Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/7bd927-b507-4363-9ada-dee4317f5b14/1/52KUDdFP_rD3RmJYr6LMpUPEMmM.roa
File: 52KUDdFP_rD3RmJYr6LMpUPEMmM.roa (raw, json)
Hash identifier: usibkDt6eCnub+7x6EZqrdrQgsmz6UQ+udh3uzbsAi0=
Subject key identifier: E7:62:94:0D:D1:4F:FE:B0:F7:46:62:58:AF:A2:CC:A5:43:C4:32:63
Certificate issuer: /CN=15ce06b44d8dc43dc742c40de3bda8aa3744e2bd
Certificate serial: 0194206849D19A5A09BA99C324BA2726D0F8
Authority key identifier: 15:CE:06:B4:4D:8D:C4:3D:C7:42:C4:0D:E3:BD:A8:AA:37:44:E2:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fc4GtE2NxD3HQsQN472oqjdE4r0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/7bd927-b507-4363-9ada-dee4317f5b14/1/52KUDdFP_rD3RmJYr6LMpUPEMmM.roa
Signing time: Wed 01 Jan 2025 05:48:13 +0000
ROA not before: Wed 01 Jan 2025 05:48:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21467
IP address blocks: 193.109.231.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:49:d1:9a:5a:09:ba:99:c3:24:ba:27:26:d0:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15ce06b44d8dc43dc742c40de3bda8aa3744e2bd
Validity
Not Before: Jan 1 05:48:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e762940dd14ffeb0f7466258afa2cca543c43263
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:dc:f9:e5:b6:31:f7:d2:9a:06:18:2f:e9:0d:
d6:f9:52:25:f8:0b:43:9b:98:82:5d:b1:a0:f3:67:
da:2a:ca:d1:7d:3f:7b:fe:40:ce:88:3e:26:13:fe:
a2:9c:30:be:31:a9:89:4f:8f:e7:85:16:c2:0c:19:
1a:0f:ce:12:6f:9a:57:72:a5:18:a3:57:e6:64:72:
24:53:b9:10:e2:0a:c2:09:20:6a:b4:47:04:00:9b:
45:e0:39:14:ab:dc:87:cf:ad:8e:6c:36:2e:7b:49:
f9:5b:c8:48:75:0e:d9:b3:de:c0:76:b8:07:18:4f:
cd:18:8f:83:c4:6d:68:c7:f1:e5:d4:7c:b0:15:9b:
d0:38:f3:7e:35:d7:2a:39:6b:c5:93:e3:62:17:1d:
05:1d:47:1a:3e:32:7e:2b:07:eb:0d:03:42:0e:e8:
6e:a8:33:1e:af:6e:c5:6c:88:46:8a:b3:db:1d:77:
c7:19:7f:12:42:0c:dc:19:ff:ce:b4:b5:1d:c5:11:
68:07:b5:0e:f7:ea:c6:b2:4a:5a:11:7e:fa:0c:08:
53:d5:17:56:9d:84:c0:7a:27:b4:3c:1f:74:52:79:
2c:10:d5:e6:85:09:46:cc:22:71:7e:76:b5:70:11:
7b:1a:6a:06:91:76:a6:ea:ad:86:ef:c9:17:20:d3:
8c:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:62:94:0D:D1:4F:FE:B0:F7:46:62:58:AF:A2:CC:A5:43:C4:32:63
X509v3 Authority Key Identifier:
keyid:15:CE:06:B4:4D:8D:C4:3D:C7:42:C4:0D:E3:BD:A8:AA:37:44:E2:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fc4GtE2NxD3HQsQN472oqjdE4r0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/7bd927-b507-4363-9ada-dee4317f5b14/1/52KUDdFP_rD3RmJYr6LMpUPEMmM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/7bd927-b507-4363-9ada-dee4317f5b14/1/Fc4GtE2NxD3HQsQN472oqjdE4r0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.109.231.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:96:63:d7:2c:d2:2b:08:32:8b:6a:28:3d:64:70:4d:8e:9c:
85:03:46:5d:a7:39:57:45:db:bf:b8:6d:9b:31:ed:12:42:93:
b9:70:d6:f4:12:a0:91:c8:2b:93:96:6e:b5:5e:46:04:a4:74:
ed:a0:78:ee:0a:5e:b8:97:74:97:50:21:3f:f5:f4:f4:0b:cd:
20:1e:86:8b:00:09:3e:79:6c:43:4b:fe:de:a6:68:49:03:50:
3a:b6:eb:39:dc:6a:4e:17:28:17:a5:51:0d:a2:cf:a0:63:c3:
3f:60:98:e9:4f:ea:50:ee:4c:d4:f8:a1:9e:33:2e:41:d6:be:
7e:f2:6d:8c:ae:c0:ae:12:b2:44:c2:98:2a:bb:5f:03:78:bf:
9f:83:d0:7d:82:3a:f8:6a:b2:08:4f:3c:46:e7:1a:e9:fa:5e:
d5:e9:fb:03:f8:b5:2e:4f:db:6d:36:74:df:b4:d1:f7:c9:7f:
ff:23:60:d2:f6:5f:0c:5f:ff:f2:19:49:13:e2:7d:cd:ab:fb:
e1:24:61:f1:bf:d6:15:ba:be:32:a8:8e:7a:07:53:1f:6f:30:
40:f3:c6:1a:5d:2f:0f:6e:89:47:3c:6a:f0:fc:de:95:7c:fa:
95:54:b7:1b:4b:93:b5:f0:43:f9:f1:39:57:98:9b:51:bf:53:
ac:6c:be:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:58:28 2025 by rpki-client