Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/41ccce-acd8-4fb8-b148-a79510e613e8/1/It-Yns2Nwvw18OgbQ81pWbtQZ7M.roa
File: It-Yns2Nwvw18OgbQ81pWbtQZ7M.roa (raw, json)
Hash identifier: 7H+X0erT0owXhcTltBjLEsiIIl6BxhT41pVVMePz04w=
Subject key identifier: 22:DF:98:9E:CD:8D:C2:FC:35:F0:E8:1B:43:CD:69:59:BB:50:67:B3
Certificate issuer: /CN=d4c0d694d59d7d36ba421a3050f4ec7dd3781efd
Certificate serial: 019422FB3F6AB08B9B79EC36A926328964AB
Authority key identifier: D4:C0:D6:94:D5:9D:7D:36:BA:42:1A:30:50:F4:EC:7D:D3:78:1E:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1MDWlNWdfTa6QhowUPTsfdN4Hv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/41ccce-acd8-4fb8-b148-a79510e613e8/1/It-Yns2Nwvw18OgbQ81pWbtQZ7M.roa
Signing time: Wed 01 Jan 2025 17:47:58 +0000
ROA not before: Wed 01 Jan 2025 17:47:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39121
IP address blocks: 193.105.126.0/24 maxlen: 24
195.66.89.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:3f:6a:b0:8b:9b:79:ec:36:a9:26:32:89:64:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4c0d694d59d7d36ba421a3050f4ec7dd3781efd
Validity
Not Before: Jan 1 17:47:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=22df989ecd8dc2fc35f0e81b43cd6959bb5067b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:df:42:e7:ba:89:7b:6d:c2:05:31:61:bc:50:
df:e6:e3:f1:1b:aa:9c:23:59:f3:22:b4:b9:92:1d:
82:99:32:46:af:7b:c6:09:4a:7f:bb:45:0c:b7:9e:
43:f9:85:a4:59:05:b7:19:e5:cd:c4:8c:da:3b:f1:
4d:f0:2b:af:7c:ff:47:39:f4:ea:a2:ff:e4:8e:2b:
15:6a:8e:dc:17:5a:7f:9a:41:5f:15:91:42:e4:c7:
6f:17:9c:0e:59:54:ee:0d:d9:ad:9a:94:9c:ad:3b:
11:18:87:a9:2d:b7:f2:42:24:cb:1d:5c:c1:f1:78:
2d:8b:c4:64:d3:63:72:14:00:94:61:92:49:57:ab:
99:73:b0:8a:fd:e6:8e:a5:0a:9f:e2:d8:cf:ca:fa:
28:ea:20:73:ec:7c:2f:a6:bf:ce:3d:69:88:46:20:
84:10:16:d4:30:56:85:98:e6:71:c0:94:9c:7a:29:
ae:05:a7:e9:e1:1d:bd:03:fd:9d:42:b5:85:c4:a8:
03:ec:0e:c6:ac:b4:15:23:76:c8:d1:4a:f8:c2:56:
76:41:b8:a4:13:0d:c2:db:ce:04:2f:78:2f:b2:98:
c6:9a:6c:ab:67:81:45:09:49:a0:24:e2:88:e1:b9:
bd:41:ae:58:2b:65:90:3f:11:2f:44:c4:12:48:07:
13:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:DF:98:9E:CD:8D:C2:FC:35:F0:E8:1B:43:CD:69:59:BB:50:67:B3
X509v3 Authority Key Identifier:
keyid:D4:C0:D6:94:D5:9D:7D:36:BA:42:1A:30:50:F4:EC:7D:D3:78:1E:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1MDWlNWdfTa6QhowUPTsfdN4Hv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/41ccce-acd8-4fb8-b148-a79510e613e8/1/It-Yns2Nwvw18OgbQ81pWbtQZ7M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/41ccce-acd8-4fb8-b148-a79510e613e8/1/1MDWlNWdfTa6QhowUPTsfdN4Hv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.105.126.0/24
195.66.89.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:4c:e0:54:de:1e:c7:cb:7d:63:e5:cb:cc:8c:3a:a8:74:f8:
22:96:5c:f8:ab:31:e9:27:50:bd:2e:08:65:7e:5b:07:f3:3f:
eb:89:1d:85:bd:b4:84:54:7e:d3:01:0d:53:c9:c7:9b:76:b0:
b1:44:3b:d9:93:94:8b:db:be:8a:5a:d4:af:b1:47:e7:d9:4c:
fe:48:9b:96:d8:5d:72:0a:ef:8c:05:51:0c:ed:54:91:be:36:
9b:07:dc:89:7f:db:3d:81:56:8e:e5:42:02:ee:0f:b9:da:41:
72:6f:6e:02:dd:c7:77:41:45:39:a0:9c:7c:0c:37:3f:da:bc:
f3:6d:c5:dc:7b:46:2c:7a:42:3e:18:70:a0:15:14:52:38:34:
8f:51:6c:f2:72:9d:5e:81:54:23:94:49:75:44:be:9f:61:cb:
34:12:46:08:9d:02:61:44:11:7b:6c:56:30:d8:8a:c4:ad:b0:
09:b8:fa:0d:4c:ae:39:55:d5:ae:ad:f8:1d:e0:79:65:54:f0:
1f:28:04:48:45:de:0f:a5:6b:a8:02:eb:3b:9a:9b:49:c5:38:
7c:76:52:3f:95:dc:c9:61:c6:53:ee:14:d2:a3:ca:c2:c8:de:
34:17:20:10:a3:0f:43:a7:8f:fc:e2:53:5d:02:37:54:7a:9f:
ba:4b:6d:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:47:50 2025 by rpki-client