Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/be312d-1724-4308-8240-d337b938d3cc/1/kMswko4ElKY06SDhGpfueJq34D8.roa
File: kMswko4ElKY06SDhGpfueJq34D8.roa (raw, json)
Hash identifier: kJ3gz3NOtbD3WpAXsJWsntX+DKlol8R3qkfnxa7rQtk=
Subject key identifier: 90:CB:30:92:8E:04:94:A6:34:E9:20:E1:1A:97:EE:78:9A:B7:E0:3F
Certificate issuer: /CN=eeaa52416313b7643ed28d43bc3c4661f46ab366
Certificate serial: 019425217EB43D7E1E1E81AB9CDA9CE24EF1
Authority key identifier: EE:AA:52:41:63:13:B7:64:3E:D2:8D:43:BC:3C:46:61:F4:6A:B3:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7qpSQWMTt2Q-0o1DvDxGYfRqs2Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/be312d-1724-4308-8240-d337b938d3cc/1/kMswko4ElKY06SDhGpfueJq34D8.roa
Signing time: Thu 02 Jan 2025 03:48:59 +0000
ROA not before: Thu 02 Jan 2025 03:48:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200016
IP address blocks: 193.142.35.0/24 maxlen: 24
213.226.118.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:7e:b4:3d:7e:1e:1e:81:ab:9c:da:9c:e2:4e:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eeaa52416313b7643ed28d43bc3c4661f46ab366
Validity
Not Before: Jan 2 03:48:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=90cb30928e0494a634e920e11a97ee789ab7e03f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a4:86:fb:c3:25:4d:09:7d:41:7d:37:54:28:
50:5a:d6:dd:ad:70:12:3c:1d:f2:41:f1:b1:48:48:
1d:76:19:ad:51:7f:4e:01:04:8e:15:53:b4:f3:ae:
c6:19:5e:91:ba:52:d7:22:6a:aa:95:48:2a:26:e8:
ba:16:fe:36:ab:27:b9:31:b3:07:12:ec:b3:f4:59:
f3:d2:a4:3e:ed:2c:72:3f:64:f2:21:0d:96:84:3c:
5d:de:c8:98:10:8a:f7:77:7b:66:5c:5c:5d:ef:fe:
52:2d:f5:eb:96:ae:f8:b7:e8:e5:62:b0:cc:ac:73:
b8:b4:b6:aa:9f:4f:78:d3:57:ec:79:da:5c:97:fc:
89:93:1d:96:8d:52:80:ad:83:f8:11:26:e4:03:4c:
dc:85:ac:8f:63:7a:7d:90:27:75:7f:00:0e:7a:d6:
29:5c:9b:4b:84:8d:3b:f9:e9:33:d9:86:62:b2:88:
9a:0d:bf:93:53:a0:7e:1b:61:98:f8:0a:7b:30:d1:
56:e3:76:08:31:bd:df:20:b5:12:bf:1f:24:95:1a:
9e:84:d6:d1:9f:12:83:57:d1:97:dc:37:84:a0:a7:
dd:1f:a0:05:0a:c4:01:71:00:e1:83:d4:4f:01:b2:
6e:24:9e:aa:50:2f:2a:b0:22:a6:72:9b:81:27:4c:
38:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:CB:30:92:8E:04:94:A6:34:E9:20:E1:1A:97:EE:78:9A:B7:E0:3F
X509v3 Authority Key Identifier:
keyid:EE:AA:52:41:63:13:B7:64:3E:D2:8D:43:BC:3C:46:61:F4:6A:B3:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7qpSQWMTt2Q-0o1DvDxGYfRqs2Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/be312d-1724-4308-8240-d337b938d3cc/1/kMswko4ElKY06SDhGpfueJq34D8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/be312d-1724-4308-8240-d337b938d3cc/1/7qpSQWMTt2Q-0o1DvDxGYfRqs2Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.142.35.0/24
213.226.118.0/24
Signature Algorithm: sha256WithRSAEncryption
45:bb:4e:df:2c:8c:28:5a:4b:d4:04:87:b6:64:8d:1c:2c:40:
f2:09:2d:9f:77:99:36:25:dd:5f:b9:d2:4d:43:dc:59:9f:b1:
a0:06:51:fa:a7:63:13:d7:a2:a4:90:56:3a:c0:a4:a6:2c:1e:
cf:45:89:16:ea:2b:19:79:bf:4a:85:f4:40:9f:24:bd:01:84:
8c:39:33:e5:4b:e5:5a:ea:38:02:d1:00:9c:e4:bd:c4:25:7b:
bc:15:31:4c:55:54:de:e8:28:85:9d:24:ad:e8:44:b1:88:a2:
b3:f1:eb:c1:c4:a8:e3:d6:ca:ff:09:29:71:00:ce:f2:ae:85:
d0:dc:1d:fc:a8:1d:ee:58:51:e3:34:47:de:ee:a6:b4:0d:19:
e9:ab:b7:d4:67:4f:62:54:fd:12:a5:50:ad:93:65:c8:f4:a2:
db:9e:30:db:4b:12:e8:01:e1:85:82:ae:2c:d4:58:06:5c:d5:
d6:56:ce:20:cd:de:b2:0c:cf:37:19:70:83:0e:39:27:36:4a:
19:77:c1:77:e6:29:de:71:3d:73:55:a9:b9:ea:29:a9:55:9f:
c4:05:ee:f8:ba:ea:6a:b6:a6:70:aa:ca:8a:30:e0:05:b0:26:
55:5b:d0:94:20:cc:6a:1d:88:f5:24:e4:49:0a:5c:79:15:91:
ce:33:d0:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:09:15 2025 by rpki-client