Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/93e20f-8878-4058-8e01-ad01e30a61b2/1/saR7C8jPhSxxp1U0l0fw1iLpggA.roa
File: saR7C8jPhSxxp1U0l0fw1iLpggA.roa (raw, json)
Hash identifier: YzILylPp9VZQ/IVzqGiVAC4yp8xtNGEqB65NyOh5ynQ=
Subject key identifier: B1:A4:7B:0B:C8:CF:85:2C:71:A7:55:34:97:47:F0:D6:22:E9:82:00
Certificate issuer: /CN=15f215ad274f35b24ac6a060b2f09399711bc17f
Certificate serial: 0194221F8C498DD633CC650B684AD4BCD6D8
Authority key identifier: 15:F2:15:AD:27:4F:35:B2:4A:C6:A0:60:B2:F0:93:99:71:1B:C1:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfIVrSdPNbJKxqBgsvCTmXEbwX8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/93e20f-8878-4058-8e01-ad01e30a61b2/1/saR7C8jPhSxxp1U0l0fw1iLpggA.roa
Signing time: Wed 01 Jan 2025 13:48:00 +0000
ROA not before: Wed 01 Jan 2025 13:48:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205393
IP address blocks: 194.147.160.0/22 maxlen: 22
194.147.168.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:8c:49:8d:d6:33:cc:65:0b:68:4a:d4:bc:d6:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f215ad274f35b24ac6a060b2f09399711bc17f
Validity
Not Before: Jan 1 13:48:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b1a47b0bc8cf852c71a755349747f0d622e98200
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:b1:45:9b:1f:8d:cd:65:16:2d:b3:c2:d7:4e:
a7:b8:73:8b:12:45:9e:db:0b:34:02:2e:fe:a5:26:
70:9a:15:4a:24:36:dc:49:05:e9:92:0b:54:e5:53:
ae:4c:c8:56:15:dd:92:90:c6:6f:30:fa:ae:ab:42:
d2:bd:2c:51:df:14:7c:0d:35:6d:20:17:8d:18:a2:
df:8e:17:42:2e:42:62:4d:ee:50:f5:99:b3:35:2c:
3e:52:18:10:54:e9:c0:d2:8f:b3:85:98:f9:83:5c:
7f:2e:ac:46:81:86:9f:d7:84:be:ae:45:2e:1f:7b:
7b:26:15:7a:96:54:8e:fb:f7:16:e9:39:00:67:e7:
a3:00:d5:74:e9:1b:18:81:46:87:cb:55:6e:66:6a:
00:45:7b:92:a1:35:d7:2c:6b:29:6f:52:cd:dd:3d:
62:2d:03:8b:6a:05:b0:40:7b:7e:8e:d5:a0:8d:5c:
8b:f1:28:f3:2b:5c:b7:ac:55:42:d8:8a:94:04:3a:
fc:71:e2:84:ff:38:a1:a0:bf:f7:db:eb:88:ea:5d:
9e:ad:fe:9a:60:a4:20:12:74:eb:28:66:de:5d:04:
ad:fd:70:e4:2c:41:f1:b8:71:a6:45:7c:f1:e8:8e:
df:08:44:02:b6:ad:bd:ab:e4:bc:20:ee:d3:e3:ef:
c3:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:A4:7B:0B:C8:CF:85:2C:71:A7:55:34:97:47:F0:D6:22:E9:82:00
X509v3 Authority Key Identifier:
keyid:15:F2:15:AD:27:4F:35:B2:4A:C6:A0:60:B2:F0:93:99:71:1B:C1:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfIVrSdPNbJKxqBgsvCTmXEbwX8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/93e20f-8878-4058-8e01-ad01e30a61b2/1/saR7C8jPhSxxp1U0l0fw1iLpggA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/93e20f-8878-4058-8e01-ad01e30a61b2/1/FfIVrSdPNbJKxqBgsvCTmXEbwX8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.147.160.0/22
194.147.168.0/23
Signature Algorithm: sha256WithRSAEncryption
af:ee:8b:09:2e:f1:53:6b:96:fb:2e:f5:a3:25:79:5d:7c:78:
f3:54:3c:ac:b4:9f:85:a0:53:37:44:43:0e:35:e4:1f:09:2b:
d0:6d:fd:c5:c9:9a:6c:8a:c2:57:2d:b5:46:3a:9c:b9:83:d7:
9a:71:d9:45:85:c0:92:84:e1:84:4f:1b:f4:97:ad:e5:c3:ab:
45:c7:b5:ca:3d:fe:a3:3b:09:0d:54:7a:4c:bf:10:d5:60:37:
11:ad:d0:17:54:b7:ff:b9:e5:9b:02:68:8e:52:63:c1:ae:e6:
6d:f8:65:6b:b0:1e:12:5c:e6:ec:af:f1:46:40:00:77:53:10:
8c:02:87:29:15:10:10:bf:e2:c5:7a:a7:08:ab:1a:70:86:3f:
38:45:ec:1f:6c:8d:ce:8b:b2:f2:b7:4e:f2:e6:9f:ed:47:a3:
5d:87:88:62:78:fe:2c:b3:a7:08:50:9b:32:a9:ed:ad:e8:d3:
f0:99:e3:02:90:4e:ac:61:e9:83:85:67:16:8c:8f:21:ca:f7:
b4:a9:fb:a2:26:be:f8:65:dc:53:ab:b9:d7:c2:7f:b4:7a:ef:
b5:64:10:43:80:71:f0:f6:38:1c:5e:07:85:8b:c9:40:d4:ac:
af:ee:29:c5:88:e4:0b:dd:c4:a6:00:9b:fe:9e:d7:b4:0e:f6:
2d:82:35:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:01:48 2025 by rpki-client