Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/1befb9-c103-40af-8970-93c4568b103b/1/U87y99J1siFcY1ZoT18_zMMUqw8.roa
File: U87y99J1siFcY1ZoT18_zMMUqw8.roa (raw, json)
Hash identifier: WlkxlG9RIuCR4qy7OuSRfiHWs7ZtaSsDc6kVoZ9JKfA=
Subject key identifier: 53:CE:F2:F7:D2:75:B2:21:5C:63:56:68:4F:5F:3F:CC:C3:14:AB:0F
Certificate issuer: /CN=6ac34e49fba9640b83eabaafba9c4ab96c8c3544
Certificate serial: 01941F8C7A290F75987BCA3F801D96E12553
Authority key identifier: 6A:C3:4E:49:FB:A9:64:0B:83:EA:BA:AF:BA:9C:4A:B9:6C:8C:35:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/asNOSfupZAuD6rqvupxKuWyMNUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/1befb9-c103-40af-8970-93c4568b103b/1/U87y99J1siFcY1ZoT18_zMMUqw8.roa
Signing time: Wed 01 Jan 2025 01:48:07 +0000
ROA not before: Wed 01 Jan 2025 01:48:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15827
IP address blocks: 193.41.45.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:7a:29:0f:75:98:7b:ca:3f:80:1d:96:e1:25:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ac34e49fba9640b83eabaafba9c4ab96c8c3544
Validity
Not Before: Jan 1 01:48:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=53cef2f7d275b2215c6356684f5f3fccc314ab0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:48:9b:ef:19:85:94:7e:18:74:7f:a0:98:d7:
7f:88:a2:2c:23:b7:e9:43:1e:c0:19:58:c5:f7:8c:
53:ea:52:28:d9:a2:e0:a6:5b:8c:64:6e:ab:37:84:
69:58:63:9d:c7:70:fe:68:06:e9:be:74:7b:43:78:
ea:d9:0e:18:55:3e:b8:b6:ee:95:1e:15:63:73:b5:
3c:7b:d3:61:30:c5:09:b6:52:63:29:e3:93:bf:6e:
4b:af:7a:ac:39:c3:db:ec:48:da:f6:24:55:e6:3b:
c4:e8:68:24:48:e4:42:85:e7:c2:5f:e4:9b:de:78:
3c:6b:6a:35:46:47:9f:b2:e9:d0:00:f8:f8:9a:d1:
95:5e:2b:8a:2c:5f:9a:95:68:b9:46:c0:f8:1a:23:
c6:28:1f:c1:ec:5c:aa:f0:26:fc:c6:84:a8:f9:00:
30:09:79:44:6c:6f:21:fa:43:c9:ec:dc:70:90:88:
d8:05:12:18:25:4a:be:9d:3f:e9:6c:b0:01:9a:95:
09:b1:db:f7:ff:d4:94:df:e6:cb:62:05:93:82:9d:
81:eb:05:1e:ac:c3:51:40:1d:bb:72:04:df:c7:48:
f4:eb:74:7b:fe:41:09:ce:58:c1:ea:ad:0c:f4:db:
30:cc:98:d9:27:10:ec:53:aa:a5:3c:4c:3f:d0:b7:
de:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:CE:F2:F7:D2:75:B2:21:5C:63:56:68:4F:5F:3F:CC:C3:14:AB:0F
X509v3 Authority Key Identifier:
keyid:6A:C3:4E:49:FB:A9:64:0B:83:EA:BA:AF:BA:9C:4A:B9:6C:8C:35:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/asNOSfupZAuD6rqvupxKuWyMNUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/1befb9-c103-40af-8970-93c4568b103b/1/U87y99J1siFcY1ZoT18_zMMUqw8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/1befb9-c103-40af-8970-93c4568b103b/1/asNOSfupZAuD6rqvupxKuWyMNUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.41.45.0/24
Signature Algorithm: sha256WithRSAEncryption
18:ec:b5:2c:94:ab:1f:ad:3b:97:5c:e8:ad:51:9c:24:f3:5a:
c8:4d:73:3e:92:3c:ec:b4:62:1b:69:e1:ff:82:51:e9:b2:66:
98:fe:8b:01:cb:59:aa:03:6d:e8:fd:24:b0:84:ac:ca:19:bd:
24:47:c3:a2:b4:8a:90:7f:8f:a9:f9:d8:b8:e4:f6:b7:97:52:
a4:16:e6:d8:1d:c2:db:72:ef:01:ba:8d:b7:74:e9:b6:7a:47:
fe:a6:e8:cd:05:a8:9d:c3:10:b3:65:c4:da:e3:9e:97:7e:37:
da:bf:d2:72:72:7f:ed:72:ff:7f:26:d7:c3:ad:6f:47:73:ac:
93:04:04:bb:2c:30:41:42:0a:f8:f6:42:9f:3f:23:ee:35:0f:
ea:45:fa:5d:88:7f:eb:18:9e:97:2f:ac:84:d0:e7:50:fd:75:
cd:8b:8d:32:61:17:6d:64:3d:30:85:13:80:4b:c3:eb:98:b7:
cc:e2:54:71:35:1a:f9:71:15:8f:2a:ec:d7:61:2c:6f:29:e7:
29:f8:c8:e2:93:14:2d:c0:c8:54:07:74:db:69:70:65:65:e4:
db:ae:ec:5a:6b:58:dc:e0:97:6b:e4:7f:c6:e8:e1:84:c0:22:
df:b6:76:5f:8c:ff:bb:d9:da:8f:c2:70:7e:cc:8c:d5:a3:a1:
ab:44:2a:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:10:01 2025 by rpki-client