Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/8cca33-c2b1-4541-9ef2-aa0eb53e90b9/1/Aa6sIwlX6_w5uXf2zsts3DwkhU4.roa
File: Aa6sIwlX6_w5uXf2zsts3DwkhU4.roa (raw, json)
Hash identifier: LlENaZaigA7zDM+CDaj8xvJ6snfd5fy4W4jHwPOvoos=
Subject key identifier: 01:AE:AC:23:09:57:EB:FC:39:B9:77:F6:CE:CB:6C:DC:3C:24:85:4E
Certificate issuer: /CN=f89e229f860b058d23fd28a2926161b8786330c6
Certificate serial: 019426D9490ABDE906538EED606FD4C8FA25
Authority key identifier: F8:9E:22:9F:86:0B:05:8D:23:FD:28:A2:92:61:61:B8:78:63:30:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-J4in4YLBY0j_SiikmFhuHhjMMY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/8cca33-c2b1-4541-9ef2-aa0eb53e90b9/1/Aa6sIwlX6_w5uXf2zsts3DwkhU4.roa
Signing time: Thu 02 Jan 2025 11:49:21 +0000
ROA not before: Thu 02 Jan 2025 11:49:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58092
IP address blocks: 193.102.79.0/24 maxlen: 24
194.62.20.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:49:0a:bd:e9:06:53:8e:ed:60:6f:d4:c8:fa:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f89e229f860b058d23fd28a2926161b8786330c6
Validity
Not Before: Jan 2 11:49:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=01aeac230957ebfc39b977f6cecb6cdc3c24854e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:79:29:ec:6e:79:d6:f4:a2:e0:e8:9a:2a:eb:
46:89:08:bc:87:d8:67:c2:d4:a6:6d:29:e3:80:e5:
6f:20:aa:fa:7d:60:de:93:77:83:05:4b:58:05:46:
8b:29:c0:25:f1:87:91:7b:15:43:cd:d9:fe:3c:1d:
de:6e:e4:ac:89:1f:b6:f7:e0:ac:a9:e4:85:43:f5:
94:ab:d4:d8:8b:05:93:56:0d:e0:cb:d0:a1:ae:d7:
f8:30:7c:02:a3:7d:44:1f:e2:92:57:fe:45:72:4c:
d6:c5:ca:06:c8:86:52:c9:67:b3:6e:1b:20:51:00:
87:40:45:a6:d9:bf:0e:e9:d7:c9:30:ae:89:e0:6e:
c4:72:c5:99:64:d7:a7:71:cc:2b:9d:26:11:cc:09:
9c:f5:31:79:04:9c:a7:e5:e7:3a:e3:7c:0c:17:cd:
84:fd:16:ef:91:70:33:1d:27:68:8a:b1:be:0f:ee:
99:eb:0e:12:b5:dc:f2:60:13:7a:60:96:df:98:2c:
ff:9d:3c:0b:bb:83:8c:f6:a9:c8:78:cf:a5:f0:69:
28:bc:88:e6:99:f4:39:55:66:8d:a2:64:c3:47:87:
45:e3:4e:89:9f:6b:19:fc:d3:42:0d:22:15:d9:62:
2f:4b:f7:7d:91:30:b2:c7:2d:ab:fe:7a:9e:33:6c:
6d:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:AE:AC:23:09:57:EB:FC:39:B9:77:F6:CE:CB:6C:DC:3C:24:85:4E
X509v3 Authority Key Identifier:
keyid:F8:9E:22:9F:86:0B:05:8D:23:FD:28:A2:92:61:61:B8:78:63:30:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-J4in4YLBY0j_SiikmFhuHhjMMY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/8cca33-c2b1-4541-9ef2-aa0eb53e90b9/1/Aa6sIwlX6_w5uXf2zsts3DwkhU4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/8cca33-c2b1-4541-9ef2-aa0eb53e90b9/1/1-J4in4YLBY0j_SiikmFhuHhjMMY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.102.79.0/24
194.62.20.0/24
Signature Algorithm: sha256WithRSAEncryption
16:e2:16:33:4d:9a:16:2d:ac:26:48:13:34:dc:a4:cc:98:75:
f1:b3:fc:93:1a:0a:a1:72:f1:c2:02:64:93:92:42:ff:60:c2:
21:9f:77:43:4f:b8:e3:e6:6b:01:ac:4f:5c:ec:54:ce:b7:10:
d5:ff:49:2e:71:dd:f4:ad:a6:0c:42:77:47:72:ab:14:b1:f7:
fe:ed:aa:84:18:76:34:6c:8a:f6:e2:1d:b9:71:3d:1c:bd:e5:
7c:69:a9:1d:df:1f:76:af:28:d3:67:c9:96:3b:d9:ba:d2:b4:
49:9e:e5:ba:14:1c:25:ff:64:fc:02:12:f8:18:ae:a0:4a:60:
4b:48:ab:50:b9:24:bf:15:f3:bd:c9:a3:20:2d:10:61:73:76:
7c:94:fc:54:4e:12:ec:da:f5:d1:60:6b:c1:f3:1f:a9:46:df:
4c:8e:fe:2b:85:d5:17:22:e3:3c:96:18:26:79:b9:28:23:5e:
c9:85:d4:e7:7b:1a:97:78:a0:97:5a:39:e9:6e:3d:a1:c9:74:
77:2f:20:88:a9:c8:7c:e9:7d:c6:f6:5a:4d:fc:32:54:54:31:
99:39:b9:84:31:47:34:35:97:d9:0b:15:86:29:4f:bd:67:aa:
97:06:55:94:a9:33:f8:d1:be:be:c5:0f:9d:8a:b3:40:60:17:
77:aa:76:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:17:12 2025 by rpki-client