Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/f20071-22a1-461d-b6bf-4fd0e1b9c12f/1/0vfqJp8CAa8Wb2tMkMFK4NfB1iI.roa
File: 0vfqJp8CAa8Wb2tMkMFK4NfB1iI.roa (raw, json)
Hash identifier: Fq32OdyGPsi3kvuTM0d8dbHXJU1ZVYcji5eWBETIXTQ=
Subject key identifier: D2:F7:EA:26:9F:02:01:AF:16:6F:6B:4C:90:C1:4A:E0:D7:C1:D6:22
Certificate issuer: /CN=e00c7ac56b11e104abb167bb1ab3792b3fa7c3d3
Certificate serial: 019420D62F31F93A948E829A6BB2A49A1EC9
Authority key identifier: E0:0C:7A:C5:6B:11:E1:04:AB:B1:67:BB:1A:B3:79:2B:3F:A7:C3:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/f20071-22a1-461d-b6bf-4fd0e1b9c12f/1/0vfqJp8CAa8Wb2tMkMFK4NfB1iI.roa
Signing time: Wed 01 Jan 2025 07:48:15 +0000
ROA not before: Wed 01 Jan 2025 07:48:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39584
IP address blocks: 193.200.176.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:2f:31:f9:3a:94:8e:82:9a:6b:b2:a4:9a:1e:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e00c7ac56b11e104abb167bb1ab3792b3fa7c3d3
Validity
Not Before: Jan 1 07:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d2f7ea269f0201af166f6b4c90c14ae0d7c1d622
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:b7:8d:f4:04:42:ef:91:90:e8:3c:d9:81:b4:
4e:db:8c:5d:f4:d4:67:a2:b8:35:f0:54:49:37:75:
ae:68:ef:c9:d0:1c:19:51:55:29:83:6e:d5:69:22:
87:cd:0d:ee:30:c3:09:94:b7:81:e0:29:fe:62:9c:
f3:2c:56:66:e0:d6:b7:7a:f3:40:4f:d0:b6:f8:be:
e9:38:e5:79:db:0a:2d:37:e3:f1:fd:92:ec:8a:51:
39:e6:12:fd:64:7e:63:e4:57:f5:66:7e:c8:ba:e3:
73:29:94:4d:bc:a8:61:e8:1a:f7:64:66:3c:b2:bd:
92:d8:74:25:7b:1f:6b:ea:89:97:83:67:7c:c8:4a:
ce:af:a1:61:9e:2d:b3:d9:0d:ab:8e:06:fa:9c:1e:
ad:af:1c:ea:3a:de:d5:87:2b:71:29:67:1f:d9:2a:
f7:38:5f:2f:d1:54:47:ed:4c:2c:c7:db:c9:fb:69:
50:9f:79:70:95:f7:c5:2c:21:a0:cb:3c:59:f3:ca:
44:50:df:37:e0:27:5d:e6:66:a3:77:a5:dc:c6:b4:
67:0e:28:d9:3f:46:5b:7d:60:29:87:c1:f9:44:b4:
e9:43:8c:34:59:f4:b4:9d:03:63:b0:4a:65:95:b4:
2d:56:4b:74:e7:7a:08:9d:6f:f5:e2:e9:1e:3d:df:
13:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:F7:EA:26:9F:02:01:AF:16:6F:6B:4C:90:C1:4A:E0:D7:C1:D6:22
X509v3 Authority Key Identifier:
keyid:E0:0C:7A:C5:6B:11:E1:04:AB:B1:67:BB:1A:B3:79:2B:3F:A7:C3:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/f20071-22a1-461d-b6bf-4fd0e1b9c12f/1/0vfqJp8CAa8Wb2tMkMFK4NfB1iI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/f20071-22a1-461d-b6bf-4fd0e1b9c12f/1/4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.200.176.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:ad:73:0a:f4:72:e9:ae:cd:7f:f6:24:4e:ba:1a:00:3e:9d:
2c:fd:2f:df:ad:47:69:2e:c5:e9:cc:f3:f4:5f:ed:c9:d1:68:
37:63:28:45:62:b7:f4:ad:6e:4b:f4:3b:e1:9a:d0:a4:ec:d2:
72:cd:a3:21:b8:8d:fd:d3:a4:0b:9a:74:eb:1e:69:ad:2f:44:
ce:4c:b4:bd:6e:be:01:2e:ca:46:79:fc:0c:34:e5:b8:79:ae:
ad:a1:76:ff:3c:57:66:eb:10:6a:d1:4b:eb:17:02:75:3c:59:
c4:b2:b1:db:17:6f:72:0a:c4:d4:51:15:a3:9f:a5:38:eb:ed:
44:6e:b7:af:7d:86:0b:fb:ac:be:a3:8d:ef:c6:ea:90:b4:48:
e6:fa:05:f7:29:08:d3:0d:52:64:6c:35:91:6e:96:f3:e0:5b:
82:6b:60:9d:b9:e9:db:2e:88:74:7b:c6:2d:83:f4:9f:cf:92:
f6:82:e4:34:ef:b3:3a:b1:63:10:40:7e:e8:0e:6c:97:a7:21:
c9:c2:55:cf:b7:46:cc:75:32:f6:1f:2d:66:28:50:a4:01:27:
d1:be:f4:fc:09:a7:2a:18:f8:5c:8a:dc:e0:16:97:07:e9:86:
0a:d6:04:99:85:46:c3:b8:39:bb:e7:b9:4c:15:74:c3:dc:31:
55:a3:73:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 15:29:26 2025 by rpki-client