Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/6c5eaf-9c44-4a5a-baa1-325aadd733c3/1/DEYi7WsKY2zM3uINUVpUki3PaVg.roa
File: DEYi7WsKY2zM3uINUVpUki3PaVg.roa (raw, json)
Hash identifier: DRmT8SF6k5qeKVt2hMFQ+AwmgRFjXhlT847OzPWC7g8=
Subject key identifier: 0C:46:22:ED:6B:0A:63:6C:CC:DE:E2:0D:51:5A:54:92:2D:CF:69:58
Certificate issuer: /CN=e86b4ed3317c92a34b76c8fad29ae97080f91f3b
Certificate serial: 01941F8C40E6E456E4492A008F253C744C59
Authority key identifier: E8:6B:4E:D3:31:7C:92:A3:4B:76:C8:FA:D2:9A:E9:70:80:F9:1F:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6GtO0zF8kqNLdsj60prpcID5Hzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/6c5eaf-9c44-4a5a-baa1-325aadd733c3/1/DEYi7WsKY2zM3uINUVpUki3PaVg.roa
Signing time: Wed 01 Jan 2025 01:47:52 +0000
ROA not before: Wed 01 Jan 2025 01:47:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42510
IP address blocks: 193.106.56.0/22 maxlen: 22
193.106.56.0/24 maxlen: 24
193.106.57.0/24 maxlen: 24
193.106.58.0/23 maxlen: 23
193.106.59.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:40:e6:e4:56:e4:49:2a:00:8f:25:3c:74:4c:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e86b4ed3317c92a34b76c8fad29ae97080f91f3b
Validity
Not Before: Jan 1 01:47:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0c4622ed6b0a636cccdee20d515a54922dcf6958
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:51:37:ab:e2:ba:44:37:87:32:40:02:5c:71:
4e:b1:e2:0a:e5:b5:5f:e1:b7:3d:c3:98:4a:52:65:
79:10:29:8c:98:00:03:fd:26:8d:b0:7d:08:3a:74:
d2:b3:46:a5:a6:41:50:a1:9d:37:48:7b:e0:c3:6c:
50:7c:9c:88:0e:89:16:b3:c1:31:ac:0f:12:e7:4f:
6f:27:74:c9:dd:5b:76:17:01:59:8e:56:4f:95:9e:
cf:70:a2:ba:65:1d:21:6f:19:89:f4:b9:0d:d4:ca:
85:c8:b1:e5:26:32:82:ed:c0:89:2f:5e:4e:09:0a:
36:4b:ff:2b:a3:e7:65:28:a6:e7:35:9a:7f:2a:5f:
50:e3:c9:e7:6d:a0:49:54:ed:5f:48:00:56:56:ab:
f4:e0:95:3f:be:07:98:7e:3d:8d:02:e3:3c:f0:f2:
3c:b9:5f:6b:a6:dc:5e:ea:a6:76:c6:1a:fb:3c:aa:
25:11:a3:1b:ff:3b:5d:f8:d1:a8:8b:95:19:f2:76:
5a:54:19:88:8a:fa:9c:e6:bb:ce:f3:fd:4b:0a:ee:
91:98:d4:b2:73:fb:01:4c:22:57:77:54:2c:4e:3c:
09:f1:c8:77:ec:91:ca:fe:79:12:f9:26:50:92:67:
59:66:54:4a:6f:ed:c2:85:e3:4f:44:bf:cf:be:e7:
8a:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:46:22:ED:6B:0A:63:6C:CC:DE:E2:0D:51:5A:54:92:2D:CF:69:58
X509v3 Authority Key Identifier:
keyid:E8:6B:4E:D3:31:7C:92:A3:4B:76:C8:FA:D2:9A:E9:70:80:F9:1F:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6GtO0zF8kqNLdsj60prpcID5Hzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/6c5eaf-9c44-4a5a-baa1-325aadd733c3/1/DEYi7WsKY2zM3uINUVpUki3PaVg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/6c5eaf-9c44-4a5a-baa1-325aadd733c3/1/6GtO0zF8kqNLdsj60prpcID5Hzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.106.56.0/22
Signature Algorithm: sha256WithRSAEncryption
60:68:fd:e9:af:dc:26:72:b3:ec:ed:94:2c:82:06:6b:81:ea:
c4:f4:df:45:7a:48:65:8e:02:5c:89:57:0a:79:ea:3e:60:a1:
04:69:d8:e0:29:22:95:b0:24:65:09:c1:84:71:18:ca:83:fc:
cc:e6:fe:4a:f9:a1:68:b5:6f:2f:74:48:6b:f9:c7:00:d4:ab:
34:d8:a9:49:3d:97:8e:aa:9f:5c:2c:89:d7:a3:d4:a6:7a:8f:
a2:28:69:a2:ab:ae:75:46:7a:ae:f1:8c:7d:94:cf:12:36:e6:
d5:89:e6:48:f3:10:e7:4a:86:8f:41:8b:56:86:d9:e8:88:98:
45:2b:a3:e2:c4:59:c2:11:8f:2e:bd:9d:af:79:9a:56:87:26:
e0:10:89:e0:35:cc:98:b6:aa:b9:a3:67:58:b9:10:0c:af:8e:
1d:de:dc:f2:0f:ed:44:54:b2:8b:83:c2:df:a1:4b:1e:bd:4e:
ba:53:3f:75:81:f7:96:37:44:d1:9d:bc:33:8e:f5:47:66:75:
73:fc:48:51:a8:80:63:0f:08:4d:62:82:60:cf:ac:18:c9:82:
ba:18:de:d5:1a:16:4d:fb:f7:e9:ee:77:94:30:a4:ef:c9:18:
3f:01:49:70:93:72:ce:67:8a:ea:c7:52:f1:cc:09:45:b2:e0:
b9:67:fd:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:33:03 2025 by rpki-client