Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/384995-3ade-4b52-bffb-86626647086c/1/cQyc6nVgHzK4QNpSkp4cDVRMkiE.roa
File: cQyc6nVgHzK4QNpSkp4cDVRMkiE.roa (raw, json)
Hash identifier: N1QdoGGRESzbdDo8ibNStMhsdyaZ5jyu5P6HBd0ZTZU=
Subject key identifier: 71:0C:9C:EA:75:60:1F:32:B8:40:DA:52:92:9E:1C:0D:54:4C:92:21
Certificate issuer: /CN=adebfc4e59f7e646460d90311566df1f47eda917
Certificate serial: 0194258F23AB4150C1A00837D1A68BA9444F
Authority key identifier: AD:EB:FC:4E:59:F7:E6:46:46:0D:90:31:15:66:DF:1F:47:ED:A9:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rev8Tln35kZGDZAxFWbfH0ftqRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/384995-3ade-4b52-bffb-86626647086c/1/cQyc6nVgHzK4QNpSkp4cDVRMkiE.roa
Signing time: Thu 02 Jan 2025 05:48:45 +0000
ROA not before: Thu 02 Jan 2025 05:48:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31631
IP address blocks: 193.32.93.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:23:ab:41:50:c1:a0:08:37:d1:a6:8b:a9:44:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adebfc4e59f7e646460d90311566df1f47eda917
Validity
Not Before: Jan 2 05:48:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=710c9cea75601f32b840da52929e1c0d544c9221
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:06:05:27:cc:37:d4:64:e2:a2:11:5d:91:71:
fe:1f:ec:ff:17:f4:b9:44:f2:61:c1:a0:b7:25:17:
32:41:82:3f:d1:15:20:ed:76:54:d8:cf:6b:d8:40:
da:e5:ad:98:04:84:f4:8a:f3:e1:38:7b:d9:55:8f:
c3:17:5b:5f:c9:e1:d2:2d:b1:f7:cf:02:99:a3:bd:
ed:42:9b:c8:fd:50:af:2b:26:39:60:12:bc:a1:24:
2f:ae:e8:97:98:de:c6:91:df:18:d8:79:d0:75:e4:
17:a7:46:14:70:26:71:23:64:fd:b7:b2:29:2c:b4:
0c:71:d7:eb:f1:29:fa:b4:66:dd:c5:85:b7:67:b2:
33:5c:16:c3:b3:8d:a6:67:36:bf:e9:55:8a:a6:3a:
a2:a8:87:2c:38:27:1f:fd:a5:08:08:d3:63:0b:d3:
1d:fd:e3:c0:12:5e:b6:79:d4:80:61:82:4e:71:1a:
8b:e9:82:24:55:ce:d1:25:2d:0d:2b:3c:80:07:7e:
52:6d:32:20:f4:88:9c:f3:57:a4:10:48:f8:a3:2b:
49:4d:8c:de:aa:0f:b1:2a:84:20:9a:bd:4a:98:42:
88:3d:5d:2c:cf:ad:f3:88:54:f7:45:91:45:dd:7f:
a5:80:56:25:83:6d:80:c8:3b:36:75:e4:57:58:ae:
e9:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:0C:9C:EA:75:60:1F:32:B8:40:DA:52:92:9E:1C:0D:54:4C:92:21
X509v3 Authority Key Identifier:
keyid:AD:EB:FC:4E:59:F7:E6:46:46:0D:90:31:15:66:DF:1F:47:ED:A9:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rev8Tln35kZGDZAxFWbfH0ftqRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/384995-3ade-4b52-bffb-86626647086c/1/cQyc6nVgHzK4QNpSkp4cDVRMkiE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/384995-3ade-4b52-bffb-86626647086c/1/rev8Tln35kZGDZAxFWbfH0ftqRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.32.93.0/24
Signature Algorithm: sha256WithRSAEncryption
36:28:8b:9c:c4:62:bd:d9:5e:24:b8:dd:54:30:71:91:e2:74:
11:6f:f3:59:9d:b8:3d:2e:3a:76:11:59:48:57:ff:7d:9b:d2:
6d:db:84:70:f2:e2:b2:fc:f8:a7:ca:c0:d9:e4:f4:61:73:ee:
3f:b7:c4:81:ee:ee:16:d8:29:80:77:8b:2f:58:2e:49:51:c6:
78:da:55:6b:5e:34:63:7c:39:75:4a:49:9c:ec:73:13:cb:64:
22:98:b8:f3:8a:4d:0e:90:17:79:d5:75:e9:91:4a:bc:4a:0f:
f7:0e:3b:4e:0b:98:50:f6:d8:bb:04:52:9e:36:89:80:bf:0f:
09:62:d6:97:ad:5e:16:35:b9:46:fd:90:ab:ad:a4:1e:2b:42:
60:ed:4e:30:51:21:26:18:1b:40:3b:47:2f:77:8c:19:96:ee:
a2:76:c1:59:4f:83:22:88:de:03:77:72:ff:f1:f8:48:77:10:
1e:db:e0:ce:19:2d:8e:6e:33:5f:07:fd:25:e5:aa:a6:a0:17:
e3:3b:6c:51:09:a3:88:8f:20:66:c7:4e:3f:1d:f4:bc:46:e2:
69:39:43:18:f1:41:ff:f1:12:4a:df:79:61:42:d0:53:0c:87:
6f:2a:1b:a4:50:4a:07:98:6b:6d:8c:b0:00:95:ff:de:49:90:
a8:5c:be:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:31:54 2025 by rpki-client