Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/406991-5be3-4a05-acb2-1ad47ccd2d9a/1/R-7dmcw3c20-6mUEaV6t8HKtYR8.roa
File: R-7dmcw3c20-6mUEaV6t8HKtYR8.roa (raw, json)
Hash identifier: 0JAMHSeaJgJlarzLGa/qydN1dZySJoZZ59FCJPt3tQ0=
Subject key identifier: 47:EE:DD:99:CC:37:73:6D:3E:EA:65:04:69:5E:AD:F0:72:AD:61:1F
Certificate issuer: /CN=89e21a2b8a25b971bdb741a0aae325992304194e
Certificate serial: 01941FFA0A2E03DA703019783CC4C54D8191
Authority key identifier: 89:E2:1A:2B:8A:25:B9:71:BD:B7:41:A0:AA:E3:25:99:23:04:19:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ieIaK4oluXG9t0GgquMlmSMEGU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/406991-5be3-4a05-acb2-1ad47ccd2d9a/1/R-7dmcw3c20-6mUEaV6t8HKtYR8.roa
Signing time: Wed 01 Jan 2025 03:47:47 +0000
ROA not before: Wed 01 Jan 2025 03:47:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207590
IP address blocks: 193.25.252.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:0a:2e:03:da:70:30:19:78:3c:c4:c5:4d:81:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89e21a2b8a25b971bdb741a0aae325992304194e
Validity
Not Before: Jan 1 03:47:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=47eedd99cc37736d3eea6504695eadf072ad611f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:05:7d:80:4a:07:e3:09:eb:0c:46:65:eb:a1:
ce:46:8f:e0:fe:32:fe:49:bd:96:94:9a:68:6a:43:
66:6a:25:33:34:9b:2d:10:14:ff:ab:cf:8d:5b:e9:
01:d5:58:63:b4:99:6e:74:f1:99:09:ff:fb:33:ca:
fc:42:ab:5b:0f:6c:27:a6:0c:94:ae:88:57:5e:53:
86:52:ba:49:42:c8:00:bb:97:90:ce:06:f4:64:73:
5d:0e:4b:17:fa:02:18:24:48:bd:63:d4:06:27:bf:
be:fa:c0:54:48:f5:9d:cc:47:53:3f:a5:db:f9:dc:
63:a4:42:f6:78:b7:b7:f2:4b:45:fc:d7:3c:d7:09:
43:56:39:03:09:09:de:e8:6f:99:90:88:cb:cd:25:
67:70:92:57:0f:6d:0d:7f:e2:b3:fb:00:1a:2a:79:
d5:02:2a:ee:f8:45:9b:a7:f9:ea:06:33:65:6c:34:
c4:dd:d9:4d:06:52:c4:4e:2b:f9:2d:a7:d6:19:b5:
0e:ed:59:bb:51:fd:46:39:e0:9c:81:fa:24:b8:31:
9d:ca:77:aa:64:60:aa:d4:82:ef:22:7b:cc:c5:84:
fa:5a:e9:b8:e6:1e:e3:c5:b8:2d:13:4d:e4:29:29:
c0:f0:a6:5a:74:7d:67:fc:82:b8:52:f2:1b:3c:74:
3c:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:EE:DD:99:CC:37:73:6D:3E:EA:65:04:69:5E:AD:F0:72:AD:61:1F
X509v3 Authority Key Identifier:
keyid:89:E2:1A:2B:8A:25:B9:71:BD:B7:41:A0:AA:E3:25:99:23:04:19:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ieIaK4oluXG9t0GgquMlmSMEGU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/406991-5be3-4a05-acb2-1ad47ccd2d9a/1/R-7dmcw3c20-6mUEaV6t8HKtYR8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/406991-5be3-4a05-acb2-1ad47ccd2d9a/1/ieIaK4oluXG9t0GgquMlmSMEGU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.25.252.0/24
Signature Algorithm: sha256WithRSAEncryption
63:ea:bd:83:c9:5c:7e:09:81:8e:14:fd:f2:4f:71:03:db:74:
6f:80:c8:ba:c7:95:de:7c:6c:bf:6a:4e:55:8e:e5:ba:3e:af:
bf:06:54:13:24:7d:87:97:13:71:0c:58:fb:3a:41:b8:a4:c9:
14:38:30:11:8f:05:f3:c2:48:28:39:32:08:e0:fa:2b:2f:2e:
27:e0:39:8b:0e:ea:c6:1e:7b:39:4d:92:a7:e7:48:ef:79:29:
4d:dd:88:b3:96:01:30:d5:0b:c8:f4:ed:46:18:a4:9b:5e:cb:
d2:60:06:83:67:40:e7:ae:0f:13:00:d3:50:c1:08:5b:27:a3:
52:db:74:4e:1a:e7:58:03:8d:9a:5e:6a:c4:15:7f:c4:9e:3a:
9c:57:41:e2:64:c7:35:6b:3f:8d:e1:a0:ef:58:8d:49:cd:dc:
5d:3e:fd:0b:73:0f:01:89:1c:d8:60:3e:6f:54:ad:02:e2:19:
0c:99:2f:77:d5:2e:f3:ef:55:31:12:a1:59:77:df:3d:a6:c0:
1b:c6:cf:03:82:c4:df:5a:5e:cb:0d:42:ae:37:e2:5d:e9:33:
c3:37:b0:eb:14:92:1b:b6:51:19:6f:a0:5a:24:ea:1d:06:80:
02:5f:06:1c:d8:66:b9:92:36:8b:1e:ca:0b:ec:1a:d0:15:4c:
9c:7f:76:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:08:00 2025 by rpki-client