Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/b87a0d-cc4c-4825-a7e4-e924ce5a75b3/1/GTYzwhiUq_J5h32d88k5dHS-pBI.roa
File: GTYzwhiUq_J5h32d88k5dHS-pBI.roa (raw, json)
Hash identifier: DRh7rLYfY68cEV1ylr9M82OojbgdOB+T4zEG9BafNT4=
Subject key identifier: 19:36:33:C2:18:94:AB:F2:79:87:7D:9D:F3:C9:39:74:74:BE:A4:12
Certificate issuer: /CN=a26fa7ee30ada35ab1fc04f340fedf647a9f8162
Certificate serial: 0194221F96B027F421F4115F35E46CE6ACE2
Authority key identifier: A2:6F:A7:EE:30:AD:A3:5A:B1:FC:04:F3:40:FE:DF:64:7A:9F:81:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/om-n7jCto1qx_ATzQP7fZHqfgWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/b87a0d-cc4c-4825-a7e4-e924ce5a75b3/1/GTYzwhiUq_J5h32d88k5dHS-pBI.roa
Signing time: Wed 01 Jan 2025 13:48:03 +0000
ROA not before: Wed 01 Jan 2025 13:48:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60111
IP address blocks: 193.27.44.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:96:b0:27:f4:21:f4:11:5f:35:e4:6c:e6:ac:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a26fa7ee30ada35ab1fc04f340fedf647a9f8162
Validity
Not Before: Jan 1 13:48:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=193633c21894abf279877d9df3c9397474bea412
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:d5:3a:be:46:c3:f5:53:10:d6:00:d1:76:92:
eb:47:fc:33:56:4e:d3:3d:6d:9f:a3:63:27:0b:7b:
ba:09:03:91:22:e1:6d:65:e6:d5:eb:8b:f0:0b:84:
87:bf:28:ba:9e:33:09:4d:bb:5f:50:1c:78:90:fb:
39:a9:4b:ae:53:bb:00:fc:58:9c:8c:54:7e:fd:97:
ac:eb:d2:64:dc:ab:2b:76:f6:07:bc:89:2e:4d:85:
50:3d:4b:d0:29:64:f2:21:97:82:b0:8e:2a:c8:a7:
3a:a4:da:eb:e4:d4:55:5d:5a:6d:6b:0b:54:60:66:
44:0b:a0:18:22:b2:ba:1c:d9:f9:25:36:04:3f:d1:
43:78:ef:99:c2:1c:06:f6:f6:c1:ef:6a:87:6a:09:
12:a2:ea:71:77:95:f9:92:4f:f3:bf:bb:ca:3c:f7:
16:0b:97:6f:2d:7a:32:38:05:25:65:4b:8f:84:0d:
0f:d2:e7:cf:eb:f7:bb:28:3f:e4:c4:be:9d:9a:ab:
38:2b:c9:8b:83:bc:b1:c2:ef:84:a3:44:e0:7d:ce:
29:3c:81:e2:80:9a:31:ce:72:fe:8a:de:77:8e:61:
63:65:5d:61:6b:a4:dc:31:41:9d:25:34:3b:70:d2:
cb:40:42:38:f7:de:df:32:eb:5a:30:62:32:62:cb:
48:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:36:33:C2:18:94:AB:F2:79:87:7D:9D:F3:C9:39:74:74:BE:A4:12
X509v3 Authority Key Identifier:
keyid:A2:6F:A7:EE:30:AD:A3:5A:B1:FC:04:F3:40:FE:DF:64:7A:9F:81:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/om-n7jCto1qx_ATzQP7fZHqfgWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b87a0d-cc4c-4825-a7e4-e924ce5a75b3/1/GTYzwhiUq_J5h32d88k5dHS-pBI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b87a0d-cc4c-4825-a7e4-e924ce5a75b3/1/om-n7jCto1qx_ATzQP7fZHqfgWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.27.44.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:d7:41:55:f6:90:dd:b3:a8:fa:51:34:d9:ef:11:3b:d0:d5:
8a:4b:44:09:a1:1a:de:ae:2d:33:74:7d:5c:54:66:72:6c:2b:
d6:35:84:b4:b0:3f:c8:12:22:5a:2e:41:1e:81:22:6c:57:0d:
9a:9f:90:e8:4a:47:b2:c0:e1:ea:a6:ff:96:07:71:09:95:d1:
8e:1e:4d:c8:2a:25:97:88:00:c4:a9:35:c8:a1:43:57:0e:81:
50:5a:2e:18:d9:eb:b0:30:49:a0:53:78:31:86:aa:70:39:b8:
13:97:9a:b5:86:dd:68:27:dc:a3:66:0c:5e:53:88:de:b5:e2:
bf:85:04:f7:79:34:94:11:cb:13:10:b7:56:70:2d:0e:20:44:
0e:c6:32:ea:49:d5:74:a4:b3:53:82:93:59:ca:90:04:c7:ff:
3a:97:e4:0b:1c:da:12:96:9e:f7:3d:97:98:26:ed:b4:ed:cf:
96:22:a3:84:26:3c:09:a5:b6:b8:ed:83:b4:ac:a7:b0:6d:a6:
16:39:01:c9:d1:f5:71:2e:7d:b7:5a:99:92:ac:c1:ef:b8:c4:
c2:d3:f3:09:f2:40:96:0b:c7:2b:45:d7:96:21:02:bf:9e:27:
7e:9e:59:46:91:81:d9:da:59:61:b4:e9:5c:ff:90:72:6a:2a:
db:a5:00:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:33:26 2025 by rpki-client