Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/481466-0e38-4e3b-9bf3-285745647f5f/1/N5euriRPkrPM5tpe3YMpJKwtnXs.roa
File: N5euriRPkrPM5tpe3YMpJKwtnXs.roa (raw, json)
Hash identifier: Aif5H8pBLwxI+pfqg48v8EjEzgULti0iCYfChkXvfLI=
Subject key identifier: 37:97:AE:AE:24:4F:92:B3:CC:E6:DA:5E:DD:83:29:24:AC:2D:9D:7B
Certificate issuer: /CN=997a6477dd970c94b2a17b52502982d4fc75b244
Certificate serial: 019423D6C2FF7D4ECE220562AC2DCBD06DC0
Authority key identifier: 99:7A:64:77:DD:97:0C:94:B2:A1:7B:52:50:29:82:D4:FC:75:B2:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mXpkd92XDJSyoXtSUCmC1Px1skQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/481466-0e38-4e3b-9bf3-285745647f5f/1/N5euriRPkrPM5tpe3YMpJKwtnXs.roa
Signing time: Wed 01 Jan 2025 21:47:44 +0000
ROA not before: Wed 01 Jan 2025 21:47:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215444
IP address blocks: 193.242.185.0/24 maxlen: 24
2001:67c:ee0::/48 maxlen: 48
2001:67c:ee4::/48 maxlen: 48
2001:67c:ee8::/48 maxlen: 48
2001:67c:2c30::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:c2:ff:7d:4e:ce:22:05:62:ac:2d:cb:d0:6d:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=997a6477dd970c94b2a17b52502982d4fc75b244
Validity
Not Before: Jan 1 21:47:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3797aeae244f92b3cce6da5edd832924ac2d9d7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b4:35:bd:15:6b:55:d2:5e:3b:f4:be:1a:88:
c5:e5:81:69:11:83:24:6a:44:76:e4:cc:81:e2:ef:
7f:c0:d8:e2:17:10:3f:3b:cf:0f:d0:b8:3d:ad:65:
8b:fe:37:34:22:38:c2:a8:d5:37:b1:02:17:74:7f:
fc:4a:8e:52:6a:14:a3:c3:0c:4d:fc:11:d3:d1:db:
05:8f:b8:bf:2f:ae:bb:31:6b:e2:1c:76:e9:eb:ce:
bc:48:55:1f:72:b5:07:e1:a6:73:49:0c:d2:fe:0d:
79:4b:f8:d5:23:f1:95:21:db:cd:38:d8:64:2c:f1:
5f:c0:e5:02:38:6b:ae:96:67:d7:c0:91:62:a4:bc:
55:fd:6e:41:a5:f1:fd:9e:72:fe:a3:39:2a:35:1d:
a3:78:69:4a:ef:07:ef:21:05:27:87:7b:c5:94:a0:
60:54:33:4a:4a:da:67:d8:e4:95:7d:3a:98:d0:d6:
4f:50:aa:5f:32:ab:d6:c2:fc:e3:ef:07:89:09:2c:
da:85:7e:c6:bb:03:1a:bf:9e:0f:6d:82:c2:bf:19:
82:fb:19:55:aa:62:53:c0:67:50:cc:a1:4a:ae:5d:
dd:18:bd:c2:b2:ee:06:30:be:6e:c7:23:3a:a3:bd:
1c:c0:60:e1:56:2b:2c:61:ee:d4:ab:74:ec:95:e9:
35:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:97:AE:AE:24:4F:92:B3:CC:E6:DA:5E:DD:83:29:24:AC:2D:9D:7B
X509v3 Authority Key Identifier:
keyid:99:7A:64:77:DD:97:0C:94:B2:A1:7B:52:50:29:82:D4:FC:75:B2:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mXpkd92XDJSyoXtSUCmC1Px1skQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/481466-0e38-4e3b-9bf3-285745647f5f/1/N5euriRPkrPM5tpe3YMpJKwtnXs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/481466-0e38-4e3b-9bf3-285745647f5f/1/mXpkd92XDJSyoXtSUCmC1Px1skQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.242.185.0/24
IPv6:
2001:67c:ee0::/48
2001:67c:ee4::/48
2001:67c:ee8::/48
2001:67c:2c30::/48
Signature Algorithm: sha256WithRSAEncryption
16:4f:22:a1:bb:80:9c:b5:1b:a3:51:bc:10:b3:91:18:ce:4e:
02:c4:90:aa:da:ed:e2:f5:f3:68:4c:d5:37:94:44:e4:9e:15:
c0:a1:c1:dd:89:92:f9:97:40:3f:7d:6e:98:24:8b:bf:f2:3f:
80:fe:f7:b9:0b:04:ef:60:83:60:ec:ff:52:67:f4:17:cb:16:
6e:13:7f:00:e1:e3:2e:52:34:c7:35:4b:98:be:7b:08:7c:4b:
3e:b8:8e:15:ce:46:13:68:2e:43:44:a0:80:1b:c5:83:ff:aa:
0e:6c:29:64:cb:3d:2c:0a:b4:39:c5:4e:f1:20:5a:96:25:03:
68:6a:c6:09:d4:17:a8:d1:3a:93:ad:b0:cf:52:71:4b:25:c3:
41:56:b3:4f:7f:1f:07:c3:a9:69:cb:0f:f3:b0:d7:db:56:bd:
e1:fb:0d:a9:56:c9:cb:b7:34:cf:4c:0c:0e:fc:16:44:89:49:
e7:b5:cc:a3:ef:7f:61:08:40:b2:74:f1:e6:91:6d:7e:78:ab:
e1:a7:ff:7f:4b:e6:a8:7b:2d:8b:5c:a2:09:75:22:e5:4a:13:
06:a3:de:0d:62:94:76:6a:09:48:53:f9:cf:b8:a6:4a:5b:6e:
54:32:6f:72:bc:ca:87:6e:6b:ff:9b:af:90:cd:08:47:c4:ff:
6e:24:ea:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:26:22 2025 by rpki-client