Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/c3d10e-f4ab-4f08-956c-3cadec46e5c3/1/1-57HmlNDMcNn-L6phbslRuvJCcw.roa
File: 1-57HmlNDMcNn-L6phbslRuvJCcw.roa (raw, json)
Hash identifier: gyWoPpIB9HWDXzh+b8BPPzXer8C1JA3lUjjaqPhqcUE=
Subject key identifier: FB:9E:C7:9A:53:43:31:C3:67:F8:BE:A9:85:BB:25:46:EB:C9:09:CC
Certificate issuer: /CN=e356f5c23ccec64640685e44d59bc4b6d44daab9
Certificate serial: 019424B3C30195BC5238DFD29267833CE6CE
Authority key identifier: E3:56:F5:C2:3C:CE:C6:46:40:68:5E:44:D5:9B:C4:B6:D4:4D:AA:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/41b1wjzOxkZAaF5E1ZvEttRNqrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/c3d10e-f4ab-4f08-956c-3cadec46e5c3/1/1-57HmlNDMcNn-L6phbslRuvJCcw.roa
Signing time: Thu 02 Jan 2025 01:49:08 +0000
ROA not before: Thu 02 Jan 2025 01:49:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35500
IP address blocks: 193.47.143.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:c3:01:95:bc:52:38:df:d2:92:67:83:3c:e6:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e356f5c23ccec64640685e44d59bc4b6d44daab9
Validity
Not Before: Jan 2 01:49:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fb9ec79a534331c367f8bea985bb2546ebc909cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:3b:11:1e:8a:87:5c:1b:5e:a3:48:0c:00:9d:
10:31:ef:a9:b8:6c:a3:95:6e:3f:ad:cd:22:62:ed:
e5:76:02:81:7f:0e:35:4d:33:df:9d:0d:1a:54:35:
b5:1f:b8:4a:26:c0:20:61:15:d4:1f:e0:a8:eb:90:
4f:28:cc:5a:a6:be:ec:f8:b8:d8:d4:40:ab:06:1f:
25:d6:d7:70:2f:4e:1f:36:80:d7:6c:b3:6f:3a:5b:
47:da:85:a7:1b:d2:b4:b7:65:bc:9c:f6:93:07:99:
70:64:d8:dc:52:03:02:34:43:50:95:29:3a:01:f9:
b1:6b:80:dd:48:08:dd:21:c3:6a:f9:4a:f6:57:3f:
8f:d0:32:6c:d7:68:f4:3d:7e:4e:52:6f:8e:a6:0b:
a9:67:b5:d9:ea:47:b6:b3:9c:46:06:27:83:be:28:
a1:1c:22:cd:e5:c5:3e:88:27:c5:ce:11:7b:33:7d:
07:40:2d:39:52:d6:0d:5e:2d:7a:5e:30:d3:8b:8b:
ce:d6:ee:a6:d9:c6:e4:76:bf:29:f2:0c:29:38:31:
7e:23:ee:23:a8:ab:36:70:76:a0:af:03:43:a6:71:
8d:0b:0d:30:d2:46:af:eb:74:7b:68:e3:d6:e6:f1:
91:7f:21:33:5e:c9:f5:5f:6b:be:37:95:28:35:65:
33:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:9E:C7:9A:53:43:31:C3:67:F8:BE:A9:85:BB:25:46:EB:C9:09:CC
X509v3 Authority Key Identifier:
keyid:E3:56:F5:C2:3C:CE:C6:46:40:68:5E:44:D5:9B:C4:B6:D4:4D:AA:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/41b1wjzOxkZAaF5E1ZvEttRNqrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/c3d10e-f4ab-4f08-956c-3cadec46e5c3/1/1-57HmlNDMcNn-L6phbslRuvJCcw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/c3d10e-f4ab-4f08-956c-3cadec46e5c3/1/41b1wjzOxkZAaF5E1ZvEttRNqrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.47.143.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:af:0a:3c:d2:75:e1:e1:8c:eb:07:7c:1a:8b:e7:c4:82:0a:
cc:59:ea:6b:35:71:4b:07:64:16:fc:5d:c1:33:b5:7a:3f:72:
f0:b9:8e:4e:41:83:ee:4c:9b:d4:e4:83:2f:a4:4b:9a:c1:4c:
a6:3e:33:bd:ee:87:03:9a:9e:4d:3f:35:4b:ef:8c:42:90:fe:
0b:32:f4:a1:b4:12:45:17:52:e8:84:69:92:87:fe:28:20:ee:
1c:a9:93:a0:89:2d:7b:4f:01:0f:79:dc:c7:fd:d8:a8:fa:92:
6e:04:67:5d:bd:90:a8:bb:ae:9f:2f:1e:f4:3e:2a:64:1d:10:
62:bb:d1:fa:84:e2:bb:75:30:2c:c2:60:3a:54:82:23:e5:c3:
85:1f:49:8e:c3:5f:97:00:3a:5c:4a:1d:22:2b:c1:88:57:e9:
fd:9e:62:3b:6c:0e:2e:f8:88:4f:f6:1b:ff:25:6c:79:9c:6b:
74:04:b1:7b:da:63:1f:ed:d9:e7:5a:a3:dc:1e:9e:39:6d:c8:
d9:e4:4d:2b:1d:5a:25:9b:1b:b4:b1:17:ad:51:64:a4:5c:c6:
b8:51:f9:e2:06:d7:d1:fe:3e:47:07:b6:c2:6b:f4:78:20:01:
8a:01:00:51:4e:e0:a7:9a:27:b0:92:3c:c3:4e:af:30:e7:4a:
86:18:57:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:54:04 2025 by rpki-client