Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/8540db-f901-433b-81bb-97d55f391561/1/l8INnv3QTRexkISN97lg6HuKeCY.roa
File: l8INnv3QTRexkISN97lg6HuKeCY.roa (raw, json)
Hash identifier: pDEsYARUuEJK1pYQPfyythtLkxkCfRaxj9c1qzwCEIU=
Subject key identifier: 97:C2:0D:9E:FD:D0:4D:17:B1:90:84:8D:F7:B9:60:E8:7B:8A:78:26
Certificate issuer: /CN=219527c224f00a28b2f4cb4e1312d748d5ca5169
Certificate serial: 01941FFA144FE62694A36F1F6B79300A398D
Authority key identifier: 21:95:27:C2:24:F0:0A:28:B2:F4:CB:4E:13:12:D7:48:D5:CA:51:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IZUnwiTwCiiy9MtOExLXSNXKUWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/8540db-f901-433b-81bb-97d55f391561/1/l8INnv3QTRexkISN97lg6HuKeCY.roa
Signing time: Wed 01 Jan 2025 03:47:50 +0000
ROA not before: Wed 01 Jan 2025 03:47:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208092
IP address blocks: 193.9.156.0/23 maxlen: 23
193.16.40.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:14:4f:e6:26:94:a3:6f:1f:6b:79:30:0a:39:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=219527c224f00a28b2f4cb4e1312d748d5ca5169
Validity
Not Before: Jan 1 03:47:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=97c20d9efdd04d17b190848df7b960e87b8a7826
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:8f:25:c5:e6:ff:bf:46:bd:7e:9e:07:be:45:
1b:e6:8c:e4:09:6d:4c:44:08:a6:80:c1:e1:57:76:
cc:b9:c9:97:85:c8:fb:68:12:39:b4:61:63:5e:b0:
91:92:b4:c2:1c:ed:7f:f4:40:18:e3:64:70:dd:ce:
e9:e5:8b:03:93:80:be:58:1e:36:1f:37:77:71:70:
af:58:00:8d:ac:64:73:d7:7a:fc:0b:a8:14:f6:75:
78:c0:5e:e8:32:26:12:cb:e1:6c:d8:df:ee:09:c7:
f5:68:8a:51:e2:ad:4c:e0:3d:e4:8c:89:83:7d:f7:
cd:9d:5f:de:bc:5d:3b:f6:2b:ac:95:0a:fd:b6:be:
c6:07:e7:e5:f3:f2:e5:a1:b6:1b:a8:53:4e:78:42:
62:eb:30:b4:1e:63:da:6e:66:29:df:e4:7d:11:7c:
b0:06:29:52:ae:26:c8:a8:52:a1:79:47:5c:39:2d:
a5:e4:de:f5:87:d4:c6:cd:10:f2:4b:26:97:ea:5a:
32:65:03:e2:69:77:5e:ef:ac:99:8c:c0:15:a1:76:
11:eb:ca:17:60:5c:80:55:89:fc:dc:ba:94:3c:2b:
2e:c2:75:1a:e6:91:24:30:af:6d:80:29:94:df:97:
34:88:67:c4:b1:34:64:71:f1:36:dc:8e:f9:77:df:
08:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:C2:0D:9E:FD:D0:4D:17:B1:90:84:8D:F7:B9:60:E8:7B:8A:78:26
X509v3 Authority Key Identifier:
keyid:21:95:27:C2:24:F0:0A:28:B2:F4:CB:4E:13:12:D7:48:D5:CA:51:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IZUnwiTwCiiy9MtOExLXSNXKUWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/8540db-f901-433b-81bb-97d55f391561/1/l8INnv3QTRexkISN97lg6HuKeCY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/8540db-f901-433b-81bb-97d55f391561/1/IZUnwiTwCiiy9MtOExLXSNXKUWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.9.156.0/23
193.16.40.0/23
Signature Algorithm: sha256WithRSAEncryption
84:96:b6:99:bd:17:a8:30:f2:db:e8:e2:24:f0:be:aa:98:cf:
d2:2f:95:b4:8c:bb:c6:56:24:38:3f:b0:4f:ba:ed:0d:a8:c2:
6c:57:8e:d2:e1:c9:1e:b2:e3:a2:bb:1b:34:5a:6d:35:9f:46:
72:e1:4d:7b:35:af:a6:8e:0b:49:28:84:98:cc:77:bc:01:1f:
18:fb:e9:61:af:48:ec:f8:9f:71:d6:26:85:3d:95:d7:41:e2:
31:95:8e:8f:6d:88:89:02:cf:b0:83:18:e4:c7:01:bf:b9:74:
05:2a:73:30:07:25:ee:f8:88:6b:77:47:2d:1d:eb:07:c0:d1:
00:6c:a8:10:da:69:e3:b8:b6:1d:dd:49:ea:ff:80:67:44:9b:
5e:23:ab:37:75:79:1e:b5:ee:e5:b6:f7:49:c7:90:50:64:c1:
18:b4:6e:fc:0b:17:bb:99:f4:43:2f:13:43:c1:5f:a2:1d:b7:
6a:6c:88:16:63:15:5a:99:d3:18:1d:b3:7f:6e:b2:76:86:f5:
0a:63:e0:5f:d2:21:b9:81:43:d3:60:c9:ef:71:0e:5c:9f:68:
f5:04:08:a9:41:7f:e0:c3:f3:11:d6:f1:bf:e4:fc:03:c9:f0:
23:aa:e2:f6:c5:46:32:d9:f5:87:c0:11:cf:4b:5e:b5:2f:06:
07:a9:bc:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:39:16 2025 by rpki-client