Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/C9jlSQpiBO6Y73lSEYMO0KAZmVU.roa
File: C9jlSQpiBO6Y73lSEYMO0KAZmVU.roa (raw, json)
Hash identifier: bHV8b0r3RZhEMBuy9WHUg2/V18JXKTeCJEmR8xzO1XQ=
Subject key identifier: 0B:D8:E5:49:0A:62:04:EE:98:EF:79:52:11:83:0E:D0:A0:19:99:55
Certificate issuer: /CN=bde636ff523e5f3734227f33c44c2e50ff8d1ee2
Certificate serial: 0194258F1BBBF4F1EF749497F3FAA2AE3F1D
Authority key identifier: BD:E6:36:FF:52:3E:5F:37:34:22:7F:33:C4:4C:2E:50:FF:8D:1E:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/veY2_1I-Xzc0In8zxEwuUP-NHuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/C9jlSQpiBO6Y73lSEYMO0KAZmVU.roa
Signing time: Thu 02 Jan 2025 05:48:43 +0000
ROA not before: Thu 02 Jan 2025 05:48:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201228
IP address blocks: 193.135.99.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:1b:bb:f4:f1:ef:74:94:97:f3:fa:a2:ae:3f:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bde636ff523e5f3734227f33c44c2e50ff8d1ee2
Validity
Not Before: Jan 2 05:48:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0bd8e5490a6204ee98ef795211830ed0a0199955
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c6:ef:bb:69:96:54:5d:38:45:2b:19:7f:14:
d0:63:3f:4e:4e:8b:9b:7f:43:9a:0f:19:a9:c6:c6:
a8:25:bb:7a:4c:45:15:6f:75:e3:c9:f5:1e:64:a0:
dc:f4:5f:62:fe:f9:98:cc:df:1e:50:5b:c8:db:77:
33:cf:07:50:fd:1e:ae:58:a5:15:bd:fe:4d:23:7f:
56:dd:96:ea:11:c9:c2:6b:77:c5:98:a0:1b:54:5e:
5c:bf:b9:75:c2:e8:9d:6f:71:cd:32:10:7b:f7:7d:
da:98:bb:f5:9b:7f:9b:fe:25:2b:5d:8c:28:33:1f:
81:b3:62:a9:4d:40:77:f5:0f:b5:bd:f2:59:3e:b4:
df:56:15:09:2b:db:dc:f2:f0:54:05:d1:5c:65:d4:
3e:76:b2:e7:42:54:e5:25:40:e6:a2:b1:ec:e7:74:
65:0a:30:6d:ba:f6:7f:7b:95:f4:a1:de:25:05:aa:
02:ba:56:cf:a8:37:c3:f9:57:9f:f2:be:2f:06:67:
7d:79:db:db:ad:9f:11:83:4b:93:4d:01:bd:5e:28:
9c:e4:fd:94:45:e2:17:6e:14:49:39:a2:a8:f7:27:
99:d1:55:b3:aa:e0:55:06:a7:2d:37:44:b6:71:bf:
cd:66:dc:45:d8:a0:35:4a:45:ca:c4:c4:bc:16:e9:
a8:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:D8:E5:49:0A:62:04:EE:98:EF:79:52:11:83:0E:D0:A0:19:99:55
X509v3 Authority Key Identifier:
keyid:BD:E6:36:FF:52:3E:5F:37:34:22:7F:33:C4:4C:2E:50:FF:8D:1E:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/veY2_1I-Xzc0In8zxEwuUP-NHuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/C9jlSQpiBO6Y73lSEYMO0KAZmVU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/veY2_1I-Xzc0In8zxEwuUP-NHuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.135.99.0/24
Signature Algorithm: sha256WithRSAEncryption
82:9c:05:cc:5e:1d:3d:b0:2f:c2:cd:da:67:cd:e7:9d:bb:59:
64:a5:6c:74:4e:2f:70:19:a1:f1:7d:33:31:2a:c6:ce:d4:86:
29:01:5c:da:00:d4:9d:0c:50:45:e4:f4:c4:d2:cd:05:56:b4:
15:be:69:df:c2:b9:ee:d1:0a:70:d1:41:82:2e:8e:0c:78:c5:
44:64:73:44:7f:19:d5:98:04:59:12:4d:41:d4:bc:bc:76:f5:
e2:f0:1d:0a:24:67:f0:43:1b:18:90:33:32:d4:72:5d:4e:f2:
e5:bd:b4:aa:2e:2e:14:04:44:54:f5:bc:f6:60:d7:1a:0d:69:
bf:bd:96:d0:b8:38:26:21:39:98:97:1d:7e:24:64:9e:3b:9b:
c1:b8:47:5a:81:b9:11:9d:87:86:d1:79:0c:55:92:94:7c:34:
11:49:64:0e:78:18:db:64:42:d0:33:9e:8b:be:00:dd:7a:3e:
97:a6:97:61:ef:eb:89:7e:8e:80:50:ca:87:04:a1:d2:d5:f5:
2e:2b:fb:0b:e6:80:97:bd:41:1d:7f:83:a1:0d:d4:08:c3:d4:
cf:9b:f3:82:a8:46:2e:c8:9e:80:1d:a5:12:33:48:81:dd:e6:
9f:6f:61:a0:6c:96:15:fa:c9:ff:e7:53:c6:70:9a:fa:30:e4:
52:ba:7a:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:09:19 2025 by rpki-client