Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/dc1318-c330-4b4d-94ae-f1b00c8428ed/1/e11Y1BzeTv89ORv01AAdP5K30II.roa
File: e11Y1BzeTv89ORv01AAdP5K30II.roa (raw, json)
Hash identifier: N7EMAlCoADAa7ySQW7940rPsHLZnRpbv9iF4uLAj9Lw=
Subject key identifier: 7B:5D:58:D4:1C:DE:4E:FF:3D:39:1B:F4:D4:00:1D:3F:92:B7:D0:82
Certificate issuer: /CN=03cde64f4168a3f399b77494d94aea77292c9bcf
Certificate serial: 0194266BD25F1CB1ABB96AD43BCE3721623E
Authority key identifier: 03:CD:E6:4F:41:68:A3:F3:99:B7:74:94:D9:4A:EA:77:29:2C:9B:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A83mT0Foo_OZt3SU2Urqdyksm88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/dc1318-c330-4b4d-94ae-f1b00c8428ed/1/e11Y1BzeTv89ORv01AAdP5K30II.roa
Signing time: Thu 02 Jan 2025 09:49:47 +0000
ROA not before: Thu 02 Jan 2025 09:49:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211558
IP address blocks: 193.3.52.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:d2:5f:1c:b1:ab:b9:6a:d4:3b:ce:37:21:62:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03cde64f4168a3f399b77494d94aea77292c9bcf
Validity
Not Before: Jan 2 09:49:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7b5d58d41cde4eff3d391bf4d4001d3f92b7d082
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:84:cf:2f:8a:3b:fb:fe:75:88:3f:9a:09:5c:
cb:ad:ec:a4:6e:ee:34:44:1f:e9:7d:da:36:ef:95:
db:0b:69:77:28:ed:aa:b1:56:16:ed:31:17:04:f4:
56:d7:37:44:f5:b5:0f:9d:74:df:46:54:20:41:f4:
7c:a2:a0:f2:30:13:51:ba:9f:04:b3:fd:6b:90:9b:
ad:fb:41:6e:6e:ff:13:7b:3c:7b:4c:cb:4d:46:29:
ad:b4:68:20:40:5a:ed:91:09:0f:1a:8e:e0:d0:3f:
dc:1e:db:bb:d7:48:47:7c:a5:16:f8:cc:30:c9:38:
64:fc:24:9a:09:7c:b9:42:ae:01:ed:e2:c1:55:61:
0b:98:61:a7:85:e1:5f:e4:ba:fc:f5:91:33:df:6f:
c5:f0:79:be:fe:57:df:0a:7c:db:49:05:a9:62:aa:
0b:36:8d:1f:d1:49:f4:5a:b6:a1:82:f9:dc:a7:47:
b6:f5:7a:a6:00:ef:16:a2:5c:a7:6b:00:af:99:33:
fd:6e:1f:53:4c:01:d3:d8:a9:f5:28:95:d5:46:1f:
97:ce:77:94:4d:b5:98:95:1e:98:62:b9:79:9d:9d:
d8:04:ce:0e:b3:8a:95:5d:d8:9a:bd:fb:fa:4b:08:
4e:dd:ff:64:86:95:46:80:e0:7a:56:65:c9:4e:c0:
46:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:5D:58:D4:1C:DE:4E:FF:3D:39:1B:F4:D4:00:1D:3F:92:B7:D0:82
X509v3 Authority Key Identifier:
keyid:03:CD:E6:4F:41:68:A3:F3:99:B7:74:94:D9:4A:EA:77:29:2C:9B:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A83mT0Foo_OZt3SU2Urqdyksm88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/dc1318-c330-4b4d-94ae-f1b00c8428ed/1/e11Y1BzeTv89ORv01AAdP5K30II.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/dc1318-c330-4b4d-94ae-f1b00c8428ed/1/A83mT0Foo_OZt3SU2Urqdyksm88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.3.52.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:e7:20:b6:02:1a:cb:51:a3:2f:79:a5:97:29:ed:08:e7:b8:
9a:a9:13:cd:ec:61:6a:c7:0f:2a:fe:f5:97:00:74:bf:10:15:
0c:ca:1a:5a:1c:68:46:0f:35:5a:b2:44:ea:5d:b7:80:f9:5b:
b1:af:0c:33:16:5f:e7:a6:23:73:26:2d:61:85:56:04:b3:ce:
36:b6:05:ee:75:b0:e2:0b:26:c9:21:14:7d:60:6c:4e:6e:be:
12:86:33:d2:f3:a9:e8:e7:b1:a6:ee:9c:05:82:ce:25:c6:b8:
b6:b2:23:16:83:6d:c8:0a:18:f1:b4:cd:a0:03:ac:cf:c2:0b:
90:96:7a:63:80:0c:74:0b:ea:90:9e:49:14:7b:8a:79:fb:fc:
e7:cc:dc:ec:4c:56:6f:44:70:38:e5:9f:51:6c:8d:94:fc:49:
35:e5:e2:d4:b5:3e:83:01:41:df:68:fd:47:0d:dc:34:0e:2a:
ed:df:39:60:72:38:a6:7c:d8:64:a9:e7:fb:68:7e:a6:58:9c:
36:05:cb:39:56:c4:92:ac:f9:9e:a1:df:f9:a5:76:89:69:ff:
5f:aa:05:3d:13:4c:4a:1c:f7:89:81:f6:93:55:8b:ec:89:2a:
e0:92:34:e7:0b:07:41:36:09:cc:27:85:e0:19:47:78:52:2a:
7f:b2:00:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 23:54:05 2025 by rpki-client