Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/3bd59a-2d0c-4093-913a-fe36ceda6316/1/N_mB8DyGTMyRNtWdzOHezqUOwxA.roa
File: N_mB8DyGTMyRNtWdzOHezqUOwxA.roa (raw, json)
Hash identifier: 0iM1AEZNlQrcAYLQC9NYhgIr9GaQK1NMxQpbyZpHQKI=
Subject key identifier: 37:F9:81:F0:3C:86:4C:CC:91:36:D5:9D:CC:E1:DE:CE:A5:0E:C3:10
Certificate issuer: /CN=48519673dd0a9cf57895520af37c2a8183dce168
Certificate serial: 01941F8C93D7516DB5A804D13D4D87746B00
Authority key identifier: 48:51:96:73:DD:0A:9C:F5:78:95:52:0A:F3:7C:2A:81:83:DC:E1:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SFGWc90KnPV4lVIK83wqgYPc4Wg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/3bd59a-2d0c-4093-913a-fe36ceda6316/1/N_mB8DyGTMyRNtWdzOHezqUOwxA.roa
Signing time: Wed 01 Jan 2025 01:48:13 +0000
ROA not before: Wed 01 Jan 2025 01:48:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50628
IP address blocks: 193.202.0.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:93:d7:51:6d:b5:a8:04:d1:3d:4d:87:74:6b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48519673dd0a9cf57895520af37c2a8183dce168
Validity
Not Before: Jan 1 01:48:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=37f981f03c864ccc9136d59dcce1decea50ec310
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d0:3b:64:47:3b:af:e4:37:a8:64:e4:17:28:
6e:28:4e:f4:db:63:dd:85:5d:eb:3c:f9:b9:8e:23:
a1:31:42:5a:d0:f7:94:1b:97:c8:62:0f:8b:d2:18:
50:b7:3a:90:60:ba:65:36:9a:86:8c:33:33:69:e7:
d2:13:da:e8:dd:c3:3c:61:f4:15:83:fd:19:07:d8:
bd:8b:3d:17:9f:68:02:3a:ac:69:3f:f9:56:bd:10:
83:0c:94:21:0a:50:ff:6a:d6:9a:23:41:19:9b:68:
c9:da:bf:05:f7:b3:08:c2:f8:27:d1:2c:98:c8:90:
4c:0a:02:05:e0:ea:4a:22:b7:58:bc:11:ad:24:09:
b4:b8:81:25:e1:6e:73:75:41:ca:9c:ef:8d:e8:1e:
15:83:d2:95:73:29:64:6b:de:b6:68:3e:cf:f3:8f:
ee:e5:d0:b5:26:72:31:71:4c:88:70:04:6d:2b:76:
b4:9a:1e:49:d3:d0:82:8d:80:6e:cd:99:b0:9b:74:
9d:32:c9:a3:07:28:05:3a:11:27:46:f3:db:9c:27:
e5:9a:27:1d:fd:f7:b5:3b:cb:13:5a:e1:5b:75:72:
9b:cc:dc:a0:ef:45:ff:cc:40:3b:ae:c4:d6:03:a0:
c1:d1:0d:83:bf:67:e1:d4:52:66:b6:2f:19:87:47:
eb:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:F9:81:F0:3C:86:4C:CC:91:36:D5:9D:CC:E1:DE:CE:A5:0E:C3:10
X509v3 Authority Key Identifier:
keyid:48:51:96:73:DD:0A:9C:F5:78:95:52:0A:F3:7C:2A:81:83:DC:E1:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SFGWc90KnPV4lVIK83wqgYPc4Wg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/3bd59a-2d0c-4093-913a-fe36ceda6316/1/N_mB8DyGTMyRNtWdzOHezqUOwxA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/3bd59a-2d0c-4093-913a-fe36ceda6316/1/SFGWc90KnPV4lVIK83wqgYPc4Wg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.202.0.0/24
Signature Algorithm: sha256WithRSAEncryption
96:e5:c8:66:85:8c:35:5f:0b:f8:fd:b1:b2:b6:7d:27:ba:75:
4b:52:2d:e7:4b:c9:ed:cf:fc:ca:1f:9b:10:ae:77:7a:f1:2a:
d4:12:8a:6f:94:0a:d8:24:07:fd:26:8b:b0:43:f6:a2:37:dd:
ae:0d:ce:a4:9a:01:24:72:80:7a:2d:ad:44:12:5c:e9:19:02:
9d:d7:f2:f3:ee:f8:94:8d:87:b0:ea:a7:03:3a:0d:e5:72:4f:
d4:c5:dc:64:34:a0:43:ab:be:c8:31:0b:56:65:28:23:ef:43:
fc:67:28:bd:ff:17:99:74:2c:14:1f:a8:3b:ac:54:46:70:70:
68:1a:51:7d:33:7f:28:32:11:96:61:a2:8a:69:96:4f:b9:a9:
84:b6:34:36:7f:b5:1f:fe:cb:5d:ef:c4:36:13:f0:3d:98:38:
1e:b0:d3:74:56:ec:3c:25:e8:1c:98:bd:7e:a8:85:f0:44:99:
d1:6e:cf:8c:1c:39:08:13:f4:b2:6c:18:5f:36:a5:df:f3:66:
41:ab:92:bb:89:f5:31:4e:54:49:a1:2a:b6:32:1f:be:0e:15:
f2:0d:22:d9:e5:47:15:33:48:ef:69:3e:a8:07:81:a4:e8:29:
2a:f5:47:9e:2f:53:18:71:57:77:63:1e:dd:e9:da:04:db:b2:
8c:b8:e2:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:01:32 2025 by rpki-client