Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/3be914-9d1b-4e0b-bfd2-8bfcf906f76a/1/I_YmXjobjQiqgaE7GnBooBc13Bo.roa
File: I_YmXjobjQiqgaE7GnBooBc13Bo.roa (raw, json)
Hash identifier: uhenmFA0jnoDV3gl2RrmVWDxmBkSpRWlCD4TJWA6V5M=
Subject key identifier: 23:F6:26:5E:3A:1B:8D:08:AA:81:A1:3B:1A:70:68:A0:17:35:DC:1A
Certificate issuer: /CN=c37a221b29dd463068c3a8d5cac146b057b5a9ed
Certificate serial: 01942444812D2FFF2998B781762CEC158A93
Authority key identifier: C3:7A:22:1B:29:DD:46:30:68:C3:A8:D5:CA:C1:46:B0:57:B5:A9:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w3oiGyndRjBow6jVysFGsFe1qe0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/3be914-9d1b-4e0b-bfd2-8bfcf906f76a/1/I_YmXjobjQiqgaE7GnBooBc13Bo.roa
Signing time: Wed 01 Jan 2025 23:47:36 +0000
ROA not before: Wed 01 Jan 2025 23:47:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 28919
IP address blocks: 193.163.14.0/24 maxlen: 24
2a10:d100::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:81:2d:2f:ff:29:98:b7:81:76:2c:ec:15:8a:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c37a221b29dd463068c3a8d5cac146b057b5a9ed
Validity
Not Before: Jan 1 23:47:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=23f6265e3a1b8d08aa81a13b1a7068a01735dc1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:1e:d5:8c:cf:10:83:99:02:83:1a:de:78:1d:
84:c0:8b:ec:6c:e9:28:93:0f:4f:b0:33:4b:e5:fa:
80:a1:ba:d6:fe:85:a3:57:9e:d6:6d:61:2f:1d:91:
b0:04:49:57:01:74:c9:1c:53:72:50:05:05:1a:f0:
06:a1:85:12:36:01:ef:1e:16:e9:92:69:41:67:0c:
b4:68:65:1c:f7:cc:41:e2:35:e7:05:19:ce:60:d7:
8f:30:02:15:41:c9:78:34:2b:3c:b1:34:e6:11:44:
85:c9:4a:e3:d4:bb:a5:94:e3:b8:ee:9d:11:f7:7a:
1a:be:47:c3:4d:61:a4:69:84:03:82:6e:c6:f4:9a:
4c:c6:a5:ea:a5:e5:64:3b:62:9b:26:b6:85:49:e0:
54:90:d1:81:cc:5a:e7:7f:45:e5:7b:86:6b:25:5b:
87:d2:51:19:7a:e2:70:82:14:ec:fe:8b:f0:1e:13:
53:46:05:f3:06:eb:ec:96:99:b7:ab:ff:ab:c5:58:
a2:22:c8:ad:4e:61:c5:0d:71:b8:0e:68:3b:93:b8:
9a:95:53:f6:c7:83:ce:62:fd:db:9f:36:52:38:27:
c3:d1:67:06:4f:9c:a6:8c:f2:0c:e5:35:41:05:a6:
6b:4f:77:b3:81:6f:04:bb:cd:5f:1d:20:bf:f4:18:
31:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:F6:26:5E:3A:1B:8D:08:AA:81:A1:3B:1A:70:68:A0:17:35:DC:1A
X509v3 Authority Key Identifier:
keyid:C3:7A:22:1B:29:DD:46:30:68:C3:A8:D5:CA:C1:46:B0:57:B5:A9:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w3oiGyndRjBow6jVysFGsFe1qe0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/3be914-9d1b-4e0b-bfd2-8bfcf906f76a/1/I_YmXjobjQiqgaE7GnBooBc13Bo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/3be914-9d1b-4e0b-bfd2-8bfcf906f76a/1/w3oiGyndRjBow6jVysFGsFe1qe0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.163.14.0/24
IPv6:
2a10:d100::/32
Signature Algorithm: sha256WithRSAEncryption
21:8c:5f:58:21:09:35:cc:f5:58:02:6f:cc:51:06:fc:b8:76:
aa:d5:2c:bf:6b:b5:c9:43:19:5d:b2:81:ab:62:cb:36:c0:7a:
f2:00:a6:61:d6:93:e8:c6:ee:52:c6:29:4f:23:d6:0a:de:7f:
72:1b:b6:65:63:1d:5d:c2:6b:3a:cb:07:8d:2c:02:21:d5:08:
ae:44:62:44:7b:5a:dc:1a:97:e5:7c:6f:d3:dd:ca:c4:d5:42:
b7:61:0f:2e:78:c0:7c:e6:e7:dc:94:de:fa:62:4e:87:17:58:
d5:e2:dd:89:4d:eb:7b:67:8f:b4:a5:ee:7a:2b:28:29:2a:5f:
5f:b2:8f:83:b1:1b:38:ba:d4:d8:6f:ff:7b:a2:11:a1:d0:7b:
d7:8c:9c:e2:ba:3a:3f:ee:e1:cb:af:52:ae:9a:78:c2:dd:03:
4c:43:1e:cc:96:52:17:8a:58:40:41:1b:3a:9e:4f:4b:76:20:
fc:d3:91:85:98:61:90:73:3a:f2:3a:2f:e0:05:d4:bf:79:7a:
d9:79:5d:4a:88:76:10:a0:d8:48:22:81:33:37:a2:af:70:9c:
8b:58:f1:cf:0d:4c:49:3b:7f:b2:e4:5b:57:04:f4:c5:42:0a:
2b:92:6c:29:55:92:e5:33:b0:3b:b7:12:c9:36:44:4f:91:82:
dd:07:1d:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:01:57 2025 by rpki-client