Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/9vSlYp2cFvhYbAZk6yhlfl9xGsw.roa
File: 9vSlYp2cFvhYbAZk6yhlfl9xGsw.roa (raw, json)
Hash identifier: vYLj1gQ+5EV7GD+TWTC0zTOO1bZGO2gnLMuin02YLZk=
Subject key identifier: F6:F4:A5:62:9D:9C:16:F8:58:6C:06:64:EB:28:65:7E:5F:71:1A:CC
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0194AB243EC75D22E77A97AE16BF7AD5202F
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/9vSlYp2cFvhYbAZk6yhlfl9xGsw.roa
Signing time: Tue 28 Jan 2025 04:21:06 +0000
ROA not before: Tue 28 Jan 2025 04:21:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8100
IP address blocks: 193.124.227.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ab:24:3e:c7:5d:22:e7:7a:97:ae:16:bf:7a:d5:20:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 28 04:21:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f6f4a5629d9c16f8586c0664eb28657e5f711acc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:e9:db:c4:11:86:b7:f2:c9:88:f6:42:66:c4:
e2:8b:e6:f6:4c:d2:5d:00:07:0d:c7:bb:be:08:d1:
61:40:bf:dc:fc:bd:0a:bf:dd:88:7e:ad:45:c6:19:
cb:f5:3c:63:77:27:16:ff:b1:c8:02:c1:33:21:61:
30:7e:cd:5f:63:69:0b:ba:c9:71:71:d7:9c:d9:78:
5e:c8:ab:92:cf:85:e5:98:e0:63:9c:b8:64:e7:02:
f6:73:8b:aa:b8:0c:94:ae:ac:ba:4f:73:8b:f5:ed:
03:b8:05:e9:02:a2:a3:ed:f4:bf:2e:ee:b2:a0:1a:
f3:5c:3d:bc:32:64:f8:39:77:99:bd:db:19:52:17:
ba:94:b8:f7:79:06:0e:f2:7f:d7:64:14:60:f4:09:
d1:4a:62:5f:46:15:08:f2:0e:b6:6a:c4:43:e1:63:
e6:1a:7f:af:fc:4e:ee:7d:1b:f2:e0:6e:67:3b:5b:
93:f0:4d:a9:ed:bd:d8:50:4c:d9:51:be:88:02:38:
39:83:79:45:45:bf:49:74:57:dc:0d:36:ee:34:f4:
4c:14:4a:92:0e:9b:f2:4b:14:27:72:38:4f:ff:fa:
35:f6:58:1d:2a:99:df:d6:3c:fc:48:7f:b0:d8:f2:
d1:36:64:a5:08:90:c7:6d:5d:20:98:45:65:0b:08:
7e:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:F4:A5:62:9D:9C:16:F8:58:6C:06:64:EB:28:65:7E:5F:71:1A:CC
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/9vSlYp2cFvhYbAZk6yhlfl9xGsw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.227.0/24
Signature Algorithm: sha256WithRSAEncryption
52:2e:77:2b:cf:9b:c5:98:53:cd:e1:38:07:04:f6:ae:eb:cd:
9b:72:c6:ac:4e:bf:01:aa:0f:b4:99:ca:2b:1c:bc:41:39:b9:
6b:06:69:51:d6:57:f8:66:a3:17:9e:f6:54:d3:01:c1:a0:0a:
04:80:f4:0c:a5:e3:56:5f:85:0d:dd:dd:38:59:6e:c8:75:d8:
07:fb:39:72:d9:db:a8:92:df:89:16:ad:81:1d:90:44:ea:dc:
66:ce:d5:2a:45:18:1b:80:24:49:00:2b:bd:39:f6:97:f1:d8:
af:72:05:f0:ac:25:8b:d9:13:5d:da:46:c0:73:6c:64:ff:c8:
f9:7c:4c:75:54:80:26:bd:af:ab:2d:3b:db:4b:91:63:0a:4e:
67:7c:8e:72:60:71:f2:58:42:c8:70:1d:8a:aa:e9:3e:8b:51:
d4:12:cc:03:0f:65:88:8b:f6:1d:89:a9:5d:c8:5f:52:b7:2a:
46:04:92:fe:32:a3:6e:40:79:e4:0f:ad:74:d7:d9:7f:03:54:
e6:86:f1:f4:da:8e:bd:87:6e:7f:00:48:16:b6:c0:7b:c9:94:
de:86:2c:0b:4c:6b:7e:f7:bf:a1:a3:ec:db:77:a1:14:f6:70:
27:d3:6a:46:84:9c:bb:96:f7:df:c1:26:47:72:d9:95:ab:fb:
e3:60:8b:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:33:50 2025 by rpki-client