Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/338d33-72c6-4802-aefe-70e60edbc1e7/1/fIxoY-fKz3QLFhIfT-AmwQWcEB0.roa
File: fIxoY-fKz3QLFhIfT-AmwQWcEB0.roa (raw, json)
Hash identifier: 6Ji4KJM6oBtjO9Pzhwf19OTNTLmIDSqTSnb+aKfxDkY=
Subject key identifier: 7C:8C:68:63:E7:CA:CF:74:0B:16:12:1F:4F:E0:26:C1:05:9C:10:1D
Certificate issuer: /CN=64465a8a1e8e42f1a60d278198c320aec0f3f7dc
Certificate serial: 01942369800BF90C2861A4C71BBA8EB15A47
Authority key identifier: 64:46:5A:8A:1E:8E:42:F1:A6:0D:27:81:98:C3:20:AE:C0:F3:F7:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZEZaih6OQvGmDSeBmMMgrsDz99w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/338d33-72c6-4802-aefe-70e60edbc1e7/1/fIxoY-fKz3QLFhIfT-AmwQWcEB0.roa
Signing time: Wed 01 Jan 2025 19:48:24 +0000
ROA not before: Wed 01 Jan 2025 19:48:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202049
IP address blocks: 193.162.134.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:80:0b:f9:0c:28:61:a4:c7:1b:ba:8e:b1:5a:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64465a8a1e8e42f1a60d278198c320aec0f3f7dc
Validity
Not Before: Jan 1 19:48:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7c8c6863e7cacf740b16121f4fe026c1059c101d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:b3:e1:54:1b:dc:a9:7f:7e:f7:33:99:13:07:
63:36:e0:30:ed:85:b9:b7:be:80:bd:28:68:4d:c8:
b8:d9:b7:75:48:9c:e6:18:46:5f:9d:97:5e:d1:4c:
e2:66:7b:ab:87:c9:d8:3c:dd:76:9b:f7:4d:a9:07:
6f:5f:d2:76:84:11:f9:ee:0d:6c:8d:f8:e5:ad:60:
9c:8f:97:d2:a3:30:2e:3d:cb:b0:08:91:fe:7b:38:
8a:28:f9:a1:cf:a7:e6:fa:60:11:56:1d:91:eb:c5:
89:38:99:ee:c0:2d:38:78:8f:26:b8:e3:77:ea:0f:
76:a1:49:e8:b4:04:ac:d8:88:46:03:51:11:e3:e5:
5e:13:d2:f6:f0:bc:e1:9b:48:e6:c3:80:0f:3d:d4:
be:b5:51:27:a6:13:d8:8c:9b:c5:b6:6e:bb:ca:c8:
8d:e0:be:39:61:40:61:0a:d2:07:5f:20:dd:f2:2e:
37:ff:67:7e:d8:ac:b0:ca:29:16:7c:80:23:d7:43:
3d:b5:79:78:97:94:22:38:2c:88:54:50:ff:bd:55:
67:5e:b1:07:12:8d:52:dd:de:a1:b1:2a:18:77:ea:
c5:7c:26:05:e4:cc:c2:cc:11:a5:22:52:a9:c0:29:
03:89:f7:5f:f0:93:40:0f:50:8d:2d:1a:7c:5d:28:
c4:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:8C:68:63:E7:CA:CF:74:0B:16:12:1F:4F:E0:26:C1:05:9C:10:1D
X509v3 Authority Key Identifier:
keyid:64:46:5A:8A:1E:8E:42:F1:A6:0D:27:81:98:C3:20:AE:C0:F3:F7:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZEZaih6OQvGmDSeBmMMgrsDz99w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/338d33-72c6-4802-aefe-70e60edbc1e7/1/fIxoY-fKz3QLFhIfT-AmwQWcEB0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/338d33-72c6-4802-aefe-70e60edbc1e7/1/ZEZaih6OQvGmDSeBmMMgrsDz99w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.162.134.0/24
Signature Algorithm: sha256WithRSAEncryption
83:ad:15:c7:f3:b2:1e:49:6c:dd:67:d5:43:a9:b0:4b:ae:19:
1b:c8:b0:9d:87:8e:9f:b6:7f:a2:7e:ab:e5:02:0d:94:2e:e8:
15:8d:87:44:21:53:03:ec:e0:4b:7b:c9:a8:52:1d:3a:12:50:
aa:b7:12:09:bc:6d:bd:b4:a9:d5:76:d9:b7:c4:b8:cc:7f:b1:
01:2f:91:30:be:62:cc:0c:b2:52:f8:06:68:f4:68:e2:0a:a9:
4b:10:d0:42:83:65:4e:61:32:23:2f:8f:a6:48:81:c0:80:20:
f9:e0:db:ba:63:0c:bd:d6:60:59:d4:33:b6:d6:9e:cb:77:2d:
8a:20:44:db:58:65:93:20:4a:d1:fc:bf:01:75:45:2b:03:62:
6a:fe:ca:46:2b:b5:87:5b:07:40:e5:cf:43:29:c2:52:5b:79:
f0:a5:03:39:eb:43:08:d9:d7:16:f5:b1:45:75:61:8f:47:88:
87:47:05:dd:90:89:35:f9:29:29:d6:4e:dc:07:8a:55:ac:b9:
d9:92:43:03:2f:2f:59:b3:c1:8a:18:b7:be:5f:fd:85:92:55:
79:50:b8:ec:5b:48:db:fd:25:b7:d2:47:f7:9b:2a:73:28:9b:
59:83:fb:8d:c9:58:12:eb:34:9e:6a:7d:b7:94:1c:cc:47:24:
50:42:cb:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:46:09 2025 by rpki-client