Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/51885b-5693-4892-a1d4-1a19792a1d26/1/3EEDSMX4c2BQtUFlexj7ViVaNFg.roa
File: 3EEDSMX4c2BQtUFlexj7ViVaNFg.roa (raw, json)
Hash identifier: i/HEM5WN4SpMsFYFUufkSvdwrDOTS979dTw2WJmTqxo=
Subject key identifier: DC:41:03:48:C5:F8:73:60:50:B5:41:65:7B:18:FB:56:25:5A:34:58
Certificate issuer: /CN=cd2d0e39d78fc6202255a5b4adb54583d9deddce
Certificate serial: 01942067DD5AB2E51BF7F3EE037A4C07925C
Authority key identifier: CD:2D:0E:39:D7:8F:C6:20:22:55:A5:B4:AD:B5:45:83:D9:DE:DD:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zS0OOdePxiAiVaW0rbVFg9ne3c4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/51885b-5693-4892-a1d4-1a19792a1d26/1/3EEDSMX4c2BQtUFlexj7ViVaNFg.roa
Signing time: Wed 01 Jan 2025 05:47:45 +0000
ROA not before: Wed 01 Jan 2025 05:47:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12611
IP address blocks: 193.23.119.0/24 maxlen: 24
194.150.226.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:dd:5a:b2:e5:1b:f7:f3:ee:03:7a:4c:07:92:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd2d0e39d78fc6202255a5b4adb54583d9deddce
Validity
Not Before: Jan 1 05:47:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dc410348c5f8736050b541657b18fb56255a3458
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:1e:71:46:be:07:52:a0:9f:f7:69:03:80:b5:
b4:2b:07:15:2a:2c:c5:0d:09:9e:1f:a8:55:7c:67:
21:4a:54:1e:89:ff:0e:72:6a:47:f0:eb:41:02:ef:
52:f0:45:0f:54:eb:c9:81:5a:7e:42:03:98:b6:5f:
49:ee:66:14:b6:8e:81:7c:55:be:03:05:d5:7f:ef:
ed:09:de:df:4b:9b:80:9b:41:61:e4:3f:f3:1b:b7:
1d:7e:f2:71:ab:24:0a:eb:b4:cd:b3:5b:f7:67:a0:
1a:09:51:79:e7:96:87:ff:85:28:e0:eb:84:16:93:
25:64:18:fb:58:88:17:f2:45:8a:84:02:3e:21:03:
9a:b7:bb:6c:42:6d:cf:7e:2a:b8:04:96:a3:1c:fc:
05:b9:c8:c0:d9:ce:b6:96:28:e1:20:83:87:9e:f7:
94:10:73:d4:5f:16:df:9e:e5:88:0b:fa:8a:67:c6:
89:3c:45:d7:fc:3b:c3:94:10:52:41:fa:6a:b0:25:
6a:b1:51:33:b5:f6:6b:c2:af:9e:c0:4c:a3:bb:89:
f7:83:f7:bb:ca:c6:b1:12:02:8f:4a:bf:f5:41:3b:
65:a8:43:1e:6e:38:f7:a8:d7:c1:e1:40:16:f9:b5:
4f:42:9f:d2:57:34:88:4b:c2:77:cd:17:92:7e:3d:
59:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:41:03:48:C5:F8:73:60:50:B5:41:65:7B:18:FB:56:25:5A:34:58
X509v3 Authority Key Identifier:
keyid:CD:2D:0E:39:D7:8F:C6:20:22:55:A5:B4:AD:B5:45:83:D9:DE:DD:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zS0OOdePxiAiVaW0rbVFg9ne3c4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/51885b-5693-4892-a1d4-1a19792a1d26/1/3EEDSMX4c2BQtUFlexj7ViVaNFg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/51885b-5693-4892-a1d4-1a19792a1d26/1/zS0OOdePxiAiVaW0rbVFg9ne3c4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.23.119.0/24
194.150.226.0/23
Signature Algorithm: sha256WithRSAEncryption
10:80:46:e4:00:9a:5a:d5:bd:b6:fa:14:c0:88:b4:ba:f5:af:
7c:ab:4a:af:09:5b:41:7d:ba:ac:0e:22:74:c0:8b:ee:27:a3:
33:33:8b:0e:fb:99:95:4c:cd:19:39:d9:0b:3d:5c:00:53:9f:
30:a6:b4:3e:d6:01:16:b3:08:b5:d6:6c:41:c0:d3:06:a1:69:
bf:8f:5f:38:5f:90:51:af:24:59:72:46:76:50:85:10:a8:38:
fd:19:4f:59:84:5d:fc:18:0a:16:91:37:17:84:50:cc:1b:1c:
9c:80:0b:64:e7:0d:da:9c:ba:b0:17:e6:e9:a9:99:13:16:ee:
51:ad:57:06:b4:de:4b:14:6e:f7:d4:69:a4:27:f2:f3:6c:9b:
40:16:33:0a:90:cf:9a:16:34:68:7c:cd:62:bc:2b:b2:e8:64:
9a:f3:55:00:e7:d5:a9:7b:1c:d8:e5:90:f7:a8:0b:f4:bd:5c:
5e:9c:64:60:09:69:d6:41:8f:a8:49:a3:2b:f0:19:d9:bd:e2:
e2:41:23:ee:c1:2a:10:66:9d:a2:12:0e:88:4d:05:44:c2:84:
43:21:0e:5f:21:81:42:94:5c:2e:0e:9e:1e:95:04:36:51:99:
d3:75:29:54:ed:ee:c9:5d:49:f5:e4:53:b2:6e:52:10:48:b2:
01:a5:01:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:42:55 2025 by rpki-client