Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/SRycxRgb7-ZLpEXgHls6Rg1GkZE.roa
File: SRycxRgb7-ZLpEXgHls6Rg1GkZE.roa (raw, json)
Hash identifier: tgYoh8E5W71tyTIqSyUElR8mNX+J76OHaL8Cs33nYQs=
Subject key identifier: 49:1C:9C:C5:18:1B:EF:E6:4B:A4:45:E0:1E:5B:3A:46:0D:46:91:91
Certificate issuer: /CN=30c409613fea0a2b442ce112e9cbdb485e01188f
Certificate serial: 01942143B69B039249937433E33DD813011A
Authority key identifier: 30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/SRycxRgb7-ZLpEXgHls6Rg1GkZE.roa
Signing time: Wed 01 Jan 2025 09:47:53 +0000
ROA not before: Wed 01 Jan 2025 09:47:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59948
IP address blocks: 193.59.12.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:b6:9b:03:92:49:93:74:33:e3:3d:d8:13:01:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30c409613fea0a2b442ce112e9cbdb485e01188f
Validity
Not Before: Jan 1 09:47:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=491c9cc5181befe64ba445e01e5b3a460d469191
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:2c:17:29:ae:ff:6f:a4:7c:10:e0:1e:9a:b9:
a5:23:af:17:31:af:ee:5b:57:33:d9:55:55:65:68:
e7:13:30:a5:5b:f3:78:71:e0:3b:4a:bf:7d:c8:ee:
2e:5a:fd:68:d1:2d:f9:0e:c9:45:0e:17:e6:b5:33:
4e:a0:7b:5c:7c:3a:d5:e8:cd:36:b8:e8:0f:64:b6:
d4:e0:ea:2e:d3:50:d6:39:40:87:ea:45:a5:c5:3f:
f1:90:70:41:3e:a3:e2:69:fc:bb:14:08:67:17:76:
70:fb:63:ce:27:0e:34:86:e2:07:fa:72:72:19:05:
3b:67:38:0d:a0:96:43:65:e4:4f:92:0d:28:bd:e7:
53:4d:6b:49:54:a6:4e:1b:e5:5e:bc:1d:67:f4:44:
e2:c9:cc:b9:c4:a4:41:44:e0:d9:27:59:2f:3a:8f:
ec:2e:cc:d7:e2:7a:47:05:c2:69:01:59:eb:16:76:
6c:0f:28:25:b4:e0:4a:b0:a6:2a:2a:1f:f5:12:c7:
94:4d:73:09:2e:70:7a:d9:59:6e:a9:4d:f9:b2:5a:
2d:6f:af:bd:8a:44:af:da:da:5a:07:34:52:de:90:
f7:b5:0a:5d:e5:24:80:e8:71:c3:50:9f:84:90:af:
02:ab:9e:f3:0d:04:e3:ff:a2:55:bb:e7:db:40:af:
d0:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:1C:9C:C5:18:1B:EF:E6:4B:A4:45:E0:1E:5B:3A:46:0D:46:91:91
X509v3 Authority Key Identifier:
keyid:30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/SRycxRgb7-ZLpEXgHls6Rg1GkZE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.59.12.0/23
Signature Algorithm: sha256WithRSAEncryption
31:a9:14:56:ad:d6:88:80:b2:5f:6f:af:7d:94:86:02:6f:6c:
ae:af:69:9d:25:20:90:37:cb:42:01:46:94:fc:82:87:3c:ae:
11:18:3b:0f:a4:2c:2d:f9:15:c1:6c:54:ac:75:37:ea:8f:1a:
36:af:21:76:bb:e2:ba:7a:3c:b3:f5:c7:e9:76:b4:8d:29:b0:
a1:c6:8b:26:d6:c7:be:5f:8d:3b:da:dd:a1:db:c9:c9:d8:38:
09:6a:2a:bf:fc:93:3a:4b:b4:51:9b:b3:cd:3e:46:22:67:74:
0f:f1:10:d7:16:4b:08:28:f2:c7:27:66:77:95:7c:fb:30:0e:
9a:48:fb:3b:f2:b7:82:dc:64:1f:c0:9d:2c:31:62:a3:16:74:
49:10:18:99:05:b8:1b:e7:58:03:84:02:e5:d0:b0:b3:2b:8a:
c2:59:aa:ef:df:37:5e:fa:48:0f:f0:d6:a1:2b:c0:55:7b:b0:
f2:79:eb:9b:7d:4e:df:b5:0f:1c:50:12:d8:1b:e0:05:d9:fc:
ab:a6:95:84:f9:ec:a0:e1:ed:54:ad:0b:9d:23:c5:21:c9:f1:
18:82:05:b6:61:c0:c5:01:75:af:1c:59:d4:5d:07:9f:c6:47:
47:db:95:ae:0d:a4:18:81:72:e9:ed:34:d1:b8:7a:0f:c2:84:
9d:5f:b7:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:06:07 2025 by rpki-client