Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/dlTZMeVOmH-sGjLKfnpWqcWWk2s.roa
File: dlTZMeVOmH-sGjLKfnpWqcWWk2s.roa (raw, json)
Hash identifier: DB9sfDl87OFpyZ/nDL1JNomcxUe0WBEVSpKL3sB9cVU=
Subject key identifier: 76:54:D9:31:E5:4E:98:7F:AC:1A:32:CA:7E:7A:56:A9:C5:96:93:6B
Certificate issuer: /CN=e801f23ce821c264d67727536ec183537594c5f2
Certificate serial: 0194228D74CF77BEBA4634DDB7146E32B0EF
Authority key identifier: E8:01:F2:3C:E8:21:C2:64:D6:77:27:53:6E:C1:83:53:75:94:C5:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6AHyPOghwmTWdydTbsGDU3WUxfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/dlTZMeVOmH-sGjLKfnpWqcWWk2s.roa
Signing time: Wed 01 Jan 2025 15:48:03 +0000
ROA not before: Wed 01 Jan 2025 15:48:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8769
IP address blocks: 193.10.144.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:74:cf:77:be:ba:46:34:dd:b7:14:6e:32:b0:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e801f23ce821c264d67727536ec183537594c5f2
Validity
Not Before: Jan 1 15:48:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7654d931e54e987fac1a32ca7e7a56a9c596936b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:63:9c:df:2e:c0:08:27:1d:1c:21:6d:17:08:
15:b3:89:3c:0d:67:70:89:f1:93:62:8b:f8:7b:21:
0b:ab:6c:50:08:7c:d9:47:fb:7b:dc:ab:06:b8:89:
b0:09:2c:1e:26:a3:7e:66:21:8f:da:96:ba:de:ad:
70:39:93:a2:de:db:1b:e1:0a:64:5a:39:36:13:0e:
43:b2:cf:53:3c:4e:29:69:2f:bd:d7:08:ac:df:8e:
2e:dc:a1:29:16:3f:fa:63:b2:aa:d7:39:b3:dd:17:
12:1a:80:c5:14:a5:a7:e3:0f:83:42:f3:da:bf:a0:
0d:16:bd:83:4c:73:59:b5:45:18:f1:06:4e:e7:e7:
b8:92:95:ad:1e:08:29:52:9f:4c:7c:5e:1a:f8:9a:
a5:8b:d8:48:81:bc:e0:b1:75:16:ea:cc:de:f4:01:
bc:8f:aa:a1:5d:26:75:26:3d:95:48:13:04:03:70:
05:2e:8c:63:a2:78:41:30:f8:fd:be:50:72:cf:a4:
47:6a:c6:33:f2:69:98:3f:f5:5a:2b:23:71:8b:e4:
89:1d:4b:3e:db:14:e0:86:fc:7c:8e:19:ad:b1:89:
97:70:c1:f2:e0:b4:96:3a:db:dc:9b:c1:12:a5:fb:
cc:40:5f:bb:54:83:da:02:1b:d0:d4:e6:fa:ea:c7:
61:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:54:D9:31:E5:4E:98:7F:AC:1A:32:CA:7E:7A:56:A9:C5:96:93:6B
X509v3 Authority Key Identifier:
keyid:E8:01:F2:3C:E8:21:C2:64:D6:77:27:53:6E:C1:83:53:75:94:C5:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6AHyPOghwmTWdydTbsGDU3WUxfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/dlTZMeVOmH-sGjLKfnpWqcWWk2s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/6AHyPOghwmTWdydTbsGDU3WUxfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.10.144.0/24
Signature Algorithm: sha256WithRSAEncryption
95:4d:29:a5:24:70:a9:a8:ca:31:72:83:a6:77:41:05:0d:a1:
cf:27:ee:25:a6:08:ec:69:33:e7:d1:d3:97:c0:99:14:25:6d:
0b:db:ff:46:e0:55:4e:fa:9b:fa:af:45:05:54:1f:b2:80:03:
b1:8b:c2:84:3e:b6:68:9b:b7:01:57:fc:f9:08:68:d6:e0:31:
a6:03:93:31:f4:a9:f0:96:95:01:9d:aa:1f:6f:9c:de:e1:63:
6e:12:ac:e5:e2:63:d7:e7:4c:05:f9:ae:29:d7:9f:79:2d:c5:
59:1b:20:c2:de:ae:28:4d:37:01:1c:aa:e7:c4:e5:fb:f2:0a:
8e:a1:93:67:51:3a:32:b1:48:64:da:58:ed:32:eb:7e:22:54:
e9:2f:20:8f:b5:13:80:b5:58:62:37:c5:9c:5c:9a:a5:ac:89:
5f:b9:4f:5a:0d:99:d1:f5:03:f2:87:a7:3f:99:8d:b0:b9:3f:
aa:3c:72:3d:81:af:4d:67:3b:6e:e5:50:f6:b4:a7:3f:40:d6:
a9:c1:cd:0d:d3:b5:1d:bc:a6:bd:8b:a7:85:34:18:15:fb:be:
31:a4:a2:4a:4d:af:e6:cb:2f:09:85:f2:52:78:3b:4e:f2:58:
7d:c5:d4:9c:f0:1d:aa:cb:82:cb:7f:31:21:ce:26:1e:90:f1:
8a:af:cd:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:45:05 2025 by rpki-client