Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/f916bc-29b1-4f09-83de-d544ac062d1f/1/1-sPggFgoLgEYQ3a9DEa-ikM_oT0.roa
File: 1-sPggFgoLgEYQ3a9DEa-ikM_oT0.roa (raw, json)
Hash identifier: aDnt2VZtITmENjGl4t0nf2cwLhZtXyAhYwK+dLEZq10=
Subject key identifier: FA:C3:E0:80:58:28:2E:01:18:43:76:BD:0C:46:BE:8A:43:3F:A1:3D
Certificate issuer: /CN=c2e24a6e3b375e827ebd6e288d9e5532b3a1b684
Certificate serial: 019424B2C855D4C36B21D4DA2B259E1B2392
Authority key identifier: C2:E2:4A:6E:3B:37:5E:82:7E:BD:6E:28:8D:9E:55:32:B3:A1:B6:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wuJKbjs3XoJ-vW4ojZ5VMrOhtoQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/f916bc-29b1-4f09-83de-d544ac062d1f/1/1-sPggFgoLgEYQ3a9DEa-ikM_oT0.roa
Signing time: Thu 02 Jan 2025 01:48:03 +0000
ROA not before: Thu 02 Jan 2025 01:48:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 33915
IP address blocks: 193.176.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:c8:55:d4:c3:6b:21:d4:da:2b:25:9e:1b:23:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2e24a6e3b375e827ebd6e288d9e5532b3a1b684
Validity
Not Before: Jan 2 01:48:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fac3e08058282e01184376bd0c46be8a433fa13d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:22:4f:85:de:11:64:f9:09:89:52:d7:e6:ea:
57:7d:f4:ca:39:92:81:43:98:d5:41:2b:dd:0b:2d:
e8:50:0a:4e:96:20:49:f9:12:f8:e9:b7:c1:d5:51:
4f:af:2d:2a:98:12:11:80:64:29:76:57:8a:88:7c:
57:da:b8:16:fb:b6:8c:2a:5e:d1:c3:79:39:1f:bb:
dc:cf:f1:72:73:e9:8e:0c:b2:91:cb:51:30:02:af:
d0:0a:67:d2:79:5b:34:ae:ab:51:88:a7:8f:d5:89:
9e:67:1c:d5:d9:fc:3d:46:91:81:9b:ad:15:d3:53:
af:7a:d0:c6:59:5a:1d:95:a4:c1:89:65:7e:03:90:
cf:b7:32:ea:d7:86:78:f6:01:31:30:97:19:f6:28:
09:04:47:1b:aa:39:4e:63:8a:2b:c9:cc:ba:bf:fe:
2e:9f:c9:d9:0b:0e:b1:67:5f:87:cd:f4:3d:24:9d:
00:5d:ec:dd:ab:cf:d7:b1:16:1b:48:5b:7a:93:1d:
c2:9c:27:2d:96:51:e5:4f:8f:8f:aa:6d:99:8d:8d:
ef:4d:4a:09:e4:a3:c3:80:23:e0:7a:56:a9:c2:5b:
93:c7:99:45:ad:a4:e3:b9:eb:20:8f:95:e3:57:27:
29:c5:c3:87:e5:c4:bd:fd:42:ec:d6:bb:21:e6:99:
1e:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:C3:E0:80:58:28:2E:01:18:43:76:BD:0C:46:BE:8A:43:3F:A1:3D
X509v3 Authority Key Identifier:
keyid:C2:E2:4A:6E:3B:37:5E:82:7E:BD:6E:28:8D:9E:55:32:B3:A1:B6:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wuJKbjs3XoJ-vW4ojZ5VMrOhtoQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/f916bc-29b1-4f09-83de-d544ac062d1f/1/1-sPggFgoLgEYQ3a9DEa-ikM_oT0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/f916bc-29b1-4f09-83de-d544ac062d1f/1/wuJKbjs3XoJ-vW4ojZ5VMrOhtoQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.176.191.0/24
Signature Algorithm: sha256WithRSAEncryption
15:e1:c3:6f:0b:a4:c6:05:18:a0:c4:4b:19:79:9a:e1:92:41:
49:de:f1:72:fa:55:33:54:24:5f:c3:e3:cc:4e:c7:ad:1a:ae:
5e:1c:33:3a:06:8b:f6:d1:ca:7e:d7:4a:3f:07:ab:70:f7:24:
1d:c6:cc:0c:06:ab:c4:a8:43:e5:55:e2:35:93:cf:66:e5:d3:
fd:9b:13:44:94:5e:0e:dd:42:40:25:1b:91:35:e0:05:73:dd:
cb:df:cb:ea:e7:7a:9c:11:5e:75:82:45:06:a4:e0:68:c0:53:
11:b5:32:0d:63:b2:11:58:f9:17:ab:3a:77:4d:43:09:64:2c:
99:a4:10:07:13:a5:e4:18:ed:17:55:b7:58:73:75:ee:d0:26:
03:92:db:bf:c8:99:89:57:63:95:f4:51:0b:43:aa:18:bf:c7:
b0:ab:72:88:b1:02:fa:b5:1b:94:5d:41:9d:0b:83:df:ad:bb:
9d:aa:65:47:aa:14:b6:7a:2f:5f:e4:fe:99:e6:bb:81:19:4d:
7d:2b:20:1a:11:1b:8e:60:89:76:7e:80:cf:b3:aa:2a:ca:f1:
c9:a4:f8:15:a0:3c:5e:3d:69:15:64:4d:a6:39:6d:80:96:dc:
8c:9f:48:5f:11:c0:4a:f7:68:4f:02:30:b6:d9:bd:8c:fe:fc:
02:b1:28:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:50:18 2025 by rpki-client