Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/d4501b-18ea-4280-85a4-9329f9179fda/1/63RWpTzYaUMklcl62HBy6xUd3L4.roa
File: 63RWpTzYaUMklcl62HBy6xUd3L4.roa (raw, json)
Hash identifier: Un1n3GmyQj6VVqYhoRSHcYh85a7qnY1jg5MCSUwKUTc=
Subject key identifier: EB:74:56:A5:3C:D8:69:43:24:95:C9:7A:D8:70:72:EB:15:1D:DC:BE
Certificate issuer: /CN=4a97bc504f3075fb4f39236408c1c2d547b44c26
Certificate serial: 019420D60466EE260B94E86DDBC540E16616
Authority key identifier: 4A:97:BC:50:4F:30:75:FB:4F:39:23:64:08:C1:C2:D5:47:B4:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Spe8UE8wdftPOSNkCMHC1Ue0TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/d4501b-18ea-4280-85a4-9329f9179fda/1/63RWpTzYaUMklcl62HBy6xUd3L4.roa
Signing time: Wed 01 Jan 2025 07:48:04 +0000
ROA not before: Wed 01 Jan 2025 07:48:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15580
IP address blocks: 193.108.175.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:04:66:ee:26:0b:94:e8:6d:db:c5:40:e1:66:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a97bc504f3075fb4f39236408c1c2d547b44c26
Validity
Not Before: Jan 1 07:48:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eb7456a53cd869432495c97ad87072eb151ddcbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:99:46:c1:0e:78:85:6a:14:3c:4b:ea:85:70:
b9:67:cd:9a:07:d3:80:4b:fc:9e:f8:70:6e:0c:46:
52:6b:db:8e:4e:d4:e8:58:40:30:32:09:a4:88:22:
96:f7:49:fd:9a:35:51:93:7c:45:20:5c:4b:21:7b:
75:65:6e:72:d7:43:65:33:82:af:f1:5d:e5:25:de:
88:c2:54:0e:9e:50:f4:39:b3:27:59:70:dd:e1:07:
ff:45:da:b8:11:07:d9:59:a6:00:1e:8b:e8:f4:09:
2d:4d:0e:91:d0:f5:60:a6:fc:65:e7:1f:d9:d4:76:
0b:e5:30:31:1b:13:ff:c4:00:7a:ab:8d:92:02:b3:
08:21:9b:84:fa:95:b0:02:f4:e0:41:6f:5b:40:7f:
fb:1f:05:4f:ee:b7:51:9d:95:fc:ab:bb:72:b2:79:
0e:84:99:1f:0a:22:b8:f6:d1:8c:a4:d3:8c:7c:cb:
fe:46:34:14:89:4e:e6:76:62:71:52:fe:4b:eb:6f:
7f:68:04:16:e7:d8:6e:1d:12:82:fe:20:a5:56:40:
df:1f:a2:f3:1b:58:59:94:e9:f5:62:c8:de:e3:e2:
5d:23:f9:73:bb:8e:54:db:10:16:60:f2:f3:3d:18:
b7:40:4f:c9:9f:18:b7:b7:77:1e:ee:26:d8:63:27:
c1:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:74:56:A5:3C:D8:69:43:24:95:C9:7A:D8:70:72:EB:15:1D:DC:BE
X509v3 Authority Key Identifier:
keyid:4A:97:BC:50:4F:30:75:FB:4F:39:23:64:08:C1:C2:D5:47:B4:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Spe8UE8wdftPOSNkCMHC1Ue0TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/d4501b-18ea-4280-85a4-9329f9179fda/1/63RWpTzYaUMklcl62HBy6xUd3L4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/d4501b-18ea-4280-85a4-9329f9179fda/1/Spe8UE8wdftPOSNkCMHC1Ue0TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.108.175.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:ec:5a:ea:51:bc:07:d9:a5:01:14:2c:1a:ef:c0:80:01:e7:
12:21:fc:03:59:e3:3b:9e:d8:15:c4:69:6b:6d:5f:18:ae:3a:
1d:05:90:ff:81:10:3b:0e:f5:3b:5c:c3:ac:d3:62:99:fe:c2:
ed:64:86:ee:1f:42:6f:cf:de:76:0a:48:31:70:ac:d3:c6:0e:
47:04:73:aa:de:d1:02:e0:b0:78:2f:0f:6b:51:ee:07:df:d7:
3e:05:1d:47:09:31:d2:ef:0c:9b:78:43:29:6c:6c:15:dd:db:
f3:0c:5c:55:3a:4a:d4:ef:fd:5e:00:06:a2:21:70:2e:e7:52:
b9:2f:f4:0a:f3:56:c8:58:8c:67:a1:bd:0e:3f:aa:93:74:26:
81:90:3f:28:22:50:2a:44:98:46:c1:be:bc:b7:19:4b:cd:86:
83:a3:a2:69:22:83:47:bf:d2:73:be:20:81:8e:be:81:fd:c2:
63:a0:d2:87:e4:a9:9a:ce:19:69:29:2c:b0:91:39:9e:c9:78:
0e:9f:af:8a:6e:80:7e:c1:29:01:63:96:3d:7d:d1:13:a6:5e:
ed:fb:01:19:98:ef:44:b8:ae:a1:6e:9c:4b:21:75:68:22:c9:
3f:59:93:87:d9:54:45:66:95:35:29:35:a8:a7:aa:06:32:c2:
b6:ab:2f:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:41:22 2025 by rpki-client