Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/dceacf-dae2-4763-b399-2fb99fe5e477/1/9QfEv6VDYJHwg-_mBcw3nPg902w.roa
File: 9QfEv6VDYJHwg-_mBcw3nPg902w.roa (raw, json)
Hash identifier: bDGQkiI5avL3G45Js05YIuwiQofAZ2dxukXBkwwmDkY=
Subject key identifier: F5:07:C4:BF:A5:43:60:91:F0:83:EF:E6:05:CC:37:9C:F8:3D:D3:6C
Certificate issuer: /CN=c2f3266e0612d8314f4e9f92a3db8bcb253edabc
Certificate serial: 019421445A92DC5A90DD65BDDCED98776716
Authority key identifier: C2:F3:26:6E:06:12:D8:31:4F:4E:9F:92:A3:DB:8B:CB:25:3E:DA:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wvMmbgYS2DFPTp-So9uLyyU-2rw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/dceacf-dae2-4763-b399-2fb99fe5e477/1/9QfEv6VDYJHwg-_mBcw3nPg902w.roa
Signing time: Wed 01 Jan 2025 09:48:35 +0000
ROA not before: Wed 01 Jan 2025 09:48:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198941
IP address blocks: 193.35.46.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:5a:92:dc:5a:90:dd:65:bd:dc:ed:98:77:67:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2f3266e0612d8314f4e9f92a3db8bcb253edabc
Validity
Not Before: Jan 1 09:48:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f507c4bfa5436091f083efe605cc379cf83dd36c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:4d:0d:ed:87:96:ab:28:90:5d:67:52:a6:89:
f9:4a:2c:a4:f9:eb:e7:77:62:16:39:48:24:15:2a:
c2:31:7f:98:99:d9:b8:76:43:61:5f:4e:b1:f5:d0:
45:c5:d7:d1:3f:ec:fb:33:08:b5:a3:b7:0a:08:f9:
35:d1:79:ea:bd:34:14:e0:3a:3d:90:6d:94:c6:de:
75:05:f7:c6:48:a7:86:80:b0:da:f6:c4:58:e7:2c:
ca:b6:66:22:19:d8:30:36:3a:b9:3e:5a:09:b7:cb:
56:12:cb:ab:6d:52:a9:e5:d1:0e:d0:02:e0:55:09:
b8:cd:34:bb:c5:47:5a:7b:6b:a0:7b:ee:64:cf:55:
b2:88:9d:7a:44:2f:8a:5b:2d:fe:a3:89:14:3d:55:
c8:15:1d:1e:2e:f8:a5:e3:35:6d:1b:68:fd:06:74:
21:a9:d2:5a:d5:0d:97:f9:c2:ab:ca:8c:ab:4f:93:
ab:1d:25:fb:94:09:b4:71:34:89:f7:23:cb:8c:c1:
60:67:5f:d2:d4:6b:f2:ac:51:81:2c:5e:19:c2:c8:
f1:90:e5:72:fa:42:b2:4a:27:f5:e5:70:96:1d:db:
48:24:39:a4:7c:53:a1:c9:59:88:6a:3c:62:f9:6d:
82:74:b2:c3:dd:b9:4e:8f:70:3d:94:f9:f5:18:f1:
c6:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:07:C4:BF:A5:43:60:91:F0:83:EF:E6:05:CC:37:9C:F8:3D:D3:6C
X509v3 Authority Key Identifier:
keyid:C2:F3:26:6E:06:12:D8:31:4F:4E:9F:92:A3:DB:8B:CB:25:3E:DA:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wvMmbgYS2DFPTp-So9uLyyU-2rw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/dceacf-dae2-4763-b399-2fb99fe5e477/1/9QfEv6VDYJHwg-_mBcw3nPg902w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/dceacf-dae2-4763-b399-2fb99fe5e477/1/wvMmbgYS2DFPTp-So9uLyyU-2rw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.35.46.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:4c:68:db:82:cc:65:51:0f:5e:97:64:5d:1b:8c:d8:c4:14:
aa:94:b4:fe:80:27:95:e8:ee:b6:20:c4:4c:84:58:fd:05:bd:
e9:4d:3f:00:69:f3:bf:3e:34:c4:a0:a7:9a:71:40:cb:e6:1f:
e0:35:0a:f8:ed:92:a4:e3:f6:bf:db:27:e1:7b:a2:0a:4c:49:
0d:c2:28:f1:36:d3:2d:80:73:21:6f:6f:c0:13:be:5e:d6:10:
5f:28:f7:7e:d2:9b:03:67:d2:2e:41:3e:36:50:60:f7:bb:16:
fc:5f:d0:40:b7:cf:dc:85:d4:22:e4:fb:06:0a:c1:5f:fd:02:
3c:24:4f:a0:0e:66:96:20:50:7b:0f:50:e0:36:65:2e:e7:eb:
0c:fb:16:8d:1d:3a:5d:6f:f7:23:8f:33:cb:17:67:6b:e5:42:
29:ca:3e:f5:14:d2:e4:75:0b:65:6c:9f:a8:da:c7:7f:82:00:
02:f5:33:2a:d7:80:c2:44:4a:45:d3:2d:8d:80:d6:26:f5:2e:
b3:2f:15:9a:6d:bc:95:17:79:e1:8c:7a:2f:48:93:04:77:f2:
f6:84:db:22:11:49:3c:1f:1c:61:dc:2c:21:81:4f:ef:31:61:
a6:08:44:9e:91:54:ef:46:94:1a:5b:ea:c6:18:53:91:16:8a:
20:65:26:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:46:18 2025 by rpki-client