:3d:29:06:33:6f:a7:33:54:75:32:
3d:29:66:49:15:2c:2a:e6:3d:39:87:31:9e:03:2e:8b:f4:44:
1c:db:18:33:c2:af:26:c5:20:c8:0a:38:c7:5b:fc:b5:09:24:
22:3b:0c:e3:b3:47:bc:47:9e:1d:40:6d:ea:1b:e2:ea:f4:fa:
8c:cf:d9:5e:41:0c:f5:0e:fb:7f:a9:ca:76:e7:2a:36:0d:94:
ce:af:3e:f6:68:ae:ab:18:6c:77:47:9f:de:75:72:38:83:3e:
2c:3f:44:05:16:5c:b2:67:b2:aa:16:d2:c8:81:71:c8:ef:4f:
f4:4e:0f:63:13:43:eb:4b:d8:3b:10:18:84:2a:e9:e5:7e:72:
d5:35:be:db:0c:75:1d:fa:95:e0:aa:1d:4d:40:bc:af:d3:90:
b8:22:b3:b3:4d:0f:33:8c:c3:78:a6:82:65:5c:da:99:db:ab:
2e:71:7a:7b:22:65:9b:ac:6f:77:8d:ea:0e:89:a5:7a:0f:b7:
15:66:00:be:21:15:74:c0:55:e3:84:9e:6e:87:1c:cc:17:3d:
71:36:b3:b2:6f:76:b0:eb:8f:23:e2:19:02:5e:55:00:aa:29:
69:35:f1:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:08:02 2025 by rpki-client