Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/599740-b96e-49c4-b604-63f197fb1c96/1/8m2tBlzpxiqL6kK0VrkHkgcTou4.roa
File: 8m2tBlzpxiqL6kK0VrkHkgcTou4.roa (raw, json)
Hash identifier: 0P8p9ZGo9OL3ArRsj5WLpA2L7n8Ub+2jDkN4NpO9vF0=
Subject key identifier: F2:6D:AD:06:5C:E9:C6:2A:8B:EA:42:B4:56:B9:07:92:07:13:A2:EE
Certificate issuer: /CN=4a04bcc2fee1c3a2e04388260e10644b65e701f3
Certificate serial: 019425FDEA0455843DA1AF59CCD394FA0813
Authority key identifier: 4A:04:BC:C2:FE:E1:C3:A2:E0:43:88:26:0E:10:64:4B:65:E7:01:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SgS8wv7hw6LgQ4gmDhBkS2XnAfM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/599740-b96e-49c4-b604-63f197fb1c96/1/8m2tBlzpxiqL6kK0VrkHkgcTou4.roa
Signing time: Thu 02 Jan 2025 07:49:44 +0000
ROA not before: Thu 02 Jan 2025 07:49:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215682
IP address blocks: 193.143.78.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:ea:04:55:84:3d:a1:af:59:cc:d3:94:fa:08:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a04bcc2fee1c3a2e04388260e10644b65e701f3
Validity
Not Before: Jan 2 07:49:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f26dad065ce9c62a8bea42b456b907920713a2ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:9c:51:21:84:9e:1f:a8:ab:5a:de:a9:4a:0b:
40:55:68:db:62:75:e5:e4:f1:0d:11:5b:a1:67:6b:
67:29:02:cb:a2:a4:80:b6:40:97:e2:eb:8c:3d:28:
da:37:13:2c:9c:30:ec:5c:0b:4a:c0:d6:61:04:9a:
3d:b3:04:4d:02:68:0c:f1:24:c4:42:88:08:f6:66:
41:b7:e9:7e:ef:18:f1:43:dc:5a:70:0a:53:0b:2e:
56:ca:2b:76:67:ce:e1:56:5d:d4:bf:e0:2a:d8:89:
84:85:1b:4e:9a:30:aa:9a:71:de:5d:d0:83:4e:44:
99:23:5e:61:6e:3b:91:e6:a8:d7:4e:cc:a2:42:67:
33:2c:8a:2f:7e:74:33:06:3f:9d:05:aa:21:04:9e:
a7:35:03:d4:21:37:4f:94:1c:e7:76:67:af:bd:63:
a6:96:5a:ca:0c:6d:32:f5:35:c9:f5:fc:2e:3a:c1:
50:e1:62:b8:94:0d:e8:f6:83:ff:dc:84:1d:06:4c:
ad:fa:c5:d7:58:db:f7:55:75:d6:d6:da:2d:57:51:
82:86:45:3b:35:95:00:d3:5a:d2:95:6b:c7:74:3d:
53:0a:a1:9c:10:99:62:e1:7e:39:d2:d3:63:f2:52:
f1:f9:ec:aa:ea:4f:2d:3d:28:b4:0b:0f:fa:e7:46:
d6:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:6D:AD:06:5C:E9:C6:2A:8B:EA:42:B4:56:B9:07:92:07:13:A2:EE
X509v3 Authority Key Identifier:
keyid:4A:04:BC:C2:FE:E1:C3:A2:E0:43:88:26:0E:10:64:4B:65:E7:01:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SgS8wv7hw6LgQ4gmDhBkS2XnAfM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/599740-b96e-49c4-b604-63f197fb1c96/1/8m2tBlzpxiqL6kK0VrkHkgcTou4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/599740-b96e-49c4-b604-63f197fb1c96/1/SgS8wv7hw6LgQ4gmDhBkS2XnAfM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.143.78.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:ee:53:e0:04:85:c5:3a:65:16:db:88:26:c0:58:e6:ae:27:
c6:fe:1c:73:39:10:4a:6c:23:1c:93:17:bb:66:c2:7c:d9:60:
16:0e:ca:aa:5b:bf:99:a1:ab:ee:46:38:b6:0e:99:6c:d7:0e:
f2:05:e0:aa:41:04:66:8e:91:f5:f9:8f:67:90:a6:88:d7:eb:
f4:58:d3:33:0c:ec:48:c9:85:70:86:f0:f9:34:db:80:32:27:
06:06:3a:47:fd:49:6d:e3:c1:3d:a5:28:08:5d:ea:52:46:ff:
76:21:61:7e:b2:b5:b3:4a:0f:3d:2c:9d:8a:c8:7e:d6:f8:c9:
7a:96:91:32:ba:36:9a:d5:3d:9d:82:d1:02:bc:b3:1b:46:95:
f9:99:ae:d6:51:c9:e7:9d:d2:cb:78:5b:a3:6e:01:15:45:72:
f7:74:f4:83:69:c7:4e:c3:3c:26:95:0f:fe:a2:ec:39:16:1b:
cd:ac:4b:6f:c1:05:af:47:02:4c:c3:b9:c8:f9:f9:3c:26:fd:
cb:d1:72:2b:10:2e:a4:02:e2:c7:b1:82:7b:1e:0c:09:f9:33:
74:10:dc:1f:a4:2e:f4:ef:a0:a0:b0:39:86:86:50:22:a8:b5:
04:fa:6e:30:3a:91:36:70:3f:ec:3b:71:c1:bd:d1:e8:c0:65:
2d:66:0f:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:51:11 2025 by rpki-client