Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/5bab79-afaa-4cdd-bc23-40314fc3d874/1/R2l9RMJ9r-Uxp3JREDEadFHxFJU.roa
File: R2l9RMJ9r-Uxp3JREDEadFHxFJU.roa (raw, json)
Hash identifier: weYAVSG/ZQ3RqDZF3sJtlOJw4FVloRVdNFig6sXWzgw=
Subject key identifier: 47:69:7D:44:C2:7D:AF:E5:31:A7:72:51:10:31:1A:74:51:F1:14:95
Certificate issuer: /CN=8f0064c6f80e0967fbe4e4b8fb24a4143c4857c6
Certificate serial: 019426D9E3947A03116AB026E9300520F177
Authority key identifier: 8F:00:64:C6:F8:0E:09:67:FB:E4:E4:B8:FB:24:A4:14:3C:48:57:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jwBkxvgOCWf75OS4-ySkFDxIV8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/5bab79-afaa-4cdd-bc23-40314fc3d874/1/R2l9RMJ9r-Uxp3JREDEadFHxFJU.roa
Signing time: Thu 02 Jan 2025 11:50:01 +0000
ROA not before: Thu 02 Jan 2025 11:50:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31252
IP address blocks: 193.57.52.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:e3:94:7a:03:11:6a:b0:26:e9:30:05:20:f1:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f0064c6f80e0967fbe4e4b8fb24a4143c4857c6
Validity
Not Before: Jan 2 11:50:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=47697d44c27dafe531a7725110311a7451f11495
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:35:a2:de:f9:79:b8:10:08:df:40:fa:8d:65:
43:f1:25:2f:e8:3b:95:e5:55:20:5c:76:ca:e4:f7:
28:b6:1b:d4:a2:bd:a9:47:c0:08:90:92:c3:24:ac:
ea:ec:2d:71:a4:24:1c:74:15:a0:00:65:d5:2e:0d:
a2:04:51:60:9d:97:db:aa:a2:44:17:80:02:8b:61:
95:7d:c2:35:15:50:d3:37:75:03:32:aa:09:1f:1b:
9b:ff:ec:77:60:42:79:7a:14:f6:e6:2d:e2:f8:53:
64:44:ed:b1:e4:8e:37:a4:5e:cb:d9:52:07:78:3e:
a6:28:29:ce:cd:f8:7c:4e:01:0e:16:77:3f:62:ba:
79:2f:61:df:90:c0:0b:e1:e9:e8:f2:60:e2:0c:f6:
40:02:e6:ae:a4:ff:54:bc:e1:f8:78:63:3f:43:97:
14:51:96:3f:f3:00:25:6f:09:c1:69:b9:6c:32:eb:
f8:b1:b5:17:84:46:22:b3:08:36:ec:04:e7:49:54:
85:54:cf:38:b2:ed:07:6b:be:59:4b:0a:e3:bb:29:
e2:f1:b3:a5:e2:08:4f:ab:51:16:48:76:07:4a:63:
50:9f:24:ea:99:e3:30:8c:4e:5f:47:27:6d:32:91:
d3:ce:83:29:50:a6:e6:90:e0:b0:52:12:b4:23:2d:
ba:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:69:7D:44:C2:7D:AF:E5:31:A7:72:51:10:31:1A:74:51:F1:14:95
X509v3 Authority Key Identifier:
keyid:8F:00:64:C6:F8:0E:09:67:FB:E4:E4:B8:FB:24:A4:14:3C:48:57:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jwBkxvgOCWf75OS4-ySkFDxIV8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/5bab79-afaa-4cdd-bc23-40314fc3d874/1/R2l9RMJ9r-Uxp3JREDEadFHxFJU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/5bab79-afaa-4cdd-bc23-40314fc3d874/1/jwBkxvgOCWf75OS4-ySkFDxIV8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.57.52.0/22
Signature Algorithm: sha256WithRSAEncryption
66:02:4a:3d:e9:3e:f6:b1:61:09:38:18:6d:0d:46:62:d4:99:
3f:a7:37:9c:fb:86:9b:62:7f:5c:0f:e5:17:d6:3e:88:4b:10:
6b:07:24:11:1d:8b:9b:f3:d0:19:39:7e:3f:04:66:55:2b:e7:
7b:f2:7f:4a:b7:a8:53:37:ef:6c:e0:21:bc:c8:5b:74:7a:cc:
da:5e:0d:17:4e:01:b1:6e:6a:eb:2a:64:cb:f1:06:58:a7:19:
9e:a7:95:2f:df:e9:55:80:a0:60:66:78:a9:6e:34:31:04:1c:
1e:de:21:60:da:9f:56:07:40:ce:b7:97:cf:7e:57:cd:42:64:
1a:88:5b:32:37:49:3f:bd:ae:d1:a0:4f:f3:f4:90:09:3b:6e:
82:49:a0:4e:ce:26:63:c4:15:b2:17:1e:e5:f4:1b:ec:2a:e0:
91:e8:ee:5e:47:97:fc:d2:de:0a:05:55:8b:66:6f:3e:6b:11:
b7:d5:99:17:07:5f:73:08:33:82:e1:a4:69:0e:75:92:99:49:
4b:8f:f7:39:80:e6:5b:0f:5f:d0:86:b9:09:12:0b:da:be:d5:
7b:e9:96:cc:ad:16:30:e4:f9:34:66:13:27:00:b2:8f:e3:6f:
25:92:e2:10:fe:9d:05:86:e4:da:20:3b:9d:2c:df:af:e1:58:
4f:b0:e3:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:18:35 2025 by rpki-client