Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/3516a1-fd9d-4e29-add3-d446f1f83ae9/1/akjM-xe6r7wN8q85qvVsiC6HFoc.roa
File: akjM-xe6r7wN8q85qvVsiC6HFoc.roa (raw, json)
Hash identifier: DJGYhYAc1tW0r6f5bvOKTaPIoda2gTETmwDHHbAC3Yc=
Subject key identifier: 6A:48:CC:FB:17:BA:AF:BC:0D:F2:AF:39:AA:F5:6C:88:2E:87:16:87
Certificate issuer: /CN=38ead5deb53500f2548ae1812c087e32a47fc8b4
Certificate serial: 01942067F1141A7576190170B9EBC0D51DD3
Authority key identifier: 38:EA:D5:DE:B5:35:00:F2:54:8A:E1:81:2C:08:7E:32:A4:7F:C8:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OOrV3rU1APJUiuGBLAh-MqR_yLQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/3516a1-fd9d-4e29-add3-d446f1f83ae9/1/akjM-xe6r7wN8q85qvVsiC6HFoc.roa
Signing time: Wed 01 Jan 2025 05:47:50 +0000
ROA not before: Wed 01 Jan 2025 05:47:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9085
IP address blocks: 193.42.211.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:f1:14:1a:75:76:19:01:70:b9:eb:c0:d5:1d:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38ead5deb53500f2548ae1812c087e32a47fc8b4
Validity
Not Before: Jan 1 05:47:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6a48ccfb17baafbc0df2af39aaf56c882e871687
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b0:0c:75:b7:d1:c9:60:5f:03:06:b1:53:1f:
2c:73:1e:de:86:16:0d:d5:5e:db:6e:e9:d0:15:53:
e9:17:f9:09:54:ba:6a:2b:b8:94:2a:48:21:33:e5:
55:01:a6:0e:87:4b:5d:0a:54:8a:f3:50:c7:f8:06:
94:0b:13:fe:10:91:52:1d:72:20:97:de:88:9f:b9:
fb:57:5d:33:25:fc:a0:31:bb:b8:4c:70:3c:51:ec:
c5:04:91:e6:f1:cf:ef:54:ee:a2:7d:bf:7e:7f:c8:
e4:96:aa:3f:87:60:aa:64:7f:fd:fc:bd:15:ef:f3:
fe:f6:c5:86:9f:67:47:fe:80:2a:4e:0b:67:33:05:
55:2e:a6:9d:af:bc:9b:48:84:ad:7e:2c:78:c4:c9:
26:22:75:87:41:58:21:1e:4d:68:40:ff:05:57:29:
91:94:8c:1f:98:88:19:47:dd:34:43:b9:f8:7f:3a:
a4:80:c1:6d:41:7e:76:86:a3:c0:87:55:69:fd:cb:
cd:f1:3a:fb:2b:02:1a:26:0d:2a:01:ae:93:a0:64:
96:de:2e:fd:53:c6:dd:6f:d8:03:02:cf:65:5a:ed:
1d:d4:04:12:50:e7:13:b4:b3:df:2d:c7:d0:ef:81:
03:fe:4d:8f:c5:00:eb:31:56:35:b1:5e:fb:ab:f3:
d4:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:48:CC:FB:17:BA:AF:BC:0D:F2:AF:39:AA:F5:6C:88:2E:87:16:87
X509v3 Authority Key Identifier:
keyid:38:EA:D5:DE:B5:35:00:F2:54:8A:E1:81:2C:08:7E:32:A4:7F:C8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OOrV3rU1APJUiuGBLAh-MqR_yLQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/3516a1-fd9d-4e29-add3-d446f1f83ae9/1/akjM-xe6r7wN8q85qvVsiC6HFoc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/3516a1-fd9d-4e29-add3-d446f1f83ae9/1/OOrV3rU1APJUiuGBLAh-MqR_yLQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.42.211.0/24
Signature Algorithm: sha256WithRSAEncryption
69:ca:21:e0:47:f7:4e:90:bb:67:11:f7:ca:d8:ae:c8:2c:99:
c6:63:6d:13:c6:69:42:ac:51:2e:b3:fa:3b:a1:1d:5d:31:7b:
0e:e3:7d:38:c6:d3:37:d2:c8:b1:b9:7d:63:2c:42:37:95:5d:
69:82:61:25:71:3e:f4:46:2c:d9:7d:9d:35:4c:c4:8b:74:0a:
80:55:c8:f7:3d:60:8f:3a:a1:3f:b7:91:1c:66:ba:6d:8b:66:
28:5c:73:10:90:1d:b4:0e:f5:ed:47:81:86:6c:a4:81:e2:e3:
f6:76:d6:3c:9e:3a:bd:97:69:47:3d:01:eb:2d:af:0f:64:7a:
a9:b6:2f:16:e7:33:0c:be:c1:a4:5b:68:69:b0:ce:6b:00:59:
85:d2:62:db:57:45:a2:04:5c:33:2d:d5:42:35:92:3b:17:46:
34:03:4c:8f:a5:ae:c5:af:7f:08:38:93:07:17:a1:e6:d7:93:
b1:7c:dd:0f:97:3d:b7:12:da:37:52:21:05:38:5c:07:74:b2:
11:7e:51:ec:04:3f:10:50:3c:f2:2e:fb:14:15:bd:63:0d:21:
0a:db:a7:5a:b0:9e:6d:b4:09:4e:cd:c7:cd:a6:e5:8c:53:d3:
6b:ca:c8:31:1b:4e:b0:17:26:39:41:fc:a4:c3:6b:02:40:8a:
8c:06:5c:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:37:43 2025 by rpki-client