Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/f8e8e5-692b-40a9-b32f-394c47ff45ae/1/p8T_kCS-MYJ8fc4C7hUc5E1T1qg.roa
File: p8T_kCS-MYJ8fc4C7hUc5E1T1qg.roa (raw, json)
Hash identifier: CHS1S8lMOJ2pkxab6trVxWbo2qQA5JXICjYrqXb1IdY=
Subject key identifier: A7:C4:FF:90:24:BE:31:82:7C:7D:CE:02:EE:15:1C:E4:4D:53:D6:A8
Certificate issuer: /CN=869ab33046862ab58405e5e927ddf41272dfc714
Certificate serial: 01941F8C0246422C7C5F8CD49996D24DFCCD
Authority key identifier: 86:9A:B3:30:46:86:2A:B5:84:05:E5:E9:27:DD:F4:12:72:DF:C7:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hpqzMEaGKrWEBeXpJ930EnLfxxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/f8e8e5-692b-40a9-b32f-394c47ff45ae/1/p8T_kCS-MYJ8fc4C7hUc5E1T1qg.roa
Signing time: Wed 01 Jan 2025 01:47:36 +0000
ROA not before: Wed 01 Jan 2025 01:47:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42274
IP address blocks: 91.192.12.0/22 maxlen: 22
193.111.44.0/24 maxlen: 24
193.111.56.0/22 maxlen: 22
193.111.56.0/24 maxlen: 24
2001:67c:36c::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:02:46:42:2c:7c:5f:8c:d4:99:96:d2:4d:fc:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=869ab33046862ab58405e5e927ddf41272dfc714
Validity
Not Before: Jan 1 01:47:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a7c4ff9024be31827c7dce02ee151ce44d53d6a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:b1:23:44:87:b2:fd:fc:62:92:bb:16:dc:94:
17:a5:97:f9:e0:c0:dd:f8:8c:22:52:81:b4:13:d8:
02:04:6e:df:5f:44:6b:76:18:c2:af:a8:02:d8:de:
24:6e:4c:f8:50:f7:4f:69:37:c6:ae:13:98:c6:dd:
6c:e4:b5:3e:cb:3f:5e:12:d3:3b:12:b4:dd:9d:d7:
bf:73:50:52:1e:28:a7:5b:25:6e:41:f9:eb:94:01:
ac:a1:bd:64:4e:f8:45:96:51:24:28:34:ac:0b:86:
0b:f7:7b:b1:4d:82:9c:c4:08:e8:14:bc:69:73:26:
67:2a:47:15:34:7b:04:8c:8c:a3:93:56:16:cd:9d:
83:3e:e8:de:b9:b2:9b:a4:05:66:a1:3c:dd:9b:25:
35:f5:8b:77:06:69:e9:9b:f9:ed:cb:c2:e8:91:ad:
08:07:24:30:c1:f9:ae:9b:6b:40:85:99:e7:30:92:
83:ac:99:59:d2:ae:1a:0d:d8:1d:d9:e9:6f:08:ad:
71:56:80:2b:ac:fa:82:0c:ec:45:ee:ec:c7:6d:8f:
13:9d:51:69:68:0b:db:0a:94:a7:ca:e9:8d:b5:1e:
aa:80:78:1f:96:9e:32:88:49:29:70:9f:43:31:ab:
bd:8e:8d:31:cf:4e:fb:16:db:ff:c4:ee:5d:fc:b8:
e0:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:C4:FF:90:24:BE:31:82:7C:7D:CE:02:EE:15:1C:E4:4D:53:D6:A8
X509v3 Authority Key Identifier:
keyid:86:9A:B3:30:46:86:2A:B5:84:05:E5:E9:27:DD:F4:12:72:DF:C7:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hpqzMEaGKrWEBeXpJ930EnLfxxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/f8e8e5-692b-40a9-b32f-394c47ff45ae/1/p8T_kCS-MYJ8fc4C7hUc5E1T1qg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/f8e8e5-692b-40a9-b32f-394c47ff45ae/1/hpqzMEaGKrWEBeXpJ930EnLfxxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.192.12.0/22
193.111.44.0/24
193.111.56.0/22
IPv6:
2001:67c:36c::/48
Signature Algorithm: sha256WithRSAEncryption
21:e1:ca:0c:b3:d2:4b:33:b1:04:b3:5b:87:27:94:64:26:b6:
fa:8e:8b:dc:c9:f2:46:d9:af:75:83:85:ac:fe:c1:68:e3:92:
1e:a6:1a:10:f7:41:81:c6:ad:b5:9c:75:b8:95:d6:9c:19:e6:
6f:32:26:9d:6b:a7:f5:f6:3c:99:5d:81:68:30:da:10:78:b8:
ce:f1:42:de:a3:c1:2f:7b:b6:e5:d0:c3:60:17:ff:d4:95:e9:
46:c9:22:c9:eb:4e:70:22:cd:be:99:15:ca:10:88:59:70:6b:
55:13:0f:01:46:34:8b:f4:a7:38:98:79:3c:20:ee:f6:b9:f6:
6f:20:97:80:d5:86:59:91:4a:31:94:f1:e8:3a:c0:10:bb:56:
f0:2a:3a:73:cd:15:b6:7c:be:98:f7:5a:f9:c3:68:cc:5d:a5:
8b:18:cd:a8:87:51:94:ef:94:e3:86:dc:b0:9f:d6:41:2a:f4:
d6:58:e3:a9:48:17:3e:10:f8:02:63:c4:f3:6c:09:48:87:13:
70:ca:7a:ee:a2:2b:3c:f6:5a:86:f8:9d:b0:ca:38:6c:b9:34:
a7:4a:00:0e:87:03:1d:4e:f2:bd:15:6e:b4:56:09:de:31:53:
ca:54:6a:07:a6:9e:e2:de:42:ea:d2:5d:5f:b6:c4:fb:d6:1b:
b5:fc:07:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:51:47 2025 by rpki-client