Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/9e9122-bbff-48d9-98c6-0a4286f3cfbe/1/WaA_p7CJV9H2YLIQ0QAf4_sFlE4.roa
File: WaA_p7CJV9H2YLIQ0QAf4_sFlE4.roa (raw, json)
Hash identifier: rsElgPuN1hMRgzTlUMD4yArGmUHiVOsDJcjvK2IopSI=
Subject key identifier: 59:A0:3F:A7:B0:89:57:D1:F6:60:B2:10:D1:00:1F:E3:FB:05:94:4E
Certificate issuer: /CN=b5f57e49ebf098bc53e8db388881c92369d9bf8c
Certificate serial: 0194266B556640B7EF181781AE06A2A3ADD7
Authority key identifier: B5:F5:7E:49:EB:F0:98:BC:53:E8:DB:38:88:81:C9:23:69:D9:BF:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tfV-SevwmLxT6Ns4iIHJI2nZv4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/9e9122-bbff-48d9-98c6-0a4286f3cfbe/1/WaA_p7CJV9H2YLIQ0QAf4_sFlE4.roa
Signing time: Thu 02 Jan 2025 09:49:15 +0000
ROA not before: Thu 02 Jan 2025 09:49:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3342
IP address blocks: 193.163.36.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:55:66:40:b7:ef:18:17:81:ae:06:a2:a3:ad:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5f57e49ebf098bc53e8db388881c92369d9bf8c
Validity
Not Before: Jan 2 09:49:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=59a03fa7b08957d1f660b210d1001fe3fb05944e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:65:8c:82:3f:bb:ea:fb:57:7b:4c:f1:7a:34:
ca:ac:f2:33:be:79:50:a4:a0:7c:66:5b:ea:5f:ba:
63:62:18:54:45:1a:48:36:c5:c7:cd:4a:5c:46:fd:
f0:89:ae:03:97:4a:02:32:13:77:a7:0e:68:ca:12:
23:c7:48:e6:b6:4d:de:55:22:0d:7c:22:85:01:ee:
34:00:50:34:58:f7:37:db:66:4d:d2:cb:de:60:86:
c0:a5:3f:35:af:7d:0a:64:c9:84:ce:d6:ea:30:69:
85:fd:8b:7e:e2:e1:42:60:33:2e:e4:8c:83:eb:1b:
20:4d:14:78:d3:97:cb:00:7f:2e:95:b8:5d:f6:89:
a2:0e:df:51:a6:51:58:7a:42:ac:2e:33:e9:80:a0:
44:ad:ee:47:7d:a9:78:77:90:42:5f:02:1b:1e:06:
a4:a5:51:ae:87:bd:16:2a:d9:e5:22:04:e4:48:72:
50:a6:b8:f5:10:43:52:80:e3:c7:ce:5e:2f:9f:c2:
8a:3a:5b:e1:4e:0e:57:ba:b7:b8:2c:13:7c:3d:d5:
e6:67:dd:28:29:94:12:62:95:6b:62:79:56:3f:c0:
f6:d6:af:5e:ca:3a:1e:c8:aa:16:4c:a0:98:85:30:
a7:e4:17:ff:a3:18:fb:85:88:db:17:a3:a4:9d:ec:
0d:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:A0:3F:A7:B0:89:57:D1:F6:60:B2:10:D1:00:1F:E3:FB:05:94:4E
X509v3 Authority Key Identifier:
keyid:B5:F5:7E:49:EB:F0:98:BC:53:E8:DB:38:88:81:C9:23:69:D9:BF:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tfV-SevwmLxT6Ns4iIHJI2nZv4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/9e9122-bbff-48d9-98c6-0a4286f3cfbe/1/WaA_p7CJV9H2YLIQ0QAf4_sFlE4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/9e9122-bbff-48d9-98c6-0a4286f3cfbe/1/tfV-SevwmLxT6Ns4iIHJI2nZv4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.163.36.0/22
Signature Algorithm: sha256WithRSAEncryption
58:7f:4a:9d:01:bc:4e:60:7e:5a:4f:1b:e5:1c:3a:73:e8:36:
18:9c:cb:2d:0e:d7:f6:2e:bb:04:01:ad:94:ba:4c:45:0d:1c:
f3:08:ae:18:31:7e:64:b6:a1:67:a1:1b:af:f8:2a:86:36:e8:
01:6c:7c:f0:76:86:09:d3:41:4e:19:21:78:bd:39:aa:8f:e6:
ff:9c:8d:57:b9:fc:a6:34:20:63:eb:2e:a7:20:c2:4e:f1:d5:
67:2c:0c:89:6a:3f:8e:a3:48:46:37:6a:cc:2a:f6:58:d6:c9:
37:e3:c4:04:3a:c5:89:85:e5:27:9d:c3:07:08:88:99:73:c8:
c5:53:b5:5a:5a:7e:c5:f2:11:c5:e6:7d:01:78:53:7f:4f:9b:
2b:e5:c6:36:1e:27:52:0d:a5:f4:47:8f:c9:85:b5:f3:39:5b:
bf:cd:bb:ce:73:aa:0e:22:39:f1:fd:fb:e5:60:dc:9c:e9:cc:
22:d1:31:b5:64:7d:f0:e5:ad:cd:d6:be:80:15:54:60:60:6f:
41:9c:03:55:15:d7:34:2f:e7:eb:64:fe:03:90:22:5f:37:85:
7e:b5:47:22:01:e4:a4:c2:f2:d3:89:4d:e8:a0:41:95:29:56:
08:ab:d2:77:63:94:44:8f:79:0f:9e:98:9f:58:8a:7f:4e:87:
8a:10:09:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:45:26 2025 by rpki-client