Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/KSQbuvMpaNtmYtn-yiQgu6gs4Xg.roa
File: KSQbuvMpaNtmYtn-yiQgu6gs4Xg.roa (raw, json)
Hash identifier: rY+o5Ow6fjFdTk2as4zdZu/IZVXbQNeVsHdG3L6c1Us=
Subject key identifier: 29:24:1B:BA:F3:29:68:DB:66:62:D9:FE:CA:24:20:BB:A8:2C:E1:78
Certificate issuer: /CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Certificate serial: 019427B5BFE761D3A6517FA90E140DF9FBB8
Authority key identifier: 00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/KSQbuvMpaNtmYtn-yiQgu6gs4Xg.roa
Signing time: Thu 02 Jan 2025 15:50:10 +0000
ROA not before: Thu 02 Jan 2025 15:50:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211120
IP address blocks: 193.3.44.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:bf:e7:61:d3:a6:51:7f:a9:0e:14:0d:f9:fb:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Validity
Not Before: Jan 2 15:50:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=29241bbaf32968db6662d9feca2420bba82ce178
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:c7:13:0a:38:77:08:7a:34:65:5e:62:78:ac:
7c:ef:80:f9:48:f1:cd:50:e8:75:91:45:46:63:78:
cd:43:0b:c1:ad:9a:67:e9:62:de:e8:c8:e5:62:31:
09:de:a5:3c:a9:0e:b5:c2:78:ef:02:30:d3:25:db:
d0:26:28:6e:44:2f:c4:c7:46:47:29:79:ca:ca:e2:
d4:b5:8f:9d:de:e2:cb:99:84:dc:5e:17:d2:3c:ec:
f9:ce:85:03:46:db:a7:44:32:c2:ca:73:38:50:1b:
8d:9f:54:21:08:6e:7e:c4:7b:90:63:91:02:5e:c3:
7e:a6:2c:75:da:15:7b:07:de:ec:55:c3:cb:df:f0:
c9:08:ee:1e:69:8f:4c:41:40:e0:c3:e4:37:6b:8f:
60:cc:7f:e2:6d:ed:61:89:c5:a5:48:34:c5:7f:b6:
dd:64:2c:6b:f1:14:af:08:61:b4:f7:ac:66:0c:b2:
5d:26:55:03:2c:5e:d7:ef:04:2b:cf:c1:cc:07:7c:
61:e2:16:e5:41:6d:2a:3c:cc:18:11:b3:45:2b:21:
d0:26:c2:14:59:f2:0f:48:d0:4a:d4:6e:27:a1:e0:
14:f0:d3:2b:d1:91:95:6a:71:43:9d:5f:39:43:d8:
db:92:1a:15:9e:1e:ad:68:b5:f6:e3:de:6b:0f:ff:
32:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:24:1B:BA:F3:29:68:DB:66:62:D9:FE:CA:24:20:BB:A8:2C:E1:78
X509v3 Authority Key Identifier:
keyid:00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/KSQbuvMpaNtmYtn-yiQgu6gs4Xg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.3.44.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:4e:df:84:b4:2d:da:65:09:f5:2b:9c:6b:68:5a:ee:5f:c2:
33:e2:af:3c:01:4b:0d:c4:e5:64:6a:a1:57:a3:37:fd:dd:44:
8a:06:ac:f8:6b:4f:73:6a:3c:ca:44:28:1d:5d:3a:7e:83:fe:
50:2d:db:62:e4:52:fc:60:fa:d4:d3:ff:00:b8:b7:f9:31:41:
da:dd:0b:4a:70:2c:e9:72:d6:1c:a9:10:5b:82:45:58:54:4d:
07:fe:23:25:3e:18:bd:2c:4c:a3:36:49:89:1d:03:e7:e1:c5:
ae:2b:1d:dc:ba:f5:85:8c:d5:a5:be:d4:68:f8:51:60:10:fb:
23:9b:a0:91:2e:66:61:cb:ba:bc:b6:d7:49:c9:49:b2:6c:95:
dd:be:77:1b:20:ae:09:12:9c:78:df:85:0c:f0:d6:13:b3:8e:
90:e9:ba:7e:67:91:4d:6c:a2:57:31:b1:21:80:c0:aa:d4:32:
c7:5e:56:f9:0b:7f:ba:14:9c:0e:8b:c8:07:7a:f0:de:f5:44:
c7:80:cf:40:7e:7e:98:a0:c9:aa:9d:14:80:70:ff:ef:d2:ef:
4e:b7:3e:f7:87:a5:99:74:a8:1f:ee:7b:a0:be:e7:93:73:a1:
c3:60:8a:de:fb:dd:61:99:f4:72:08:06:2f:07:ec:32:07:27:
79:59:16:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:19:52 2025 by rpki-client