Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/6bb7cb-d0ed-4650-ad0a-27a474505499/1/AddwdaQYSDgJ_-W9pipGLPibD4Q.roa
File: AddwdaQYSDgJ_-W9pipGLPibD4Q.roa (raw, json)
Hash identifier: YjKAFD6jnw8P32xCITagf8KVgpNGeRxCswidFmsKIOw=
Subject key identifier: 01:D7:70:75:A4:18:48:38:09:FF:E5:BD:A6:2A:46:2C:F8:9B:0F:84
Certificate issuer: /CN=d0e65bec5c765c850ee8ff97cc41b38031d1d83a
Certificate serial: 019425208F51AEB5675197EF225B7152CE7B
Authority key identifier: D0:E6:5B:EC:5C:76:5C:85:0E:E8:FF:97:CC:41:B3:80:31:D1:D8:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0OZb7Fx2XIUO6P-XzEGzgDHR2Do.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/6bb7cb-d0ed-4650-ad0a-27a474505499/1/AddwdaQYSDgJ_-W9pipGLPibD4Q.roa
Signing time: Thu 02 Jan 2025 03:47:58 +0000
ROA not before: Thu 02 Jan 2025 03:47:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34885
IP address blocks: 193.138.0.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:20:8f:51:ae:b5:67:51:97:ef:22:5b:71:52:ce:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0e65bec5c765c850ee8ff97cc41b38031d1d83a
Validity
Not Before: Jan 2 03:47:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=01d77075a418483809ffe5bda62a462cf89b0f84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:62:cb:87:6f:94:1f:e1:a3:17:2a:74:ee:40:
0c:ed:8e:6c:c1:93:36:76:d6:f9:ad:79:2f:ef:39:
5d:ed:8a:7d:dd:0a:8e:64:62:1c:97:06:0c:8a:9d:
d9:0e:75:44:74:7c:e0:95:3f:d8:2c:95:82:98:b2:
b9:bf:be:03:08:04:3d:ba:63:23:e4:63:4c:0d:ce:
ad:d7:08:98:5f:52:7b:fb:2e:d9:22:2b:32:eb:a8:
cb:84:95:84:03:7e:30:f1:05:ba:88:4d:db:cc:b5:
8a:ae:d3:b7:4e:65:1e:ff:02:86:21:5d:e0:e1:6b:
ec:a6:33:a9:85:a0:8e:ac:98:9a:76:1a:b6:12:f1:
dc:b1:c6:7e:c4:6f:57:26:42:49:fb:47:9a:fd:82:
3d:9b:34:55:25:d6:fc:28:9b:8b:c0:63:9c:92:07:
9d:05:e6:2b:b2:7c:67:bd:ca:2c:22:82:2a:f8:8f:
31:22:1a:3b:69:cd:2c:a1:c0:02:a8:bc:5c:33:c7:
92:6f:43:88:05:4c:9a:8f:e0:ed:06:63:24:d3:5e:
c7:bb:03:67:a4:d9:55:70:6d:98:d4:8a:27:f0:4f:
1d:6e:c8:c1:24:86:ba:e3:a7:df:07:e2:75:76:c7:
b6:32:1c:fe:ff:44:54:58:a8:98:c1:47:35:15:b3:
09:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:D7:70:75:A4:18:48:38:09:FF:E5:BD:A6:2A:46:2C:F8:9B:0F:84
X509v3 Authority Key Identifier:
keyid:D0:E6:5B:EC:5C:76:5C:85:0E:E8:FF:97:CC:41:B3:80:31:D1:D8:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0OZb7Fx2XIUO6P-XzEGzgDHR2Do.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/6bb7cb-d0ed-4650-ad0a-27a474505499/1/AddwdaQYSDgJ_-W9pipGLPibD4Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/6bb7cb-d0ed-4650-ad0a-27a474505499/1/0OZb7Fx2XIUO6P-XzEGzgDHR2Do.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.138.0.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:fc:f6:26:c6:fb:f5:0e:ed:cb:94:b7:ae:7b:26:6c:7f:08:
38:cd:28:ec:99:74:b2:ea:36:a8:f5:15:7a:8a:34:72:68:0f:
e6:47:13:2c:40:21:81:b8:87:c8:f4:00:94:6b:c3:a2:48:39:
93:e2:d4:16:01:a3:8a:7f:2f:c5:9d:c0:a1:6a:ee:8e:11:a0:
ea:aa:16:ac:6e:1f:ec:ea:09:63:89:38:fd:63:81:20:17:3f:
a7:68:5e:89:da:5c:a6:f7:40:56:2c:80:f9:3f:f0:20:a7:65:
c1:76:af:d3:cd:fd:a5:05:6a:50:67:2e:09:bb:13:28:f2:3b:
6a:84:a8:41:aa:41:03:c8:d6:01:27:65:a5:52:b6:6f:c6:ae:
0b:33:2b:bc:dd:d2:9c:83:44:11:d8:c9:79:8e:7b:d8:bf:20:
74:ae:ad:cd:e3:fc:25:7c:ef:5a:8c:3e:20:cb:4b:9a:98:cf:
3d:fe:f8:bc:98:60:ee:4a:40:c1:6c:9c:dd:bd:c6:ec:28:23:
44:ed:ad:63:20:ee:51:ee:74:a9:24:51:2f:4f:cf:cd:d7:e2:
30:c5:8d:12:c1:ba:3a:ef:60:d5:20:27:f7:10:09:fb:94:18:
1e:33:72:4c:62:a8:24:ab:d9:55:89:f5:4b:d4:7c:e1:70:dd:
e8:51:dd:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:19:17 2025 by rpki-client