Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/504bfb-2941-447f-9c5e-c0f9f3d66872/1/x61cbfT7RvhEfVSD3Yzd6Sqt3eg.roa
File: x61cbfT7RvhEfVSD3Yzd6Sqt3eg.roa (raw, json)
Hash identifier: nkg8d2JuPVPfqk0kcc5OXRrb5PIvthJQYUpxPMl5/LU=
Subject key identifier: C7:AD:5C:6D:F4:FB:46:F8:44:7D:54:83:DD:8C:DD:E9:2A:AD:DD:E8
Certificate issuer: /CN=98b11161b9ed4bb08a0026d5cfd1fec9687c19c3
Certificate serial: 0194266BCEDB1C8680D907F265707E287FDB
Authority key identifier: 98:B1:11:61:B9:ED:4B:B0:8A:00:26:D5:CF:D1:FE:C9:68:7C:19:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mLERYbntS7CKACbVz9H-yWh8GcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/504bfb-2941-447f-9c5e-c0f9f3d66872/1/x61cbfT7RvhEfVSD3Yzd6Sqt3eg.roa
Signing time: Thu 02 Jan 2025 09:49:46 +0000
ROA not before: Thu 02 Jan 2025 09:49:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208264
IP address blocks: 193.8.95.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:ce:db:1c:86:80:d9:07:f2:65:70:7e:28:7f:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98b11161b9ed4bb08a0026d5cfd1fec9687c19c3
Validity
Not Before: Jan 2 09:49:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c7ad5c6df4fb46f8447d5483dd8cdde92aaddde8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b4:f2:83:21:ba:88:25:f1:0c:ac:f0:17:92:
dc:29:3a:a4:4c:63:1f:8e:d5:eb:a7:f1:bf:f1:cc:
3a:f3:a3:2e:82:7f:bd:cb:a2:b7:d8:b9:0a:42:cd:
6d:46:e7:58:9d:32:68:a7:b2:f6:97:ce:3a:de:2e:
4c:97:f6:d3:41:53:d4:6b:54:2c:38:d8:86:59:f9:
91:a9:36:99:20:dd:22:21:fb:10:8f:67:66:bd:07:
dd:5a:c3:74:f4:a1:af:e2:a3:2b:34:4b:97:82:f3:
3e:4f:b5:fb:93:6e:84:51:d4:ae:e0:fc:7f:9e:49:
08:f0:46:37:eb:f6:e4:16:42:12:80:7b:18:8a:4a:
73:11:12:e4:1d:15:9c:83:b5:07:b7:b6:d6:fc:65:
48:77:79:9a:a2:29:23:aa:ac:4d:e1:fb:23:8a:af:
a0:d7:b3:79:9b:25:85:32:d6:97:37:af:17:95:b7:
c6:ca:c6:70:00:0b:44:e4:ea:a4:1c:af:d5:c5:5d:
c4:b1:24:38:90:21:74:a1:b3:81:08:31:ef:4e:62:
5e:d8:80:5e:db:2b:0f:1a:fc:20:5d:85:83:04:17:
d1:2e:4c:8e:62:4c:41:cc:10:ed:ef:06:e6:f4:2e:
4c:dd:69:57:2f:8c:c1:85:23:bf:8a:9b:b4:02:b9:
d6:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:AD:5C:6D:F4:FB:46:F8:44:7D:54:83:DD:8C:DD:E9:2A:AD:DD:E8
X509v3 Authority Key Identifier:
keyid:98:B1:11:61:B9:ED:4B:B0:8A:00:26:D5:CF:D1:FE:C9:68:7C:19:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mLERYbntS7CKACbVz9H-yWh8GcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/504bfb-2941-447f-9c5e-c0f9f3d66872/1/x61cbfT7RvhEfVSD3Yzd6Sqt3eg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/504bfb-2941-447f-9c5e-c0f9f3d66872/1/mLERYbntS7CKACbVz9H-yWh8GcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.8.95.0/24
Signature Algorithm: sha256WithRSAEncryption
cb:4c:0e:d9:46:1e:87:65:45:80:be:f0:58:cb:47:dd:5e:38:
10:d5:44:60:34:9a:5c:b5:ac:6c:24:f5:e5:20:2b:5d:3f:74:
7c:e6:39:36:8d:2f:c6:bd:29:42:28:1a:5d:4d:b5:91:03:f5:
9e:dd:bb:46:62:3f:2f:22:db:2e:f6:8d:f9:bf:23:b7:65:8d:
8d:1a:c9:61:1e:d5:ca:c8:ad:b2:b5:73:02:c3:3e:04:65:1f:
28:18:0c:44:3f:c8:00:d8:a4:b1:3a:1e:2f:69:95:99:e3:75:
d2:a0:51:15:af:d2:4e:8a:d0:fd:4e:1f:5c:3d:47:77:a2:50:
a4:b1:44:fa:93:f5:1a:55:2a:33:ca:6f:9a:71:43:66:99:41:
55:88:4c:1f:60:a5:15:8d:7c:15:b9:26:37:b4:44:f1:f7:86:
63:e1:44:1f:4f:73:0f:94:f3:46:a8:44:82:f2:9e:26:03:47:
fd:3a:71:e8:83:93:79:17:21:14:3a:f8:48:46:1e:2c:58:d5:
56:fe:b7:6f:bc:a3:e9:fb:b0:fd:2c:65:e1:e2:5a:fc:69:94:
6f:aa:c7:6f:07:70:1e:7a:68:de:d9:b8:83:63:b8:99:2c:f1:
69:ee:03:d9:ec:28:49:01:3d:dc:a2:64:e8:28:c3:ed:0d:66:
cd:7c:00:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:10:23 2025 by rpki-client