Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/8b532f-6782-4044-9efb-6725d98196c6/1/CK8FwiyJmMBb-zg5kXzIAY_6FI0.roa
File: CK8FwiyJmMBb-zg5kXzIAY_6FI0.roa (raw, json)
Hash identifier: XErrRj96RGdiXdkf0Z1TwKUF+3V+yB+0bX3FZbrkGHY=
Subject key identifier: 08:AF:05:C2:2C:89:98:C0:5B:FB:38:39:91:7C:C8:01:8F:FA:14:8D
Certificate issuer: /CN=d6ce49255f406a725593c62e1c408779586d56ef
Certificate serial: 0194258F7ED28127606972930CB47475A669
Authority key identifier: D6:CE:49:25:5F:40:6A:72:55:93:C6:2E:1C:40:87:79:58:6D:56:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1s5JJV9AanJVk8YuHECHeVhtVu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/8b532f-6782-4044-9efb-6725d98196c6/1/CK8FwiyJmMBb-zg5kXzIAY_6FI0.roa
Signing time: Thu 02 Jan 2025 05:49:08 +0000
ROA not before: Thu 02 Jan 2025 05:49:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50988
IP address blocks: 193.200.232.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:7e:d2:81:27:60:69:72:93:0c:b4:74:75:a6:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6ce49255f406a725593c62e1c408779586d56ef
Validity
Not Before: Jan 2 05:49:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=08af05c22c8998c05bfb3839917cc8018ffa148d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:8a:6d:66:8d:df:51:5b:f0:dc:67:6d:26:05:
d4:47:79:20:bd:2a:e9:9b:0e:2e:48:69:04:18:20:
69:b0:f1:15:8b:e6:3a:a0:36:ce:c2:9a:5e:d9:66:
40:ec:5c:dc:fa:54:e7:28:14:e8:94:b0:c7:5f:a1:
72:ef:fc:4d:2d:cf:ec:78:9d:74:59:4d:ef:73:87:
bc:fc:1b:fc:89:e5:ad:6d:36:b8:a5:ca:89:bc:1d:
2e:ef:87:8e:8e:07:05:90:eb:e9:70:d2:3c:75:d8:
b7:f2:d5:d0:e3:41:ac:19:8f:aa:ee:08:74:07:18:
80:75:d3:23:66:d0:ec:96:ee:97:d3:32:75:60:f3:
df:35:b6:2a:22:53:20:4b:5b:0f:bc:0d:1a:62:4f:
3b:f6:1f:6e:50:8f:f1:b6:05:b0:cb:8f:13:04:6c:
41:3c:4f:41:c3:ad:99:2b:53:c4:79:33:70:7c:d1:
0e:16:e6:14:5e:d1:b8:25:fd:02:4f:14:a3:f3:57:
fa:30:b2:2f:77:42:25:fc:40:bc:b7:a6:29:4d:48:
91:f6:24:0f:8c:1a:3c:8d:53:fa:f6:5d:9b:e4:e7:
ea:73:f9:a3:cd:4f:a9:06:12:73:88:43:f3:a4:a4:
93:e7:c8:a9:be:c1:07:dd:d4:82:ab:25:bb:15:ca:
c8:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:AF:05:C2:2C:89:98:C0:5B:FB:38:39:91:7C:C8:01:8F:FA:14:8D
X509v3 Authority Key Identifier:
keyid:D6:CE:49:25:5F:40:6A:72:55:93:C6:2E:1C:40:87:79:58:6D:56:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1s5JJV9AanJVk8YuHECHeVhtVu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/8b532f-6782-4044-9efb-6725d98196c6/1/CK8FwiyJmMBb-zg5kXzIAY_6FI0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/8b532f-6782-4044-9efb-6725d98196c6/1/1s5JJV9AanJVk8YuHECHeVhtVu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.200.232.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:5f:e8:6c:9d:09:a3:a0:02:b3:7d:d5:4b:ea:b8:3f:5d:72:
d0:d9:53:30:1b:1f:01:45:c4:26:f7:dc:38:3e:85:80:25:31:
0b:d4:5b:c0:a7:3f:96:2d:89:26:20:15:46:48:e9:84:18:96:
4c:45:a5:d4:31:43:2c:02:46:d3:51:2e:ca:06:02:88:67:1d:
2b:c7:06:a3:70:f6:1d:17:33:ba:21:a9:9b:f2:c0:c7:71:5b:
54:6c:6f:48:5a:d0:fd:07:f7:78:b1:7e:6e:1c:ca:f3:ce:b0:
61:ab:ce:9c:bd:d2:12:53:2a:78:3d:74:9d:89:9f:f6:93:0d:
6c:a1:61:71:bc:4e:ae:77:36:0f:7a:a4:8e:6c:e1:5a:17:a0:
6b:75:13:d1:47:a7:8e:7c:e1:13:93:a3:f2:91:5a:a0:ef:73:
b2:a6:02:cf:ce:f6:02:86:b1:02:83:36:6f:64:5b:95:32:d0:
e3:38:65:8d:ca:2b:05:19:bf:ba:af:6a:cb:b0:be:ab:33:1f:
28:27:23:66:2f:c7:28:57:86:19:0f:52:1a:5f:d7:0c:b7:11:
83:c2:0f:d2:f2:81:81:51:e3:6c:17:31:bd:81:bd:92:e0:69:
f9:0f:f7:82:44:40:31:77:53:8a:d5:d9:12:86:74:ef:43:9e:
90:99:d9:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:39:06 2025 by rpki-client