Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/942efa-18a5-4649-9929-7be713679608/1/iRBbWvohEYJflS9OCEUVIoQSWfY.roa
File: iRBbWvohEYJflS9OCEUVIoQSWfY.roa (raw, json)
Hash identifier: zk7p1QlOj9CX+QAjlGJs9mmfWeFhKlip2Q65HI1v4ZM=
Subject key identifier: 89:10:5B:5A:FA:21:11:82:5F:95:2F:4E:08:45:15:22:84:12:59:F6
Certificate issuer: /CN=fae27b8c1de6b161c798ab7b85153d6ba379efbe
Certificate serial: 019423D7570BDDF466B79D7C6BC7FD6C77E2
Authority key identifier: FA:E2:7B:8C:1D:E6:B1:61:C7:98:AB:7B:85:15:3D:6B:A3:79:EF:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-uJ7jB3msWHHmKt7hRU9a6N5774.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/942efa-18a5-4649-9929-7be713679608/1/iRBbWvohEYJflS9OCEUVIoQSWfY.roa
Signing time: Wed 01 Jan 2025 21:48:22 +0000
ROA not before: Wed 01 Jan 2025 21:48:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51114
IP address blocks: 193.111.34.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:57:0b:dd:f4:66:b7:9d:7c:6b:c7:fd:6c:77:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fae27b8c1de6b161c798ab7b85153d6ba379efbe
Validity
Not Before: Jan 1 21:48:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=89105b5afa2111825f952f4e08451522841259f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:6f:f6:49:ba:9a:9f:dc:6c:62:52:d4:eb:d2:
98:db:db:bf:82:12:38:ff:cd:e5:83:ea:b3:66:17:
49:65:2f:50:47:3e:1c:f2:7d:50:5a:d8:11:81:b3:
97:a2:88:89:6e:b3:fe:bf:c9:a2:cc:86:43:46:d2:
64:12:f5:f6:2a:ef:f7:f3:54:10:84:20:94:1c:68:
ad:9d:3f:cd:e0:23:9f:ff:fd:f3:bf:bc:7a:ef:43:
c7:5f:8a:af:c1:27:79:ee:63:41:7a:e0:a2:8d:db:
b4:63:83:77:9f:ca:a0:2a:a0:e8:08:4d:90:35:6e:
5f:e5:b7:17:4f:e3:67:db:61:4a:0f:0c:d1:d3:fb:
ed:1a:f7:21:a6:40:40:25:5d:91:41:8c:87:72:e8:
57:85:39:a1:2b:c4:00:b2:c4:f8:a2:f9:34:6f:eb:
6a:8a:5b:35:f5:ba:5f:ca:54:d5:61:b8:2a:a5:8f:
22:5a:de:b2:ee:e7:91:e6:b4:29:d5:75:5a:52:52:
e7:b0:35:07:b6:93:3c:4e:2d:40:f9:51:35:53:04:
a6:d4:fc:50:5b:06:2a:61:e7:b0:3c:bc:59:01:7a:
e0:d7:12:91:20:c7:ce:49:2b:33:0b:66:63:49:f3:
00:cd:70:5f:29:02:63:5c:03:c5:f6:ff:e5:53:db:
5d:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:10:5B:5A:FA:21:11:82:5F:95:2F:4E:08:45:15:22:84:12:59:F6
X509v3 Authority Key Identifier:
keyid:FA:E2:7B:8C:1D:E6:B1:61:C7:98:AB:7B:85:15:3D:6B:A3:79:EF:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-uJ7jB3msWHHmKt7hRU9a6N5774.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/942efa-18a5-4649-9929-7be713679608/1/iRBbWvohEYJflS9OCEUVIoQSWfY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/942efa-18a5-4649-9929-7be713679608/1/1-uJ7jB3msWHHmKt7hRU9a6N5774.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.111.34.0/24
Signature Algorithm: sha256WithRSAEncryption
98:0c:fe:39:0f:52:82:34:87:fd:c7:d0:f8:7f:3b:45:2e:28:
00:8f:3c:1c:4a:80:59:15:a1:9d:4e:ed:62:48:c2:14:d9:62:
16:7d:4c:0c:e0:d3:5c:54:c2:56:b4:72:32:83:b4:4e:b1:e5:
fc:0e:ef:90:fe:f1:05:c4:d2:d0:fa:e4:a9:b0:58:00:dd:9b:
71:32:de:c3:10:fc:81:bf:fb:18:e5:3a:3e:b4:13:1f:0c:83:
cf:71:57:5a:8c:0a:99:d0:32:3e:6b:aa:64:7c:c3:4c:ee:6b:
39:ed:f0:08:98:f8:37:89:17:45:de:2d:32:e5:9b:64:c7:7a:
d3:fc:a9:d0:ff:be:29:b7:27:12:7b:8a:b2:74:0c:f6:85:68:
a3:55:37:c1:59:11:11:17:90:eb:ca:65:75:c6:5b:69:32:53:
ea:f3:77:fa:76:8b:f0:48:10:55:67:98:87:2e:63:6d:d6:a7:
6a:e2:73:fd:4b:93:45:52:e4:75:58:f7:e5:3d:c6:78:40:f1:
7f:89:6f:83:32:9f:bf:fa:2e:75:79:18:30:52:87:02:3a:6d:
5d:41:d1:ff:8e:23:fb:ea:5d:bf:b1:82:85:3f:2b:74:5d:86:
40:46:0b:07:44:1f:a3:54:40:14:89:d4:9a:1c:76:c0:d2:b2:
c8:11:91:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:18:02 2025 by rpki-client