Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/a7568f-440b-4a9e-bb3a-3ee1e6991269/1/r2RlHTThmtNG4nl2-ZXIiVZ51nQ.roa
File: r2RlHTThmtNG4nl2-ZXIiVZ51nQ.roa (raw, json)
Hash identifier: GKWFo62wVPaicbH3wRKatj9Dg7f4fzo4X4faRV/0xFc=
Subject key identifier: AF:64:65:1D:34:E1:9A:D3:46:E2:79:76:F9:95:C8:89:56:79:D6:74
Certificate issuer: /CN=cc7ac47a19f66f418397eea5fef15a07ff2c0023
Certificate serial: 0194258F4C7C213F7032588290A2F5138B33
Authority key identifier: CC:7A:C4:7A:19:F6:6F:41:83:97:EE:A5:FE:F1:5A:07:FF:2C:00:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zHrEehn2b0GDl-6l_vFaB_8sACM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/a7568f-440b-4a9e-bb3a-3ee1e6991269/1/r2RlHTThmtNG4nl2-ZXIiVZ51nQ.roa
Signing time: Thu 02 Jan 2025 05:48:55 +0000
ROA not before: Thu 02 Jan 2025 05:48:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213334
IP address blocks: 193.176.81.0/24 maxlen: 24
193.176.82.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:4c:7c:21:3f:70:32:58:82:90:a2:f5:13:8b:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc7ac47a19f66f418397eea5fef15a07ff2c0023
Validity
Not Before: Jan 2 05:48:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=af64651d34e19ad346e27976f995c8895679d674
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:f8:0f:c3:08:32:97:8f:6b:21:60:3d:35:3b:
5f:64:06:89:d3:87:57:79:39:53:dd:c1:10:e5:bd:
f1:53:11:21:3e:fb:f8:fd:f3:a4:d4:3d:e2:d1:bd:
4f:d4:ef:e2:69:5a:8d:b7:5e:96:29:d3:b3:fb:1f:
11:ad:fc:99:18:7f:0c:5b:1f:5c:07:f4:3a:83:8d:
96:e3:96:a1:24:33:27:cd:66:42:f0:35:59:69:b5:
55:4b:7f:b3:12:32:fd:e5:c8:e5:a0:72:a1:44:4c:
9f:df:1c:77:0e:31:9f:80:20:e5:64:ec:9b:23:62:
c2:dd:2d:83:43:53:9e:55:97:2f:cb:79:03:f9:05:
d0:32:ff:fa:bc:a7:da:6c:74:7f:bb:b0:08:13:4f:
9e:15:9d:10:b0:30:0f:72:68:58:a1:66:f7:a2:a4:
30:21:9e:40:e2:fd:95:80:55:0f:49:fd:f0:e5:15:
60:c9:13:be:77:a3:8f:14:e2:0d:b8:6d:fe:70:aa:
24:8a:7a:73:41:79:bc:e5:2c:b4:dc:7d:5c:2e:55:
8a:aa:c4:0f:1d:cc:66:c1:ee:b0:5b:44:ce:f0:22:
55:cd:9e:6e:ee:50:bd:a0:96:bd:3e:6d:bb:57:c4:
84:69:ab:cf:50:6a:bd:51:62:cf:65:a7:62:11:e2:
09:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:64:65:1D:34:E1:9A:D3:46:E2:79:76:F9:95:C8:89:56:79:D6:74
X509v3 Authority Key Identifier:
keyid:CC:7A:C4:7A:19:F6:6F:41:83:97:EE:A5:FE:F1:5A:07:FF:2C:00:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zHrEehn2b0GDl-6l_vFaB_8sACM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a7568f-440b-4a9e-bb3a-3ee1e6991269/1/r2RlHTThmtNG4nl2-ZXIiVZ51nQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a7568f-440b-4a9e-bb3a-3ee1e6991269/1/zHrEehn2b0GDl-6l_vFaB_8sACM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.176.81.0-193.176.82.255
Signature Algorithm: sha256WithRSAEncryption
9c:2b:d5:ff:25:a9:81:b5:d0:d7:7e:ae:8b:a4:3f:92:3f:1d:
b5:e2:4d:b1:1c:0b:7a:77:0b:ad:68:40:1c:23:53:56:e2:89:
f3:c5:9b:0e:ba:2e:ba:70:fc:b7:36:f2:c5:f7:ee:74:0c:4d:
4e:a2:6f:cf:df:a8:38:dd:a1:63:96:6c:68:9a:44:1c:2c:91:
24:e0:9e:90:6f:5d:e7:ed:f4:5a:11:fd:05:4b:26:4e:e8:0e:
0b:44:1d:9b:dd:5a:25:fc:91:8b:ba:2d:d8:19:ce:a9:d2:6e:
3c:2a:74:4f:1c:8e:b6:4f:23:d3:ef:7e:ef:77:3c:96:ea:47:
75:d5:b0:b7:6d:fa:2f:84:32:31:b7:19:f0:e3:e6:1c:05:c4:
95:31:dc:57:fc:6a:01:02:c5:18:3e:24:87:90:f2:2e:50:b1:
c5:4d:e6:41:93:a5:03:21:07:d3:b3:80:f9:59:94:56:de:0b:
29:0f:c3:25:f5:f6:9d:87:dd:e4:c6:12:4a:90:cc:ff:09:58:
4d:df:cf:b4:24:71:3d:66:24:4d:7a:ca:7c:5d:8f:3a:59:b2:
dc:3d:91:25:f7:81:18:ac:6c:fe:56:f4:14:4b:d1:5a:1d:19:
c1:87:2a:bb:e0:19:30:87:ce:3e:90:cc:0c:d3:f5:f4:1e:d3:
93:66:e0:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:49:18 2025 by rpki-client