Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/d012f0-6b89-40dc-bd56-b354c039375a/1/sEgqJVQsrJEI5D6KmALm-jn8fK4.roa
File: sEgqJVQsrJEI5D6KmALm-jn8fK4.roa (raw, json)
Hash identifier: wkSem0GjNV7CDayzITuhm9bdRNzF4MpUUCFS49t70yw=
Subject key identifier: B0:48:2A:25:54:2C:AC:91:08:E4:3E:8A:98:02:E6:FA:39:FC:7C:AE
Certificate issuer: /CN=403d63b32e71c1c169243efdb6d56ed5ca6b824e
Certificate serial: 019426D9A34D40ACF5C2DF6474EF293DDEA8
Authority key identifier: 40:3D:63:B3:2E:71:C1:C1:69:24:3E:FD:B6:D5:6E:D5:CA:6B:82:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QD1jsy5xwcFpJD79ttVu1cprgk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/d012f0-6b89-40dc-bd56-b354c039375a/1/sEgqJVQsrJEI5D6KmALm-jn8fK4.roa
Signing time: Thu 02 Jan 2025 11:49:44 +0000
ROA not before: Thu 02 Jan 2025 11:49:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15576
IP address blocks: 193.47.190.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:a3:4d:40:ac:f5:c2:df:64:74:ef:29:3d:de:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=403d63b32e71c1c169243efdb6d56ed5ca6b824e
Validity
Not Before: Jan 2 11:49:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b0482a25542cac9108e43e8a9802e6fa39fc7cae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:26:6c:93:17:f7:b1:45:d1:d8:67:9d:26:0c:
c3:c9:9d:3e:5e:80:b8:4e:39:53:ec:88:eb:16:5d:
4b:b9:47:46:2a:68:48:89:e3:aa:64:26:0d:6f:f1:
28:46:eb:14:d1:88:71:e0:e5:e7:e8:31:87:85:dc:
17:65:57:d9:32:be:3a:e1:2a:3f:8b:5e:c2:e9:54:
b8:42:d2:10:f4:6a:68:4e:57:4c:37:13:2a:97:7a:
01:a5:8c:e3:ae:a2:74:78:26:eb:5a:51:cc:69:61:
80:5a:8d:6c:a7:0f:b3:b1:e9:ac:ac:a2:c9:76:7a:
45:d2:8c:28:23:39:22:05:39:b0:26:c8:18:a6:98:
06:ca:c7:30:7c:63:01:94:cc:b7:aa:1c:d7:58:77:
3b:47:80:f7:a4:fe:73:14:06:a2:3c:ea:0d:04:7e:
e8:a9:26:d6:f9:b7:81:a8:08:a9:1b:86:a9:d3:2c:
93:9d:1c:a0:55:b1:8b:8c:36:45:91:14:63:d3:c6:
ed:da:8b:87:12:8b:42:dc:c9:ae:2c:e9:c4:53:ff:
01:ec:66:48:03:ca:a5:36:d6:f2:5f:99:0f:75:06:
e3:0a:1f:56:28:f3:66:3a:01:d3:47:63:cf:5b:c7:
45:80:3a:f0:f3:ca:81:dd:93:5c:63:a0:2f:51:f8:
7b:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:48:2A:25:54:2C:AC:91:08:E4:3E:8A:98:02:E6:FA:39:FC:7C:AE
X509v3 Authority Key Identifier:
keyid:40:3D:63:B3:2E:71:C1:C1:69:24:3E:FD:B6:D5:6E:D5:CA:6B:82:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QD1jsy5xwcFpJD79ttVu1cprgk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d012f0-6b89-40dc-bd56-b354c039375a/1/sEgqJVQsrJEI5D6KmALm-jn8fK4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d012f0-6b89-40dc-bd56-b354c039375a/1/QD1jsy5xwcFpJD79ttVu1cprgk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.47.190.0/24
Signature Algorithm: sha256WithRSAEncryption
43:d2:ab:30:43:78:a0:ea:98:db:c6:e1:0d:ea:0c:35:6f:f6:
9b:c1:96:41:d2:46:c8:ca:65:59:e9:ab:87:e5:7b:60:0d:ed:
36:eb:56:d2:1a:b9:ae:fc:5f:6f:00:81:79:30:07:6b:dc:46:
f3:dd:80:63:44:84:1d:99:63:64:cf:8c:d9:0a:2f:3a:1a:32:
35:ab:89:8b:73:cc:6c:00:50:50:f1:b0:1f:99:72:03:59:b1:
db:fc:0c:0b:28:c7:73:97:47:16:ad:58:ec:83:f9:72:ec:0b:
53:96:e7:5c:76:b6:e7:bd:e0:83:f8:35:87:a0:39:5f:f0:61:
9f:12:86:1f:1b:f2:d4:16:63:7e:12:d1:d9:de:9e:f3:a8:98:
ce:35:68:e9:70:bb:2b:02:9d:8c:06:e6:bf:5f:f4:ed:7f:cd:
9a:36:39:a0:6d:93:42:47:37:5a:05:0d:27:5c:cd:00:b8:0d:
cd:c6:6c:f9:15:1d:e5:e2:6c:f5:dc:1d:36:91:06:e8:8e:e1:
e3:d9:3c:fd:1f:d7:3e:0d:7f:63:99:4e:f8:75:37:28:2b:9a:
7e:a3:32:a0:76:c1:26:4f:ff:33:01:96:b0:d2:82:20:c6:71:
1d:46:dc:c4:74:70:20:94:d2:c1:bf:14:a4:9e:80:76:41:f9:
93:7c:eb:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:30:55 2025 by rpki-client