Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/39GkTeN7xllvjvwMfsJzEWZMD-Y.roa
File: 39GkTeN7xllvjvwMfsJzEWZMD-Y.roa (raw, json)
Hash identifier: RBRTUJP+IANg/LUyLZM/+sNbdKDlnwlwm1SjtEZPWm8=
Subject key identifier: DF:D1:A4:4D:E3:7B:C6:59:6F:8E:FC:0C:7E:C2:73:11:66:4C:0F:E6
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 019422202F89C79DA1B71D5F5B1EF3FAC1EF
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/39GkTeN7xllvjvwMfsJzEWZMD-Y.roa
Signing time: Wed 01 Jan 2025 13:48:42 +0000
ROA not before: Wed 01 Jan 2025 13:48:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 64267
IP address blocks: 193.58.144.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:2f:89:c7:9d:a1:b7:1d:5f:5b:1e:f3:fa:c1:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 1 13:48:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dfd1a44de37bc6596f8efc0c7ec27311664c0fe6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:eb:0c:52:e1:a3:26:80:7f:5a:70:82:ee:97:
de:d1:87:a0:3e:5a:1b:a9:15:91:8f:82:01:be:76:
f9:59:4b:5d:24:45:53:a9:6c:65:3e:8c:57:15:52:
bf:7f:55:69:fe:cd:de:92:3b:b1:87:34:65:0e:1b:
3d:96:71:c1:00:86:a0:d2:80:97:ed:b8:08:49:fe:
89:8a:fd:e2:9b:4f:95:6a:c8:fc:9a:df:81:db:10:
cb:b5:be:6b:4e:f7:1e:9c:8b:f7:85:9e:9f:d0:54:
40:5d:d8:6e:87:24:41:2b:b9:46:f0:49:ce:b9:ef:
a8:e6:bd:db:27:11:c8:ff:ac:86:e5:6a:5a:c0:1d:
cd:1f:14:34:a4:b0:7e:5e:3e:19:a0:18:12:10:05:
bb:8b:ab:3c:5f:17:1e:93:fa:dc:de:11:72:39:a3:
a1:ee:be:ef:2b:36:1b:5e:b3:49:bc:c7:46:c0:0f:
f3:2d:79:be:c9:28:c2:38:30:be:80:ab:e1:ea:5a:
89:e3:c3:6f:d4:7e:da:e2:a8:b2:74:3e:af:46:5f:
4f:f1:ce:2e:68:27:ed:15:f7:59:5c:da:73:2e:35:
2a:81:57:fb:54:33:ff:28:47:f1:c0:b4:85:6e:60:
4c:40:8a:9e:e7:3b:65:58:77:52:7c:39:6a:6a:ee:
60:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:D1:A4:4D:E3:7B:C6:59:6F:8E:FC:0C:7E:C2:73:11:66:4C:0F:E6
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/39GkTeN7xllvjvwMfsJzEWZMD-Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.58.144.0/24
Signature Algorithm: sha256WithRSAEncryption
46:4d:34:30:48:dc:28:69:b2:99:f7:22:64:03:18:2c:d7:08:
2b:04:6e:b8:d4:bb:a2:d7:6f:f1:f5:a6:c5:6a:0c:9a:42:a6:
96:7f:ec:fa:e5:d6:c9:ac:0e:80:81:53:e3:88:78:64:e7:58:
21:0c:a8:40:08:03:b1:fb:e4:88:3e:e5:56:97:ac:54:b3:9c:
09:c2:f7:cf:65:dd:0d:45:1a:a2:f5:d5:fb:85:e8:2e:82:03:
09:ad:58:44:84:10:6c:81:e7:62:07:90:fb:d0:e3:ca:05:8d:
1b:ac:7c:22:9d:87:92:50:db:69:3b:59:be:b3:3d:17:fd:2e:
ae:4b:6d:9a:01:2f:af:8f:35:a8:ae:7b:c0:72:e4:c3:8f:1b:
b5:4b:63:f0:f6:83:0e:5c:fd:b9:e6:a9:43:1f:16:1b:61:8d:
d5:5f:d0:7f:ea:98:77:c7:1c:77:5d:98:01:07:0d:32:7f:dd:
39:33:10:77:eb:eb:ca:1d:62:7c:49:8a:29:bd:2e:08:9f:41:
2f:2e:66:51:5e:15:28:19:e9:76:01:19:31:65:1f:14:49:c2:
c5:7f:b0:81:65:da:c6:a7:2b:c5:ac:25:58:1f:25:86:da:61:
d1:b5:78:d7:b3:a9:02:65:65:07:bc:28:7b:4c:94:3f:d3:2d:
4f:7d:f5:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:18:35 2025 by rpki-client