Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/3eecf8-eb04-41ce-a9f6-3a91a613a407/1/on0Eb8DLw5yo7ERsBMlPbYsTuDw.roa
File: on0Eb8DLw5yo7ERsBMlPbYsTuDw.roa (raw, json)
Hash identifier: ItajaA8/b84P6Za11CUhjcsIeCXK2t3vB+hMRKaYKy4=
Subject key identifier: A2:7D:04:6F:C0:CB:C3:9C:A8:EC:44:6C:04:C9:4F:6D:8B:13:B8:3C
Certificate issuer: /CN=004718e7a263ebe45e7706739241ec6d6ae58e74
Certificate serial: 01942143F045AE4846B4887F8FB0BBCFA16C
Authority key identifier: 00:47:18:E7:A2:63:EB:E4:5E:77:06:73:92:41:EC:6D:6A:E5:8E:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AEcY56Jj6-RedwZzkkHsbWrljnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/3eecf8-eb04-41ce-a9f6-3a91a613a407/1/on0Eb8DLw5yo7ERsBMlPbYsTuDw.roa
Signing time: Wed 01 Jan 2025 09:48:08 +0000
ROA not before: Wed 01 Jan 2025 09:48:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 28907
IP address blocks: 193.107.200.0/22 maxlen: 24
193.107.203.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:f0:45:ae:48:46:b4:88:7f:8f:b0:bb:cf:a1:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=004718e7a263ebe45e7706739241ec6d6ae58e74
Validity
Not Before: Jan 1 09:48:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a27d046fc0cbc39ca8ec446c04c94f6d8b13b83c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:21:ba:e7:cf:07:80:20:cc:cc:07:e4:94:2e:
44:e1:7c:22:c6:79:1c:a3:36:bd:f9:00:6e:60:0d:
f1:9c:c8:c9:a4:8b:4e:be:1d:f9:2e:2e:1a:18:7e:
7f:c5:da:56:51:b3:fb:3d:20:2d:4b:ac:8a:21:41:
f5:c8:4d:c1:96:3e:7f:61:03:01:d1:4b:e0:59:9e:
4a:a8:6f:7a:dd:fb:95:1d:dc:8d:38:93:50:19:97:
54:1f:3b:ec:14:e6:d1:e2:d7:a9:6d:43:2b:8c:91:
85:be:95:73:a2:b0:46:0a:44:ad:a4:f2:9d:03:b4:
54:dd:da:b8:9e:3a:d0:b7:2a:42:84:0f:f5:4d:73:
af:bf:64:6f:e5:3f:36:80:80:54:f1:d5:1a:a3:a6:
f4:85:92:08:8c:ca:fa:90:56:49:a1:48:bb:fb:31:
79:3c:60:d2:24:5e:d8:c5:0c:35:74:ac:78:5d:66:
4b:7c:5d:f9:dd:57:9d:c0:fe:58:eb:c8:93:69:9b:
9d:25:55:ab:0d:5b:a3:a5:48:10:86:85:bd:c7:92:
8a:19:88:99:69:d8:6c:3d:33:00:9d:41:4f:87:1d:
3c:f4:89:01:34:b2:21:15:26:d1:41:80:ba:3e:82:
df:b9:c0:f7:ac:14:34:4d:cb:97:cc:18:1d:5f:a1:
82:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:7D:04:6F:C0:CB:C3:9C:A8:EC:44:6C:04:C9:4F:6D:8B:13:B8:3C
X509v3 Authority Key Identifier:
keyid:00:47:18:E7:A2:63:EB:E4:5E:77:06:73:92:41:EC:6D:6A:E5:8E:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AEcY56Jj6-RedwZzkkHsbWrljnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/3eecf8-eb04-41ce-a9f6-3a91a613a407/1/on0Eb8DLw5yo7ERsBMlPbYsTuDw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/3eecf8-eb04-41ce-a9f6-3a91a613a407/1/AEcY56Jj6-RedwZzkkHsbWrljnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.107.200.0/22
Signature Algorithm: sha256WithRSAEncryption
56:c4:5c:ed:e7:bd:ec:9b:31:85:ab:31:37:0e:02:20:5e:ae:
93:5f:8a:d1:49:44:fd:02:74:ea:c0:e7:ce:16:19:7b:42:23:
cb:a7:22:6b:c6:08:b0:92:40:80:9b:d0:9c:a0:a8:89:cd:e2:
e7:f7:d2:39:33:76:5f:b9:30:c5:ad:8d:10:5c:6b:a4:dd:5e:
64:73:2e:60:6d:fd:f0:a7:08:fd:d9:e5:61:90:2d:d3:ca:1f:
aa:9a:57:9b:06:b2:eb:fe:94:4f:d8:44:ed:ad:c3:43:9a:2e:
e3:9c:8a:e0:45:f6:07:2b:de:8b:15:db:1d:c6:c3:ac:36:6d:
fb:ea:19:a7:c2:48:fa:e2:c7:a9:ab:48:a4:64:81:72:8f:55:
ec:b5:41:10:f5:14:9c:8a:c3:d6:db:7a:fe:4e:7a:cd:f8:14:
5a:7b:7a:2e:ea:0e:c6:48:c6:7d:1d:9a:d6:23:70:3e:db:81:
a9:52:a5:da:88:e9:67:f0:a9:5d:67:00:f4:6f:c1:95:64:2c:
87:8b:48:29:4e:31:9d:a4:ea:e8:94:0d:8e:31:39:a9:5e:71:
dc:2a:dd:45:a1:d3:d0:8a:40:c1:bb:fe:0a:0b:47:7f:85:a2:
2f:dc:f1:87:cc:9a:eb:3c:a5:86:c2:47:66:c5:b9:1d:a4:11:
45:eb:2e:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:24:25 2025 by rpki-client