Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/28d3cd-d799-43f6-87fe-f5baeaee865a/1/DLubGHoQGgvM_j186blmZIGyLZM.roa
File: DLubGHoQGgvM_j186blmZIGyLZM.roa (raw, json)
Hash identifier: TEMPnE8yGqVWn4gW4EZOnV9emzYVMGQtqJpNZOLj0Yc=
Subject key identifier: 0C:BB:9B:18:7A:10:1A:0B:CC:FE:3D:7C:E9:B9:66:64:81:B2:2D:93
Certificate issuer: /CN=8b17fe8dd72c50c628dea973158d0f942326da8f
Certificate serial: 019420D5BD0E02AE9E99B700D0A4A92C9024
Authority key identifier: 8B:17:FE:8D:D7:2C:50:C6:28:DE:A9:73:15:8D:0F:94:23:26:DA:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ixf-jdcsUMYo3qlzFY0PlCMm2o8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/28d3cd-d799-43f6-87fe-f5baeaee865a/1/DLubGHoQGgvM_j186blmZIGyLZM.roa
Signing time: Wed 01 Jan 2025 07:47:46 +0000
ROA not before: Wed 01 Jan 2025 07:47:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9208
IP address blocks: 193.58.48.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:bd:0e:02:ae:9e:99:b7:00:d0:a4:a9:2c:90:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b17fe8dd72c50c628dea973158d0f942326da8f
Validity
Not Before: Jan 1 07:47:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0cbb9b187a101a0bccfe3d7ce9b9666481b22d93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:2c:57:75:11:aa:59:d7:d9:24:bb:64:08:c8:
5d:6b:87:a6:63:19:7e:0d:46:6f:6a:75:70:89:0a:
7d:ac:c4:72:a3:55:0c:2f:c6:43:8a:b1:00:46:ea:
c7:34:bb:79:d6:b3:08:ad:8a:80:e0:20:76:2f:39:
d0:5a:0f:9b:2d:d2:92:a3:17:c3:9b:90:ad:2a:5c:
e3:cb:95:3e:63:62:7e:b9:b6:e4:64:b5:56:d9:66:
67:bb:a0:5f:d2:0d:1b:24:bc:19:53:41:c5:1b:ab:
df:1b:f6:7d:7d:aa:04:40:91:06:e4:c5:e8:54:ed:
b1:03:ee:66:77:9c:b5:ba:1f:93:ce:44:9d:a3:e4:
b7:ab:2f:33:47:f8:c4:82:f7:1b:6f:41:9f:19:31:
0d:45:fe:f5:9f:1e:32:db:f1:96:44:a2:0c:3e:b0:
ab:23:fb:a7:41:2d:4f:5a:e4:a6:8c:c7:34:17:7e:
25:0d:e2:c2:14:98:0f:0b:0b:8a:78:8d:67:77:82:
fd:62:cb:b4:d5:3f:d7:e7:e0:79:76:62:5c:8a:c2:
a8:17:62:34:8d:47:c7:dd:9b:1f:a8:49:63:59:f1:
67:53:2a:6b:e0:e9:7b:b2:e8:ca:ce:69:38:11:6e:
cb:33:dc:1f:54:44:64:3f:f8:eb:fe:34:b4:1d:da:
7c:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:BB:9B:18:7A:10:1A:0B:CC:FE:3D:7C:E9:B9:66:64:81:B2:2D:93
X509v3 Authority Key Identifier:
keyid:8B:17:FE:8D:D7:2C:50:C6:28:DE:A9:73:15:8D:0F:94:23:26:DA:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ixf-jdcsUMYo3qlzFY0PlCMm2o8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/28d3cd-d799-43f6-87fe-f5baeaee865a/1/DLubGHoQGgvM_j186blmZIGyLZM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/28d3cd-d799-43f6-87fe-f5baeaee865a/1/ixf-jdcsUMYo3qlzFY0PlCMm2o8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.58.48.0/20
Signature Algorithm: sha256WithRSAEncryption
e9:29:c8:a5:c0:f5:a1:5b:7d:d1:a5:ad:26:03:ee:af:97:99:
d5:2a:bb:bb:d2:8d:82:f0:d7:f1:7c:f3:d2:ed:06:74:aa:64:
11:81:04:c6:1c:ad:69:d9:3c:81:a5:25:d3:50:84:a9:c4:b7:
02:2d:4a:1b:92:fa:b4:52:47:85:7f:f8:ca:07:95:7d:fa:05:
1f:10:b1:c2:ad:c1:36:63:6a:26:ab:e2:b1:14:42:7f:8b:52:
40:4a:1a:8f:6c:44:30:f7:de:03:1f:50:90:60:cc:c3:7f:d7:
5b:87:ae:29:2c:0d:c1:70:51:57:b5:a0:8a:ef:dd:4e:f1:50:
06:24:a5:bb:39:9b:36:fe:28:f2:e4:77:a7:99:51:70:d3:b4:
6f:3d:c7:d8:bb:09:76:d5:b7:00:22:8b:ad:f0:fd:87:c1:71:
2e:72:93:04:ad:8b:b9:9d:1b:97:ac:f6:8b:ba:ea:80:ee:b8:
ef:1d:5b:5f:a2:0a:d1:73:de:14:b0:eb:80:78:eb:c0:04:50:
51:66:aa:71:f5:0c:f8:31:53:18:a0:89:fe:2f:ab:86:fe:0f:
76:d9:d0:80:2e:89:c8:6b:31:ec:8e:c5:45:45:7e:23:06:db:
1b:88:e3:e1:00:d4:b7:de:d2:40:01:14:87:ce:94:f0:eb:38:
44:d8:cb:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:56:52 2025 by rpki-client