Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/47d213-26da-471a-96cd-c8a9caa3bbe9/1/1-usx18zg0vXovZ69VA6wMJG1snQ.roa
File: 1-usx18zg0vXovZ69VA6wMJG1snQ.roa (raw, json)
Hash identifier: cCydz0/7urXRQoQLYjIuxn5IDBNQFz8a/SIpL/HwR48=
Subject key identifier: FA:EB:31:D7:CC:E0:D2:F5:E8:BD:9E:BD:54:0E:B0:30:91:B5:B2:74
Certificate issuer: /CN=bd92eae9e11699e4ce710580519776c300296162
Certificate serial: 019423D740FCB6F25656806A51925B14F956
Authority key identifier: BD:92:EA:E9:E1:16:99:E4:CE:71:05:80:51:97:76:C3:00:29:61:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vZLq6eEWmeTOcQWAUZd2wwApYWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/47d213-26da-471a-96cd-c8a9caa3bbe9/1/1-usx18zg0vXovZ69VA6wMJG1snQ.roa
Signing time: Wed 01 Jan 2025 21:48:16 +0000
ROA not before: Wed 01 Jan 2025 21:48:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12986
IP address blocks: 193.26.27.0/24 maxlen: 24
194.153.128.0/24 maxlen: 24
2001:67c:218c::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:40:fc:b6:f2:56:56:80:6a:51:92:5b:14:f9:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd92eae9e11699e4ce710580519776c300296162
Validity
Not Before: Jan 1 21:48:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=faeb31d7cce0d2f5e8bd9ebd540eb03091b5b274
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:bb:27:f1:83:cd:5a:b8:c2:33:7c:4d:3d:ee:
33:2b:8e:44:bc:0a:b6:85:b4:5b:6d:20:fe:f3:4e:
f1:f1:3e:50:16:06:ee:e8:75:82:d9:95:86:83:fe:
0d:26:c5:71:50:fb:b2:83:da:79:9f:00:43:72:8d:
43:5e:6a:6d:bf:5d:37:a0:d6:1d:1b:b2:c4:9b:b4:
fb:5e:e7:79:7e:45:86:4c:cf:ea:93:46:61:3d:e2:
bc:62:c9:fb:16:67:68:66:d7:33:86:b4:7d:da:43:
81:ec:3d:a9:c9:35:1f:17:bb:aa:d3:55:5b:d6:5d:
c2:c3:5c:bb:c2:85:08:74:97:9a:b1:b8:3b:7d:4c:
da:8f:8b:ed:77:9e:62:f1:6c:6a:7a:2d:17:b9:b7:
37:c2:13:04:53:af:84:9d:ad:fc:a8:25:50:8e:72:
4b:11:3b:c4:1b:02:44:6d:91:e7:07:35:42:c0:e7:
c5:b4:15:d8:03:17:df:02:55:7f:7b:09:63:5d:0d:
02:cd:d9:15:65:07:f8:84:3c:02:86:e8:c1:52:1a:
bf:ec:6d:94:82:e7:e4:c1:d6:3a:f6:01:d6:d1:92:
8a:75:7e:95:1f:2d:28:1a:d5:b3:28:10:8b:a8:1d:
df:ef:8e:2b:74:24:47:d6:80:fe:3e:d5:78:70:ba:
68:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:EB:31:D7:CC:E0:D2:F5:E8:BD:9E:BD:54:0E:B0:30:91:B5:B2:74
X509v3 Authority Key Identifier:
keyid:BD:92:EA:E9:E1:16:99:E4:CE:71:05:80:51:97:76:C3:00:29:61:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vZLq6eEWmeTOcQWAUZd2wwApYWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/47d213-26da-471a-96cd-c8a9caa3bbe9/1/1-usx18zg0vXovZ69VA6wMJG1snQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/47d213-26da-471a-96cd-c8a9caa3bbe9/1/vZLq6eEWmeTOcQWAUZd2wwApYWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.26.27.0/24
194.153.128.0/24
IPv6:
2001:67c:218c::/48
Signature Algorithm: sha256WithRSAEncryption
26:72:62:c4:3e:a9:a5:44:f0:b8:b0:b5:f5:ee:5d:ed:bc:cf:
2f:d8:67:56:9a:bb:85:40:21:3d:d5:aa:6d:3e:c1:e8:d2:42:
c1:f1:8b:64:58:23:31:30:28:ce:b3:e5:7c:35:6f:d6:bd:cd:
18:8b:be:43:d1:9b:2f:28:e1:6a:9c:87:ac:de:ad:87:5d:0c:
32:68:7f:3c:d4:0d:09:06:8a:44:a8:d8:29:7e:8e:55:9d:e8:
6a:c3:e6:89:8f:0d:6c:57:e1:f9:49:ae:7c:7f:b6:ef:06:e3:
41:43:af:9f:54:5f:24:22:ee:11:de:11:8a:06:a1:00:b6:12:
19:39:ae:e5:a7:42:bf:8b:55:fa:4c:a5:24:07:02:a4:fb:74:
d6:57:a9:4f:3a:f1:7c:c0:70:af:e9:91:b3:51:b3:51:ad:42:
cb:23:eb:28:b2:4d:38:c9:3b:92:04:d6:ef:62:21:af:f8:e1:
6b:7f:5c:0e:40:52:02:8d:a1:1a:56:d5:80:ac:41:8d:0d:43:
26:57:52:1f:e0:ef:a2:f8:41:a4:e4:26:3f:72:65:a4:e9:e0:
7e:42:f9:d5:8c:16:d1:69:93:ac:b4:80:ef:3c:22:4e:a0:fd:
ab:8c:a7:5e:46:af:41:70:d6:d4:e8:f0:c6:0d:46:78:8e:24:
58:64:17:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:42:10 2025 by rpki-client