Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/d2e826-5acb-47d6-92a4-43bb19f2e53b/1/IcIyZXTtvGCVT7kmzm3an6XI4Ds.roa
File: IcIyZXTtvGCVT7kmzm3an6XI4Ds.roa (raw, json)
Hash identifier: 9+rlboX5YqLY2xGwqsRBQUwcIF0ZyOqFrf8SvNh+rfQ=
Subject key identifier: 21:C2:32:65:74:ED:BC:60:95:4F:B9:26:CE:6D:DA:9F:A5:C8:E0:3B
Certificate issuer: /CN=b38594146202e2f6c3456b0696ff18562f1b9f81
Certificate serial: 0194258F388FCF218BFFC4BC755E6FE23D1F
Authority key identifier: B3:85:94:14:62:02:E2:F6:C3:45:6B:06:96:FF:18:56:2F:1B:9F:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s4WUFGIC4vbDRWsGlv8YVi8bn4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/d2e826-5acb-47d6-92a4-43bb19f2e53b/1/IcIyZXTtvGCVT7kmzm3an6XI4Ds.roa
Signing time: Thu 02 Jan 2025 05:48:50 +0000
ROA not before: Thu 02 Jan 2025 05:48:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25111
IP address blocks: 193.0.56.0/24 maxlen: 24
193.0.57.0/24 maxlen: 24
193.0.58.0/24 maxlen: 24
193.0.59.0/24 maxlen: 24
193.0.60.0/24 maxlen: 24
2001:67c:184::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:38:8f:cf:21:8b:ff:c4:bc:75:5e:6f:e2:3d:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b38594146202e2f6c3456b0696ff18562f1b9f81
Validity
Not Before: Jan 2 05:48:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=21c2326574edbc60954fb926ce6dda9fa5c8e03b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:e9:a9:d7:ac:25:d9:f9:ef:44:f8:ff:ba:e3:
59:04:a5:3b:b6:2d:f4:07:de:71:94:47:c1:61:24:
b1:1c:55:72:52:c0:d8:1b:af:80:ac:d4:c4:0b:ff:
36:ea:13:9f:c1:a9:48:44:2e:2e:f3:06:9b:50:46:
f2:9b:15:3a:bf:f1:da:c1:eb:ac:75:aa:96:31:b5:
e8:3f:95:03:c4:47:40:b4:7c:b2:6d:4e:4d:64:fc:
35:6f:7d:f6:73:9c:1d:1e:d4:33:a9:46:a4:10:59:
35:02:75:2a:fe:56:e7:cb:13:2d:66:7f:64:53:99:
06:4c:8c:88:23:88:52:df:1e:9b:03:0b:0d:f5:a7:
f8:90:cd:b4:2c:23:41:d6:a5:35:25:5e:e8:cc:33:
43:1c:f6:aa:3e:77:b9:61:2a:c2:0f:8f:65:22:1b:
6d:0f:48:15:e3:5a:c7:de:97:d1:65:b2:bc:67:9d:
99:af:c5:68:88:24:49:96:e7:1a:bc:97:09:bd:a2:
7b:a7:62:2a:da:99:08:ee:5e:d1:cb:14:c6:76:b6:
15:82:76:28:91:ba:e5:de:c3:7b:49:4d:40:07:ad:
c8:84:b4:59:a3:31:a4:7e:d1:18:76:44:8f:94:0c:
ae:71:0f:23:84:d9:be:5f:4d:ea:71:c8:a2:6f:07:
a2:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:C2:32:65:74:ED:BC:60:95:4F:B9:26:CE:6D:DA:9F:A5:C8:E0:3B
X509v3 Authority Key Identifier:
keyid:B3:85:94:14:62:02:E2:F6:C3:45:6B:06:96:FF:18:56:2F:1B:9F:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s4WUFGIC4vbDRWsGlv8YVi8bn4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/d2e826-5acb-47d6-92a4-43bb19f2e53b/1/IcIyZXTtvGCVT7kmzm3an6XI4Ds.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/d2e826-5acb-47d6-92a4-43bb19f2e53b/1/s4WUFGIC4vbDRWsGlv8YVi8bn4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.56.0-193.0.60.255
IPv6:
2001:67c:184::/48
Signature Algorithm: sha256WithRSAEncryption
aa:0e:c3:68:95:b1:c0:33:58:ed:3e:c8:59:5c:2e:fe:d8:23:
0c:37:e4:73:56:83:e6:ae:35:27:dc:55:78:39:1a:5b:e6:fc:
cb:7a:02:22:8b:ae:92:75:e0:16:57:82:1b:48:7e:7a:27:f6:
46:98:99:62:cb:af:c8:0e:cc:c8:71:7e:5c:95:2b:dc:cc:a2:
dc:a1:8c:bc:f5:ba:6a:ef:fc:57:ab:53:ca:28:17:95:3e:f1:
cd:4b:fa:1a:28:ad:9c:6b:17:34:30:91:da:d4:23:20:53:22:
31:ae:55:6b:89:db:cc:ab:18:5e:fd:31:60:22:46:56:33:e5:
e8:5f:5e:23:c4:09:7c:83:ca:9e:60:99:d8:99:ae:88:3a:78:
c8:b1:d9:7f:8e:f5:31:0c:26:01:70:2c:1b:93:e6:1b:91:4d:
02:04:a5:72:c0:da:72:be:62:33:a9:36:63:ea:a1:2e:18:b0:
b5:ea:97:11:30:05:bd:46:3e:c5:f5:f0:ab:b3:68:17:53:f9:
eb:6f:5e:de:41:19:b8:91:5c:8c:6d:e0:bd:ba:0f:d3:fc:ed:
cd:70:a4:c8:d0:a1:9c:2e:76:9c:9a:77:1a:78:d9:e9:6d:28:
ac:0a:97:29:36:96:e6:f0:b9:4c:99:bf:3d:b0:90:86:d4:cd:
0d:4f:5b:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:35:10 2025 by rpki-client