Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/a34200-4b9b-4334-a159-9cb296301e64/1/kDBI9l_YMVWuxKarh0cfBt-co8E.roa
File: kDBI9l_YMVWuxKarh0cfBt-co8E.roa (raw, json)
Hash identifier: Cmec62sAgGLnTuvkkeIcYM85TIkQ74UMRSA2arV5eDI=
Subject key identifier: 90:30:48:F6:5F:D8:31:55:AE:C4:A6:AB:87:47:1F:06:DF:9C:A3:C1
Certificate issuer: /CN=e33d9ffdac58e7612b095144fec06ba2585aa6a8
Certificate serial: 0194221F999B700D035BDF859100A0D8BAA9
Authority key identifier: E3:3D:9F:FD:AC:58:E7:61:2B:09:51:44:FE:C0:6B:A2:58:5A:A6:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4z2f_axY52ErCVFE_sBrolhapqg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/a34200-4b9b-4334-a159-9cb296301e64/1/kDBI9l_YMVWuxKarh0cfBt-co8E.roa
Signing time: Wed 01 Jan 2025 13:48:03 +0000
ROA not before: Wed 01 Jan 2025 13:48:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3215
IP address blocks: 193.163.99.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:99:9b:70:0d:03:5b:df:85:91:00:a0:d8:ba:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e33d9ffdac58e7612b095144fec06ba2585aa6a8
Validity
Not Before: Jan 1 13:48:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=903048f65fd83155aec4a6ab87471f06df9ca3c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ee:6a:ae:3a:d3:58:43:60:da:26:41:e6:68:
ca:fa:1a:40:71:65:6c:96:88:05:fc:3c:5c:6b:34:
a7:5a:b0:5b:38:d2:09:14:3f:9c:51:6c:ba:58:12:
42:a5:59:0e:66:6b:7e:b1:6b:18:ea:ac:3a:84:c4:
f6:4b:15:e4:05:a8:26:03:1b:72:96:04:11:d7:30:
d7:f2:6b:f1:cc:1a:d7:04:12:94:f5:7c:f8:ab:67:
ee:f1:99:9b:ed:b6:84:1d:38:e7:38:3c:55:1c:55:
58:56:d8:a8:a6:a9:c0:66:02:20:9b:d0:0b:09:fe:
54:38:56:be:88:3b:c2:b4:da:8e:8a:0f:f3:61:86:
f9:09:d9:ac:80:ee:d2:af:96:1f:4a:d6:7d:96:31:
92:0d:eb:6b:b7:be:de:47:aa:60:48:03:fb:fa:3f:
6c:b3:c9:89:d0:40:27:09:5a:98:e1:38:e1:9a:ec:
6a:dd:4c:40:88:04:0e:f0:77:45:15:73:2c:77:99:
3c:87:95:9c:cd:1d:49:ac:ea:77:a9:62:2e:23:a8:
90:99:99:70:48:19:f1:4a:4f:b1:52:56:7b:8d:a5:
0b:c5:84:ce:27:44:f5:87:b6:49:5c:20:47:ad:1d:
06:c8:c0:3a:6d:9b:28:97:10:cb:46:fb:8f:12:72:
72:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:30:48:F6:5F:D8:31:55:AE:C4:A6:AB:87:47:1F:06:DF:9C:A3:C1
X509v3 Authority Key Identifier:
keyid:E3:3D:9F:FD:AC:58:E7:61:2B:09:51:44:FE:C0:6B:A2:58:5A:A6:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4z2f_axY52ErCVFE_sBrolhapqg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a34200-4b9b-4334-a159-9cb296301e64/1/kDBI9l_YMVWuxKarh0cfBt-co8E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a34200-4b9b-4334-a159-9cb296301e64/1/4z2f_axY52ErCVFE_sBrolhapqg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.163.99.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:b0:b2:fd:0b:f0:27:8b:60:a3:34:46:a2:33:55:a8:a1:56:
96:3e:7d:c0:c2:8e:30:6a:e9:bd:19:6f:08:cb:b5:27:22:2b:
67:5e:4b:bf:81:d5:8c:c4:55:12:69:ce:9f:bd:ec:f9:7e:3c:
03:4c:12:f1:40:39:40:85:59:c1:ca:0f:8d:10:e5:1f:c5:f9:
7c:24:34:ab:76:54:7b:28:f8:54:40:dd:b7:12:41:f8:59:97:
df:7c:ae:8b:3f:80:0d:ba:f1:31:97:e8:17:fa:c6:00:b1:28:
af:82:63:cd:a5:c1:99:8a:73:7d:1b:09:a0:d8:33:07:92:6c:
99:43:c3:60:bc:69:30:64:eb:22:86:69:9a:cd:1b:42:be:ad:
dd:dc:d5:2c:c6:f6:fc:a8:82:38:2c:c0:9e:7a:b3:d9:9c:85:
f4:28:8d:92:fc:ec:cb:40:5e:0d:e4:98:db:2b:d6:1b:72:16:
8b:f7:e3:b3:f0:6c:d7:1b:9a:b0:69:97:dd:7e:8a:8c:ca:0c:
f1:c0:6a:c6:f4:6e:91:90:80:90:02:31:95:d1:8f:cc:9d:0c:
08:d7:3f:f8:66:38:13:9f:00:32:bf:c1:6d:87:4f:06:1e:2d:
fc:e5:90:0d:19:aa:c9:f8:83:1a:af:52:e4:85:f0:46:c1:26:
74:a6:61:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:15:42 2025 by rpki-client