Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/d4f92b-2d13-4f2c-ad54-3becddfccae6/1/k6bkvh9iuXhGi6Ifo-aZZ61eWcY.roa
File: k6bkvh9iuXhGi6Ifo-aZZ61eWcY.roa (raw, json)
Hash identifier: yZJ6vuAHa/37ymvkns64WkhZR926EDrpu1i04hE/yKg=
Subject key identifier: 93:A6:E4:BE:1F:62:B9:78:46:8B:A2:1F:A3:E6:99:67:AD:5E:59:C6
Certificate issuer: /CN=470bc021b657a594ee58d9d36d8d91831d085174
Certificate serial: 019424456ED4469CDD79A07ADD68A6EBE4F5
Authority key identifier: 47:0B:C0:21:B6:57:A5:94:EE:58:D9:D3:6D:8D:91:83:1D:08:51:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RwvAIbZXpZTuWNnTbY2Rgx0IUXQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/d4f92b-2d13-4f2c-ad54-3becddfccae6/1/k6bkvh9iuXhGi6Ifo-aZZ61eWcY.roa
Signing time: Wed 01 Jan 2025 23:48:37 +0000
ROA not before: Wed 01 Jan 2025 23:48:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15543
IP address blocks: 193.26.11.0/24 maxlen: 24
193.138.64.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:6e:d4:46:9c:dd:79:a0:7a:dd:68:a6:eb:e4:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=470bc021b657a594ee58d9d36d8d91831d085174
Validity
Not Before: Jan 1 23:48:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=93a6e4be1f62b978468ba21fa3e69967ad5e59c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:de:61:b8:13:48:20:d4:03:9e:31:77:95:40:
42:f1:9e:27:70:e2:b9:a2:42:eb:05:eb:08:3c:f2:
95:46:0a:10:84:14:46:ce:3c:83:fc:05:3f:68:f6:
94:09:e5:ea:d5:7a:d8:cb:56:2e:64:98:6e:5f:00:
1d:9a:5e:d5:f8:b9:92:30:2e:cd:cb:75:13:73:1a:
f6:26:6b:28:60:98:e0:ba:56:51:33:db:d8:fe:03:
f2:7c:39:1f:6e:2d:e1:13:fb:99:b4:b2:6a:7d:dd:
2a:da:82:01:1a:8e:66:c4:ff:1c:10:41:fd:2f:37:
bb:58:3d:63:78:20:c8:46:5f:8a:d9:73:48:2f:06:
d9:e7:a0:99:79:f2:64:fb:35:27:d6:ab:a4:09:79:
16:91:53:3d:04:f5:bc:ce:02:2c:54:de:e3:4f:e7:
16:55:03:c0:fb:48:49:0b:f7:a5:61:37:19:2a:a7:
0a:84:5f:a3:9d:e2:a4:7b:16:93:0a:79:02:cb:88:
9e:5e:19:98:b1:78:71:7e:5c:51:b2:b7:5c:21:c8:
47:03:ef:30:f9:26:17:39:6e:60:54:df:9a:37:6d:
45:2d:24:11:d5:0c:7d:71:0e:92:39:60:1b:df:cc:
65:27:e6:5a:d5:ac:69:6e:2f:87:ca:d7:30:32:16:
4c:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:A6:E4:BE:1F:62:B9:78:46:8B:A2:1F:A3:E6:99:67:AD:5E:59:C6
X509v3 Authority Key Identifier:
keyid:47:0B:C0:21:B6:57:A5:94:EE:58:D9:D3:6D:8D:91:83:1D:08:51:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RwvAIbZXpZTuWNnTbY2Rgx0IUXQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/d4f92b-2d13-4f2c-ad54-3becddfccae6/1/k6bkvh9iuXhGi6Ifo-aZZ61eWcY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/d4f92b-2d13-4f2c-ad54-3becddfccae6/1/RwvAIbZXpZTuWNnTbY2Rgx0IUXQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.26.11.0/24
193.138.64.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:b4:cf:23:f4:f0:6f:90:e2:ae:80:4b:6c:bc:91:5d:31:52:
46:cc:1b:7b:24:73:36:dc:6e:cd:47:17:e7:9b:11:55:86:67:
0a:ff:de:84:94:35:03:44:11:cd:f7:cc:77:fb:4e:e1:b0:d4:
10:c4:bc:44:4a:06:29:39:9e:57:ab:aa:f8:0f:f7:70:f9:15:
64:aa:d3:c3:4c:b2:5f:10:71:11:52:3f:73:c0:92:57:55:00:
44:a3:f1:0c:3f:2d:a0:83:3f:79:88:0c:fb:ea:27:17:6f:9c:
a4:6f:62:48:2e:75:3e:16:b3:1c:23:38:7e:83:96:a5:54:2d:
ff:0e:3b:d1:76:b2:9a:87:0b:3b:d4:a9:48:1c:df:8c:ca:7d:
c6:fa:bb:bb:6e:8b:a1:81:2c:88:b5:a8:59:cf:ed:35:9a:d1:
ee:0b:e9:ca:5c:e2:ae:1e:fa:9a:a4:42:70:c8:7d:79:e8:c6:
77:55:40:af:41:c4:61:de:20:e5:60:3e:14:06:09:55:42:32:
0b:95:3e:17:e4:f3:1a:be:56:65:f3:86:62:eb:f9:f6:eb:1d:
fe:fc:3a:92:62:98:eb:05:6f:ff:11:e8:53:a7:ed:29:83:7b:
f6:67:da:8e:01:1c:e3:34:e5:4b:09:d3:26:d3:02:81:cc:17:
19:c5:61:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:25:55 2025 by rpki-client