Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/0dbe12-e5d2-41b1-ab18-31245bbacd2f/1/R4eUqOncKtq54T9DdHF5GejdBHE.roa
File: R4eUqOncKtq54T9DdHF5GejdBHE.roa (raw, json)
Hash identifier: tC9oLJU3NKN83YtbNZIAJD3IETS+fvlLYBmiYHfzImg=
Subject key identifier: 47:87:94:A8:E9:DC:2A:DA:B9:E1:3F:43:74:71:79:19:E8:DD:04:71
Certificate issuer: /CN=32697cbd221ccf61ec34fd0627b2bfebe3b41acb
Certificate serial: 0194266C415EC495B661951E6A54DA0E6FCC
Authority key identifier: 32:69:7C:BD:22:1C:CF:61:EC:34:FD:06:27:B2:BF:EB:E3:B4:1A:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mml8vSIcz2HsNP0GJ7K_6-O0Gss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/0dbe12-e5d2-41b1-ab18-31245bbacd2f/1/R4eUqOncKtq54T9DdHF5GejdBHE.roa
Signing time: Thu 02 Jan 2025 09:50:16 +0000
ROA not before: Thu 02 Jan 2025 09:50:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42369
IP address blocks: 193.30.126.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:41:5e:c4:95:b6:61:95:1e:6a:54:da:0e:6f:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32697cbd221ccf61ec34fd0627b2bfebe3b41acb
Validity
Not Before: Jan 2 09:50:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=478794a8e9dc2adab9e13f4374717919e8dd0471
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:b4:7a:56:8a:48:fc:b0:ce:d9:fc:4f:47:f2:
2e:37:cc:11:fa:3a:63:c0:af:c5:4a:72:a8:f9:20:
c2:db:91:90:b1:37:76:7d:40:4b:9b:a7:4e:f0:72:
cb:6b:0a:4e:82:99:66:9b:ce:e2:b0:a3:c5:b1:50:
eb:eb:80:a2:a0:52:a1:8c:b8:88:d1:af:1a:75:b4:
38:64:eb:12:f3:c3:ed:0e:af:61:30:4c:33:3e:9a:
04:9f:d7:73:96:d5:99:4f:53:4e:da:d5:5e:b8:b2:
44:f7:62:9f:40:63:ef:a2:a9:ef:d1:05:9d:61:db:
09:43:f3:ad:34:de:8e:d4:5f:54:50:3d:86:0e:20:
ba:ab:29:8f:93:f8:59:e6:48:b4:79:64:04:6f:b0:
a5:83:d9:4e:3a:93:d5:ec:31:32:2b:12:77:f1:41:
81:83:83:72:8a:f9:61:38:b5:bb:8d:57:ea:d0:34:
80:a9:b5:4c:09:5b:ce:4b:3b:9a:04:db:d3:1d:d5:
1b:17:d4:30:55:62:ce:89:18:44:22:86:4b:58:83:
38:80:34:0c:f3:8c:f1:1a:de:16:6a:2c:ad:fe:43:
5e:9e:d3:2b:6c:b2:b5:dd:6d:1f:9d:aa:fd:44:79:
54:a5:6b:ce:f4:da:03:11:54:2a:72:fe:6b:f4:e9:
41:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:87:94:A8:E9:DC:2A:DA:B9:E1:3F:43:74:71:79:19:E8:DD:04:71
X509v3 Authority Key Identifier:
keyid:32:69:7C:BD:22:1C:CF:61:EC:34:FD:06:27:B2:BF:EB:E3:B4:1A:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mml8vSIcz2HsNP0GJ7K_6-O0Gss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/0dbe12-e5d2-41b1-ab18-31245bbacd2f/1/R4eUqOncKtq54T9DdHF5GejdBHE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/0dbe12-e5d2-41b1-ab18-31245bbacd2f/1/Mml8vSIcz2HsNP0GJ7K_6-O0Gss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.30.126.0/24
Signature Algorithm: sha256WithRSAEncryption
91:30:1b:2f:b6:5a:ef:ef:c6:02:28:fc:4f:93:d9:8f:ae:78:
a5:5d:7a:e3:85:59:25:47:8b:a2:0d:d7:a9:a9:0a:79:eb:31:
2c:f4:20:52:b9:0a:e8:f1:e6:bd:47:04:03:54:4c:0b:41:42:
25:76:89:31:bc:f5:37:22:5b:5e:6a:d5:de:ac:4d:0d:68:e7:
4b:4f:51:fb:44:1c:75:0b:18:73:24:65:ff:31:4f:aa:88:0f:
cf:09:35:78:02:59:a0:f9:2d:11:c6:f2:d1:a6:b7:7d:b2:5c:
23:58:86:2c:06:fb:95:ef:05:c3:86:32:4b:63:61:ef:13:be:
1f:02:75:7c:90:04:f9:5c:69:b3:71:d6:9a:4a:53:70:d9:4f:
c2:84:b0:05:99:ef:49:39:09:66:d3:65:66:e2:a8:d8:e2:9a:
aa:98:19:4d:0b:89:86:9b:6d:0b:de:09:37:74:86:cc:5e:18:
3e:e0:2c:ee:9d:3e:92:83:ae:37:75:d3:25:f0:42:bf:71:54:
fb:05:7a:e1:11:99:ff:7d:4b:00:7a:48:57:5b:60:08:54:5c:
88:ec:ef:86:2a:1c:de:9b:f2:78:3f:22:0f:54:22:9a:b4:e8:
74:36:e5:7c:95:29:c0:2c:00:df:07:77:d3:7e:d7:b2:6b:84:
2a:08:f8:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:46:33 2025 by rpki-client