Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/fb7864-5795-4208-abe0-08542454d16b/1/9v5VLNQmHUC6c_AtiguXiv9VBlw.roa
File: 9v5VLNQmHUC6c_AtiguXiv9VBlw.roa (raw, json)
Hash identifier: iNy4HwSBG8Jz28fsrZBO8bxra5HKthytWN8pQ51S61o=
Subject key identifier: F6:FE:55:2C:D4:26:1D:40:BA:73:F0:2D:8A:0B:97:8A:FF:55:06:5C
Certificate issuer: /CN=9e505f2e67a1e604b3f963ce4c367d1958bd4b78
Certificate serial: 0194221FAD57EAF4F389199E5656AA8D5CE3
Authority key identifier: 9E:50:5F:2E:67:A1:E6:04:B3:F9:63:CE:4C:36:7D:19:58:BD:4B:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nlBfLmeh5gSz-WPOTDZ9GVi9S3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/fb7864-5795-4208-abe0-08542454d16b/1/9v5VLNQmHUC6c_AtiguXiv9VBlw.roa
Signing time: Wed 01 Jan 2025 13:48:08 +0000
ROA not before: Wed 01 Jan 2025 13:48:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50030
IP address blocks: 193.111.212.0/22 maxlen: 24
2001:678:9b0::/48 maxlen: 48
2001:678:9c0::/48 maxlen: 48
2001:67c:2878::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:ad:57:ea:f4:f3:89:19:9e:56:56:aa:8d:5c:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e505f2e67a1e604b3f963ce4c367d1958bd4b78
Validity
Not Before: Jan 1 13:48:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f6fe552cd4261d40ba73f02d8a0b978aff55065c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:33:3b:85:9b:fd:69:dd:c2:81:70:f0:4c:32:
7a:7f:44:bb:fd:0d:bd:7c:0d:c0:55:30:af:63:3a:
50:a4:d9:9a:0c:74:9e:87:74:61:38:bd:2d:0b:28:
3a:d9:a3:ca:96:02:8a:f6:51:03:cc:ef:ee:4f:29:
d5:dc:a6:10:16:e0:b1:e2:99:29:f0:06:15:57:f0:
14:f6:14:1d:99:26:02:84:db:12:5e:51:e1:98:6a:
54:aa:97:15:30:48:49:00:35:41:98:9a:8f:07:48:
0a:76:3f:5f:8e:7c:11:b2:d0:1f:a4:61:18:07:52:
4e:c4:ef:e1:ce:4b:29:a8:bc:4f:c3:9d:3f:fc:8c:
76:b3:b5:f7:4b:a6:68:6d:2a:f4:82:22:e5:65:dd:
e2:d5:32:b6:91:9c:b9:e7:f3:28:54:cd:cb:03:cf:
55:3e:16:ac:33:fe:f4:21:50:1a:84:d0:41:93:67:
45:c2:f9:51:24:c3:d6:54:6a:1d:8d:de:41:cf:fd:
25:47:ad:5d:68:b2:75:20:84:63:8b:98:a0:03:2a:
f6:79:b1:b5:eb:3e:88:82:32:91:e3:69:84:a5:f1:
14:40:68:61:8f:6a:7e:4c:ce:2e:a5:95:0b:39:83:
8a:02:5d:4d:52:0a:7c:f5:0d:f8:50:9f:b8:87:1d:
aa:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:FE:55:2C:D4:26:1D:40:BA:73:F0:2D:8A:0B:97:8A:FF:55:06:5C
X509v3 Authority Key Identifier:
keyid:9E:50:5F:2E:67:A1:E6:04:B3:F9:63:CE:4C:36:7D:19:58:BD:4B:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nlBfLmeh5gSz-WPOTDZ9GVi9S3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/fb7864-5795-4208-abe0-08542454d16b/1/9v5VLNQmHUC6c_AtiguXiv9VBlw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/fb7864-5795-4208-abe0-08542454d16b/1/nlBfLmeh5gSz-WPOTDZ9GVi9S3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.111.212.0/22
IPv6:
2001:678:9b0::/48
2001:678:9c0::/48
2001:67c:2878::/48
Signature Algorithm: sha256WithRSAEncryption
07:5d:62:24:b8:ad:e8:49:34:3a:f0:4a:7e:c4:05:44:68:29:
0d:02:c5:b3:5d:b6:2f:f6:72:0a:95:f3:56:be:20:92:3b:8e:
6d:14:78:af:00:df:8c:b3:4d:fa:7a:63:26:9a:8d:bf:f8:ef:
56:78:1e:7e:9a:1f:d4:46:d2:aa:c7:22:d0:cc:61:8f:ec:ef:
93:f6:be:9d:9a:5d:4e:91:d6:fb:46:55:7f:b6:1d:91:ae:b0:
42:87:b5:06:35:74:0c:8a:37:85:a6:d9:5d:24:dc:ff:e3:51:
5f:6a:8d:55:0a:e9:2c:a6:b4:c8:11:0b:b4:7b:b2:ea:26:82:
5d:a5:51:d9:e4:1e:2b:b5:16:62:09:9d:08:dc:f8:8e:b0:b0:
16:7b:9d:df:2d:83:78:de:2f:55:29:2c:dd:44:84:aa:62:4e:
e5:4b:a4:6a:44:7d:e4:62:0c:2d:7b:76:26:08:ec:ee:25:01:
98:75:3e:27:4b:89:ef:dc:26:9e:50:15:e6:fd:a7:26:5c:1d:
22:52:38:c3:31:ca:0a:50:51:e1:82:95:3f:49:1e:9a:34:51:
5c:78:b5:ce:91:fb:f4:55:4d:fd:04:d0:1d:ed:32:cf:36:f4:
dd:8d:2a:19:76:ed:04:2f:12:ca:02:e1:11:f8:f9:aa:74:77:
54:f9:3c:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:24:40 2025 by rpki-client