Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/30523b-8b3c-46cb-abbc-e101477efb8a/1/cZFUFzEKgC-gv5r0QzjC3ajp5aE.roa
File: cZFUFzEKgC-gv5r0QzjC3ajp5aE.roa (raw, json)
Hash identifier: J7XkWB53jAfy4bD9ukAZFnRAiXvLkNsGXjIsW/vOCx4=
Subject key identifier: 71:91:54:17:31:0A:80:2F:A0:BF:9A:F4:43:38:C2:DD:A8:E9:E5:A1
Certificate issuer: /CN=e3d5159882e77a67f797f8f8b996b62c4ebabc20
Certificate serial: 01942369DF6B1B1792AA80DA3EF1C9D7E125
Authority key identifier: E3:D5:15:98:82:E7:7A:67:F7:97:F8:F8:B9:96:B6:2C:4E:BA:BC:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49UVmILnemf3l_j4uZa2LE66vCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/30523b-8b3c-46cb-abbc-e101477efb8a/1/cZFUFzEKgC-gv5r0QzjC3ajp5aE.roa
Signing time: Wed 01 Jan 2025 19:48:48 +0000
ROA not before: Wed 01 Jan 2025 19:48:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39306
IP address blocks: 193.37.138.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:df:6b:1b:17:92:aa:80:da:3e:f1:c9:d7:e1:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3d5159882e77a67f797f8f8b996b62c4ebabc20
Validity
Not Before: Jan 1 19:48:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=71915417310a802fa0bf9af44338c2dda8e9e5a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:3a:c3:e7:5d:40:8a:b7:11:db:eb:8d:1f:a1:
bb:f3:9f:21:a9:30:58:41:bb:dc:d5:63:9b:dd:02:
f2:4d:33:a9:f8:ef:c4:e9:df:4f:13:44:cc:83:dc:
28:16:4c:5a:7e:17:2b:f4:9d:54:cb:98:ad:24:e3:
61:dc:c7:c2:5a:f6:9a:87:c0:0d:0f:05:44:d1:36:
45:ca:dc:96:0a:bf:e9:56:b0:c7:48:2e:e3:6d:05:
2c:a5:ea:60:a5:b5:3c:ce:d3:2f:72:ad:b9:4b:dc:
4f:83:b0:01:5e:b3:18:69:de:77:7a:6f:51:08:ab:
b4:e1:83:f4:e6:5b:0a:bd:b3:4c:1a:b2:fb:cc:be:
5a:ef:fa:e8:1b:1b:9a:d9:94:60:e8:4f:d5:67:b7:
0d:0c:a2:d1:4b:c6:26:08:24:8f:f9:dc:55:74:f4:
2f:2b:ba:9e:0f:9c:39:37:06:ac:62:54:5a:2a:f5:
78:a8:b5:48:a4:02:11:ab:36:da:a5:cb:10:af:ad:
a3:eb:dd:d9:aa:8b:a3:ff:ce:97:36:1d:59:ac:cf:
75:ff:a7:0d:17:24:b0:b6:27:7a:93:2e:d9:56:ea:
e5:9f:c4:61:59:a5:c7:76:90:a3:b5:ea:2e:b6:e6:
4c:5b:d1:4e:dd:da:a5:77:d2:c8:0e:5d:a0:c6:84:
43:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:91:54:17:31:0A:80:2F:A0:BF:9A:F4:43:38:C2:DD:A8:E9:E5:A1
X509v3 Authority Key Identifier:
keyid:E3:D5:15:98:82:E7:7A:67:F7:97:F8:F8:B9:96:B6:2C:4E:BA:BC:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49UVmILnemf3l_j4uZa2LE66vCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/30523b-8b3c-46cb-abbc-e101477efb8a/1/cZFUFzEKgC-gv5r0QzjC3ajp5aE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/30523b-8b3c-46cb-abbc-e101477efb8a/1/49UVmILnemf3l_j4uZa2LE66vCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.37.138.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:4c:d1:1e:4d:97:a6:46:50:b8:76:7a:0f:ec:c5:97:df:62:
f0:12:3a:68:ea:4a:0c:a5:bb:f6:ae:e8:7f:23:72:cd:62:ed:
01:7b:e9:e6:fb:53:95:e0:06:b1:04:37:2a:86:7e:1f:22:2e:
44:2a:1f:b4:20:95:a9:8f:97:f7:5b:1e:8b:83:63:87:df:b6:
94:38:2b:c2:b7:02:0b:db:53:71:68:2e:1e:7d:f0:25:92:53:
9e:87:e1:f1:48:60:77:21:69:60:46:e2:c5:e8:2d:42:17:a8:
21:72:0d:ba:49:c2:bc:2c:e8:89:44:72:53:d4:25:88:73:17:
16:5e:e6:8e:7c:f4:e9:2d:b4:4e:81:4b:7e:42:97:a8:c7:90:
d4:7c:41:8d:e7:ba:f2:1c:c0:d8:ee:86:39:00:ac:00:f2:e3:
d8:8f:1a:50:b4:22:2a:50:36:d4:76:ce:77:03:79:d2:87:54:
c2:72:d4:92:42:f3:a5:cf:db:29:d7:df:65:4b:e0:21:29:72:
9c:14:3a:2f:4c:9b:96:a3:d0:82:03:1f:50:9b:90:71:25:da:
f4:0c:22:e7:67:e4:7a:fe:b6:ac:35:e7:cd:87:0d:61:1a:84:
9c:51:b0:e2:6f:5d:35:3f:a1:0f:63:c6:82:88:ef:12:cd:34:
bb:54:b1:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:50:41 2025 by rpki-client